Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.mft
File:                     yPZn5ggTAzhfE_1MttPaTYyxtsE.mft (raw, json)
Hash identifier:          nt3XuMhrJqvNiEj4Ov40wF8N26XWyhzIvP//0bgkpBM=
Subject key identifier:   F1:A2:9D:B5:64:F0:8D:58:FE:07:BC:56:E7:A7:A2:11:45:F5:3B:5B
Authority key identifier: C8:F6:67:E6:08:13:03:38:5F:13:FD:4C:B6:D3:DA:4D:8C:B1:B6:C1
Certificate issuer:       /CN=c8f667e6081303385f13fd4cb6d3da4d8cb1b6c1
Certificate serial:       01A17EF3B4443DD4148DFFBCF7048F2E64B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yPZn5ggTAzhfE_1MttPaTYyxtsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.mft
Manifest number:          0196
Signing time:             Tue 27 Oct 2026 20:01:02 +0000
Manifest this update:     Tue 27 Oct 2026 20:01:02 +0000
Manifest next update:     Wed 28 Oct 2026 20:01:02 +0000
Files and hashes:         1: 2Z6IYH5r9rEHXyb6yaUAQh53_hk.roa (hash: iFsFHaHiOwiJNWh0rDjxLKPBB1FTnSIyeAFgavIf9wA=)
                          2: yPZn5ggTAzhfE_1MttPaTYyxtsE.crl (hash: uuisJOoAJEPsnzHkzFeW891y+qkPPMZ5g+AvU6uSE0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yPZn5ggTAzhfE_1MttPaTYyxtsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 20:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:f3:b4:44:3d:d4:14:8d:ff:bc:f7:04:8f:2e:64:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8f667e6081303385f13fd4cb6d3da4d8cb1b6c1
        Validity
            Not Before: Oct 27 20:01:02 2026 GMT
            Not After : Oct 28 20:01:02 2026 GMT
        Subject: CN=f1a29db564f08d58fe07bc56e7a7a21145f53b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2a:0d:1e:2c:b3:d3:5f:ca:07:5e:55:ab:29:
                    2b:d0:99:7d:17:db:71:ac:08:b0:a9:36:96:ae:38:
                    26:35:66:b3:77:08:58:d7:72:8d:0c:d2:ce:51:56:
                    ff:c7:1f:ef:3c:a3:eb:a6:45:27:9f:a0:60:36:c0:
                    07:c2:2c:8b:12:90:2a:e9:84:13:a5:0f:09:f9:4c:
                    52:e9:1d:fa:d0:cc:cb:aa:27:15:37:00:e5:fa:0e:
                    ef:4d:98:db:09:3f:61:62:b2:89:22:7c:70:20:99:
                    fc:c5:16:3b:a5:9f:2f:d1:c4:30:a8:fa:c5:d1:da:
                    4c:13:c7:c9:a6:b3:57:8d:79:c4:fb:42:ca:6d:d8:
                    6f:fb:ec:c5:5b:fd:96:51:92:35:8b:7e:f5:4b:ac:
                    a7:64:75:84:bb:76:e8:65:47:2f:8e:e2:86:c2:57:
                    b1:f9:fd:4b:c4:72:19:88:8d:30:6d:38:77:de:3c:
                    b3:40:33:e9:8d:d6:12:8b:50:6d:1f:f6:e8:4a:32:
                    69:69:9e:42:65:83:2b:d8:40:a1:ef:df:7d:df:7d:
                    27:d2:8d:6d:54:42:1d:de:74:10:84:40:05:ba:6a:
                    6b:70:43:e9:48:8b:e4:3a:71:c0:8e:7d:f7:b6:e0:
                    a2:2f:2b:e1:68:31:4f:d6:01:a0:6c:ba:3d:69:df:
                    07:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A2:9D:B5:64:F0:8D:58:FE:07:BC:56:E7:A7:A2:11:45:F5:3B:5B
            X509v3 Authority Key Identifier:
                keyid:C8:F6:67:E6:08:13:03:38:5F:13:FD:4C:B6:D3:DA:4D:8C:B1:B6:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPZn5ggTAzhfE_1MttPaTYyxtsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b6:f6:fe:fb:a4:80:4a:30:4e:cd:64:58:ee:7c:24:bc:97:
         72:dd:b5:ae:9b:c1:c7:01:59:bc:96:88:8d:86:14:fb:c7:b5:
         d8:6e:04:90:2c:6a:50:1d:d5:3a:0f:ff:9b:8e:63:f0:31:03:
         47:ca:83:64:60:e4:8d:90:db:d2:3a:bf:9e:ec:3c:44:0d:26:
         04:b8:8a:54:31:4e:4c:e9:db:c4:82:ef:c2:6a:fd:e4:dd:92:
         36:8b:4e:da:a2:4c:0f:d3:b7:2b:16:b4:3b:e1:e4:76:e5:1d:
         40:45:9c:ba:f0:63:cd:e8:3a:57:bf:66:fb:d8:52:4b:13:54:
         a7:47:97:4f:a7:c1:89:7f:31:69:8e:ca:6c:4c:b8:a8:3f:3a:
         d5:17:a7:6e:ac:3a:6d:cc:9d:1f:a4:28:fd:20:a4:e7:e0:8e:
         95:0e:24:5e:d6:28:29:c1:dc:a5:21:7d:44:56:3c:1c:79:c5:
         d8:f0:f1:71:1a:b5:64:9c:29:3b:8e:d2:62:9a:cf:99:ff:e4:
         30:3b:c2:50:f7:98:f4:fa:89:17:33:b6:0b:fb:f5:ec:df:9f:
         97:95:6d:72:e7:3e:f3:57:cc:9c:5e:ae:e6:ea:f9:68:b5:fa:
         a2:51:3f:a4:c7:74:49:0b:2a:d0:a8:d6:20:52:ba:06:92:39:
         92:a0:35:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+87REPdQUjf+89wSPLmS3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZjY2N2U2MDgxMzAzMzg1ZjEzZmQ0Y2I2ZDNkYTRkOGNi
MWI2YzEwHhcNMjYxMDI3MjAwMTAyWhcNMjYxMDI4MjAwMTAyWjAzMTEwLwYDVQQD
EyhmMWEyOWRiNTY0ZjA4ZDU4ZmUwN2JjNTZlN2E3YTIxMTQ1ZjUzYjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyoNHiyz01/KB15Vqykr0Jl9F9tx
rAiwqTaWrjgmNWazdwhY13KNDNLOUVb/xx/vPKPrpkUnn6BgNsAHwiyLEpAq6YQT
pQ8J+UxS6R360MzLqicVNwDl+g7vTZjbCT9hYrKJInxwIJn8xRY7pZ8v0cQwqPrF
0dpME8fJprNXjXnE+0LKbdhv++zFW/2WUZI1i371S6ynZHWEu3boZUcvjuKGwlex
+f1LxHIZiI0wbTh33jyzQDPpjdYSi1BtH/boSjJpaZ5CZYMr2ECh7999330n0o1t
VEId3nQQhEAFumprcEPpSIvkOnHAjn33tuCiLyvhaDFP1gGgbLo9ad8HCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGinbVk8I1Y/ge8VuenohFF9TtbMB8GA1UdIwQY
MBaAFMj2Z+YIEwM4XxP9TLbT2k2MsbbBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVBabjVnZ1RBemhmRV8xTXR0UGFUWXl4dHNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yMDFlYTItNTVlYS00NmRhLWJjNmYt
YTA1ZmYzN2U4MmU5LzEveVBabjVnZ1RBemhmRV8xTXR0UGFUWXl4dHNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yMDFlYTItNTVlYS00NmRhLWJjNmYtYTA1ZmYzN2U4MmU5
LzEveVBabjVnZ1RBemhmRV8xTXR0UGFUWXl4dHNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrb2/vuk
gEowTs1kWO58JLyXct21rpvBxwFZvJaIjYYU+8e12G4EkCxqUB3VOg//m45j8DED
R8qDZGDkjZDb0jq/nuw8RA0mBLiKVDFOTOnbxILvwmr95N2SNotO2qJMD9O3Kxa0
O+HkduUdQEWcuvBjzeg6V79m+9hSSxNUp0eXT6fBiX8xaY7KbEy4qD861Renbqw6
bcydH6Qo/SCk5+COlQ4kXtYoKcHcpSF9RFY8HHnF2PDxcRq1ZJwpO47SYprPmf/k
MDvCUPeY9PqJFzO2C/v17N+fl5Vtcuc+81fMnF6u5ur5aLX6olE/pMd0SQsq0KjW
IFK6BpI5kqA1ww==
-----END CERTIFICATE-----
Generated at Wed Oct 28 06:15:29 2026 by rpki-client