Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
File:                     yyVmhD4D1jmkYLG9hr9pwcOfixE.mft (raw, json)
Hash identifier:          nYvPDqokHtyaLpi0X2MfqN4U3icqtlM2VMqjALpqLGw=
Subject key identifier:   2D:42:46:64:44:45:E1:18:69:A1:2D:70:D5:75:D6:24:74:3E:79:7A
Authority key identifier: CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
Certificate issuer:       /CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Certificate serial:       01A180AB1196C81F864754704D561CFC8663
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
Manifest number:          171F
Signing time:             Wed 28 Oct 2026 04:00:57 +0000
Manifest this update:     Wed 28 Oct 2026 04:00:57 +0000
Manifest next update:     Thu 29 Oct 2026 04:00:57 +0000
Files and hashes:         1: fX_U5i8_505QcoxrQlZ0CvkYmQI.asa (hash: aVCE2GeGq3K644sCZQdXHhaAtDF/U4Oz4kWE7lxH4VQ=)
                          2: yyVmhD4D1jmkYLG9hr9pwcOfixE.crl (hash: ZMYQHDL5FPxfHnU8XiYUZF7hP9YGsJxJKw/EsFRhIqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 04:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:ab:11:96:c8:1f:86:47:54:70:4d:56:1c:fc:86:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
        Validity
            Not Before: Oct 28 04:00:57 2026 GMT
            Not After : Oct 29 04:00:57 2026 GMT
        Subject: CN=2d4246644445e11869a12d70d575d624743e797a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:61:28:12:8e:e9:d9:4f:1c:df:f9:83:15:9b:
                    d0:fc:5c:50:6a:ef:f0:3d:1e:ce:bc:0b:c9:f3:b4:
                    ac:91:48:de:a5:3c:7b:b1:b4:79:12:7e:d7:db:41:
                    54:d5:e1:d6:6e:df:3e:59:01:f5:34:0b:7a:fb:37:
                    93:a3:f4:cd:47:fc:53:42:a9:1d:e9:79:4b:30:57:
                    a1:6e:b9:d9:e5:3a:5c:cc:0f:47:44:b8:2d:5b:14:
                    30:7c:c7:e5:b4:20:08:32:c7:4e:ea:4a:49:04:de:
                    c8:12:97:8c:cd:f5:a0:4a:5c:c4:27:15:1e:30:09:
                    44:f1:05:22:32:cd:96:64:73:85:98:fb:b6:5f:54:
                    c9:b1:6f:30:9e:f4:dd:91:6a:9f:5d:71:cb:d0:09:
                    72:ba:85:81:2d:5a:12:7c:e3:19:a7:64:49:ca:77:
                    77:f8:1d:d2:81:12:45:f1:c0:22:a2:d3:a7:c8:95:
                    34:3a:89:26:27:35:d1:55:ca:74:e0:fb:03:a5:87:
                    97:85:6f:33:b8:e3:b8:cc:66:bc:95:c6:ee:fe:f4:
                    77:de:e1:fc:cb:65:79:fd:96:7c:38:5b:a1:d3:33:
                    be:60:89:32:09:ce:92:b8:3b:9a:5a:ad:e6:73:6b:
                    ac:f3:8f:83:b4:7c:27:c2:cd:f6:50:68:29:05:22:
                    91:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:42:46:64:44:45:E1:18:69:A1:2D:70:D5:75:D6:24:74:3E:79:7A
            X509v3 Authority Key Identifier:
                keyid:CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:8d:d3:71:be:3b:e0:4b:7f:3c:4c:28:d8:93:ee:89:9d:54:
         d3:65:9d:05:39:9e:ed:73:06:ec:d4:fe:56:0c:ba:78:f8:55:
         a9:ff:9d:a6:31:03:80:63:0d:d4:46:5d:57:43:57:59:33:47:
         c2:0c:cf:5a:53:ae:e8:c8:dc:d7:e2:63:8f:99:04:fe:cc:7b:
         fc:f4:0a:58:dd:c0:db:af:92:16:e8:e7:1a:24:d9:14:7e:ac:
         da:54:55:97:ae:8f:91:73:32:4f:80:ed:14:8d:37:fa:a6:4f:
         62:48:68:74:33:a5:90:e5:73:3b:d1:e5:40:d7:d4:05:f8:ef:
         56:dd:89:d7:d5:a7:a7:47:12:99:33:de:ba:a9:17:17:0a:5c:
         78:9c:83:50:c1:d7:18:da:f1:6f:ee:33:9b:fe:90:ee:d1:f0:
         af:49:3d:0c:88:0d:5e:1a:7e:57:67:6c:02:cb:22:32:d0:c2:
         c0:cc:3b:85:69:63:4b:e5:17:13:d2:6e:ed:a9:cf:dd:11:e8:
         87:0c:77:8f:60:58:54:bf:d2:ee:9b:7a:38:09:96:b6:d4:7e:
         80:4e:da:bb:a5:b9:fe:b5:db:9f:24:50:2e:ac:75:1b:10:37:
         17:94:49:d8:1c:da:97:e7:d7:84:95:a3:90:e4:9c:9c:58:5f:
         81:0c:ef:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:36:35 2026 by rpki-client