Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
File:                     YPWqx2_mvykTNdGaZY5kiRBbhp8.mft (raw, json)
Hash identifier:          e/OdQm0NX4PTGMQtMzG2Hr3WKTxIO4K0m8W7cb+BGuY=
Subject key identifier:   26:37:B4:B2:05:07:0E:30:89:4B:2E:6A:9F:C7:64:AA:2B:29:28:D0
Authority key identifier: 60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
Certificate issuer:       /CN=60f5aac76fe6bf291335d19a658e6489105b869f
Certificate serial:       01A06E39763404ADCCF36900E310014FF0F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
Manifest number:          060B
Signing time:             Fri 04 Sep 2026 21:00:54 +0000
Manifest this update:     Fri 04 Sep 2026 21:00:54 +0000
Manifest next update:     Sat 05 Sep 2026 21:00:54 +0000
Files and hashes:         1: YPWqx2_mvykTNdGaZY5kiRBbhp8.crl (hash: LcLQXuyGJ4RJPsIlta48gZ8kfWJ6lXMg45Q7LD5B52s=)
                          2: nsMVjB3dBsEs4QDP-UqrSgiiMZk.roa (hash: 4KH9ak7vbK8YvGmfh6MjtuXURmPLUowjhWOo+NHtQgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:39:76:34:04:ad:cc:f3:69:00:e3:10:01:4f:f0:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f5aac76fe6bf291335d19a658e6489105b869f
        Validity
            Not Before: Sep  4 21:00:54 2026 GMT
            Not After : Sep  5 21:00:54 2026 GMT
        Subject: CN=2637b4b205070e30894b2e6a9fc764aa2b2928d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:51:98:6b:79:41:36:f2:ef:15:48:25:0a:77:
                    88:91:f7:fd:cb:b3:4d:e8:16:22:a8:e6:8d:1c:47:
                    9b:6b:17:60:a9:cd:1b:b1:c6:73:c0:8a:24:33:0b:
                    be:74:00:3c:7b:2a:85:0e:55:b7:6a:01:60:61:b0:
                    7b:22:a1:43:ee:a7:e6:a0:95:69:c5:41:b5:50:c8:
                    64:39:ab:78:9e:68:06:c4:34:3f:9b:b6:44:d5:1c:
                    08:6c:ce:9d:06:36:d8:b8:dc:e7:3d:31:77:10:77:
                    2f:63:70:43:e1:3b:50:32:73:75:a4:45:68:03:1c:
                    a8:61:e8:bb:fd:16:45:2d:ea:cb:77:b5:c7:6b:24:
                    f7:8a:64:f8:71:eb:30:c9:fb:b5:0d:3b:1d:ef:a3:
                    55:5b:99:f2:6b:ea:26:df:30:e7:fe:74:37:50:54:
                    77:46:86:00:60:bd:2b:08:43:c0:68:98:de:43:36:
                    e2:98:91:f1:f6:43:2e:33:bc:68:7f:8d:59:cb:64:
                    e2:40:60:44:e7:72:e8:88:bc:1f:c2:fb:d9:e9:85:
                    2c:82:cb:66:b5:41:a8:f8:fa:09:08:93:eb:8e:84:
                    ad:5f:53:a9:54:a1:7e:be:89:30:0b:3d:06:01:33:
                    af:b2:3d:b2:63:7f:e3:ea:ab:4d:eb:57:a1:09:6e:
                    31:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:37:B4:B2:05:07:0E:30:89:4B:2E:6A:9F:C7:64:AA:2B:29:28:D0
            X509v3 Authority Key Identifier:
                keyid:60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:36:b4:3a:fc:df:c1:6e:b3:cb:13:90:d3:b6:9c:1c:bb:f9:
         09:22:45:ce:f7:6a:54:66:a2:d7:db:7a:f2:59:df:50:9b:eb:
         a8:40:00:7d:b4:de:7a:6f:59:8a:b1:f8:93:f9:d1:51:98:e0:
         bd:a2:37:cc:b4:6b:79:bf:b0:2f:7c:f3:13:68:f4:76:5b:0b:
         63:e3:d5:da:e3:9b:76:4b:ba:c7:fb:c0:68:a7:bf:1d:d2:d9:
         72:7f:27:f3:3f:ea:6d:57:83:98:20:c1:cb:ae:9f:56:99:8a:
         f0:8e:e5:c5:9e:f5:4a:63:9f:64:a6:e6:2e:ba:f8:9d:dd:50:
         79:61:e6:97:cd:32:89:e4:d9:84:e8:40:a9:d1:4a:15:56:17:
         e1:45:43:91:be:0c:98:f5:41:df:52:a7:01:3a:f9:c4:dc:e3:
         ca:a3:20:34:11:9f:ef:7e:17:fa:db:b2:3b:7c:92:f7:f3:0b:
         ee:24:ec:10:24:98:ba:f2:97:8c:7e:66:a5:87:9e:32:ef:26:
         d5:c0:7f:d8:ab:c5:41:a6:96:22:1c:3a:d7:e0:2a:10:04:74:
         4c:a5:07:90:25:a0:8b:69:5d:9b:08:c6:ad:93:8c:a0:3d:66:
         95:de:8a:57:9a:cd:34:e7:ab:de:86:55:07:ca:8a:1c:2e:53:
         e4:84:9a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:37:46 2026 by rpki-client