Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft
File:                     Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft (raw, json)
Hash identifier:          +bK1Ggv1zEZ386i5GOiGoEVhAqZE5Qx5MX/SUb5R5lI=
Subject key identifier:   F9:AB:D3:9F:47:C3:B6:88:51:48:E4:A4:9E:FC:75:37:50:CC:3A:DF
Authority key identifier: 63:EC:63:94:13:4A:17:D6:49:7C:A3:AB:AC:D3:75:C4:01:42:F3:E8
Certificate issuer:       /CN=63ec6394134a17d6497ca3abacd375c40142f3e8
Certificate serial:       01A001A672BE70BD29FCE83E9623CE5B4B28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft
Manifest number:          6A
Signing time:             Fri 14 Aug 2026 19:01:20 +0000
Manifest this update:     Fri 14 Aug 2026 19:01:20 +0000
Manifest next update:     Sat 15 Aug 2026 19:01:20 +0000
Files and hashes:         1: XXWqfoKtAcCM7UMttu9lDzEg9w4.roa (hash: iyy9JReMyZF7zyDL2nrwHjgy/k2YaXeJe511rH+4Yew=)
                          2: Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.crl (hash: VVc5wVfu+L9Dd5issCDnnXEShuy19ccGr7yr3HYtDSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:72:be:70:bd:29:fc:e8:3e:96:23:ce:5b:4b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63ec6394134a17d6497ca3abacd375c40142f3e8
        Validity
            Not Before: Aug 14 19:01:20 2026 GMT
            Not After : Aug 15 19:01:20 2026 GMT
        Subject: CN=f9abd39f47c3b6885148e4a49efc753750cc3adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2d:3b:03:24:6f:8d:b4:e8:94:61:19:c9:d5:
                    cc:f2:61:cd:21:ad:72:3a:ae:f8:fd:b7:b4:19:47:
                    69:9c:2a:eb:98:2e:8f:df:19:d3:4a:bc:5c:65:88:
                    1c:2c:20:6d:06:19:a6:ce:77:73:94:d2:8f:c3:71:
                    a0:30:fd:1c:9d:f8:bf:0f:e2:b5:42:c5:a9:06:cf:
                    97:e2:d9:00:14:41:b5:5f:64:a6:9d:88:34:ca:8f:
                    fd:af:87:e6:1b:68:34:e7:5c:e0:8f:ec:43:7f:a5:
                    55:91:5c:38:5d:9a:f8:75:bb:83:a2:1c:ab:92:78:
                    47:1a:0c:13:7f:e5:73:09:71:c4:fa:1a:27:18:07:
                    33:04:77:5e:c5:86:cb:45:12:80:fd:80:38:51:8c:
                    37:a3:e1:6e:62:50:c9:5f:58:64:56:cc:d6:62:24:
                    5d:d8:dc:51:47:bf:12:3e:bd:28:09:8f:27:65:48:
                    eb:cc:00:f7:4d:07:95:18:5a:df:f4:58:ef:ac:0a:
                    29:d8:a9:e5:00:f8:a6:5d:e3:de:05:cc:b4:00:84:
                    c2:cd:5c:f5:ca:89:14:02:13:8d:03:ac:59:b7:0e:
                    1f:7a:fb:0a:40:43:37:4f:e3:ac:7d:8c:a2:b5:fa:
                    06:e9:ca:6e:8b:2b:ef:df:21:12:77:e6:1d:07:85:
                    eb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AB:D3:9F:47:C3:B6:88:51:48:E4:A4:9E:FC:75:37:50:CC:3A:DF
            X509v3 Authority Key Identifier:
                keyid:63:EC:63:94:13:4A:17:D6:49:7C:A3:AB:AC:D3:75:C4:01:42:F3:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:c9:1c:05:be:5b:36:4e:1b:b5:0b:dd:8b:df:63:59:5f:5b:
         d3:83:04:84:6d:e4:cf:91:bb:37:6b:3c:99:fa:f6:03:31:55:
         0e:78:b6:b8:72:86:0f:dc:08:a4:5f:26:93:a1:0c:a3:31:5d:
         a1:e2:e8:f0:d9:cf:d5:e7:96:b2:ef:4f:fd:4f:0e:fa:e9:3a:
         c8:5c:59:3b:bb:09:86:f4:ba:19:e9:f8:98:5f:34:b2:be:82:
         e7:79:8a:f1:3b:c1:7a:1d:33:bd:01:d2:d2:4d:36:80:c9:a7:
         4d:e2:d0:1a:2f:e9:29:5e:c6:79:99:55:3e:7b:13:90:0e:7c:
         90:d8:96:1b:60:90:96:7e:34:af:6c:c8:aa:10:8c:ee:31:5f:
         f6:24:b8:e7:10:26:ac:b7:9c:28:64:85:8c:8c:3e:41:30:c2:
         e5:51:7f:82:7a:f0:c9:b6:b2:6f:7e:31:e7:de:e6:1b:97:b4:
         c2:0c:03:a9:dd:ce:de:aa:87:cc:7c:85:36:97:73:00:3d:49:
         07:de:de:af:1d:dd:c2:79:d9:b1:23:a3:45:b7:1d:05:08:1f:
         f7:59:d0:e5:55:af:81:db:f0:8b:c6:1a:87:45:3e:f4:fe:b8:
         9d:5d:e6:54:68:a0:54:a3:ff:f9:74:d3:9a:90:97:0e:29:e7:
         35:b7:21:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:12:00 2026 by rpki-client