Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
File:                     YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json)
Hash identifier:          MqCT7y6bVfqkin94BESPd9vBuPhcs/M6dWrVgtiSVzI=
Subject key identifier:   1E:BE:5B:4B:68:D1:56:6D:A4:44:43:50:19:91:4F:E9:D8:57:CB:AA
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Certificate issuer:       /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial:       01A0822ED39C90070C8CE7025F8AE61F46F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
Manifest number:          11C6
Signing time:             Tue 08 Sep 2026 18:01:41 +0000
Manifest this update:     Tue 08 Sep 2026 18:01:41 +0000
Manifest next update:     Wed 09 Sep 2026 18:01:41 +0000
Files and hashes:         1: 0sTykt04zhafsgKWmG0fpAc6Xi4.roa (hash: s3D/zF9I60gRgjWMCWnW5l2vwcfUO0zatEx48bleBv8=)
                          2: 13bSAbvbvGDWUO5yvtSsKXnlK94.roa (hash: DXldFZAd6AGXUWvxh5LvcSzCrQoe+CYXwhAGhk24KDA=)
                          3: De_n5gWs77mFUbESDcEhMP4Zgu4.roa (hash: 6EezXySVgGXz55sVzTpFqjj+QzByDEb/wr63m1U01ek=)
                          4: T5zUGgRal9JKPPCQ5ILhLwlQlHM.roa (hash: YHDYE65RL2KgOZOOjjz6vjoQjHzxsBWW9qIdkVOIzBk=)
                          5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: C5zOYKYZ8CqteBrD5zIIKF1z9mVt9Wskt5wsh3kPC40=)
                          6: Z943jXHlAqEjC8HhkAmn0vuwcbY.roa (hash: zwEb4pXvmmR3brxpaMTgJgnaLu7vluGbc09IMA9MXt4=)
                          7: aZEJdlE8rryKdFsxcXIyoyt-SOg.roa (hash: BG6zGbPXxvvnXkdjQ9fWCyghzw5YTxYUyEjcqpnK0GU=)
                          8: d9cqCh7w_HREeS5tpm1EQv7bdkc.roa (hash: DnP+rNEbo3897fPDs3e26jS0WYx/AYH67Gkmxad3fpM=)
                          9: tL-DJ8EbDPZqo5Hcwxd2ywWIDr0.roa (hash: 7ypgmIY8clfcgfXd8ScXxIyNvL0UG8VUmIwT7yY7+ig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Sep 2026 18:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:82:2e:d3:9c:90:07:0c:8c:e7:02:5f:8a:e6:1f:46:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
        Validity
            Not Before: Sep  8 18:01:41 2026 GMT
            Not After : Sep  9 18:01:41 2026 GMT
        Subject: CN=1ebe5b4b68d1566da444435019914fe9d857cbaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1d:80:93:2f:ff:5c:a4:71:54:09:2d:16:75:
                    1b:b5:8f:86:71:57:e8:76:1c:3d:be:fb:7a:4e:4c:
                    8d:be:8c:b6:a3:e6:a8:56:2d:15:7f:26:87:51:52:
                    21:87:36:0b:c7:b8:05:00:10:ca:9e:df:a7:c4:da:
                    70:ff:eb:b3:94:0c:c0:fa:b8:9d:7b:1f:43:32:e8:
                    3f:98:78:35:aa:be:a9:19:47:0a:da:c5:b5:fc:89:
                    0e:54:e1:49:43:e1:9b:5b:b7:2b:d1:34:b9:1e:06:
                    30:4a:0e:4d:fd:a1:d0:b5:54:e4:4a:3f:d8:d0:93:
                    37:d7:d2:47:10:24:c3:7d:cd:d6:cf:53:a4:6b:78:
                    f1:6f:43:2c:42:48:b1:9e:26:38:7b:90:93:cd:3c:
                    f0:91:fd:32:e3:67:e4:de:37:78:a3:82:96:d1:d7:
                    08:c2:71:fb:aa:6b:d6:69:16:dd:d9:f5:c1:61:02:
                    68:dc:48:e5:53:b8:1c:4a:ab:d6:c4:d1:cf:12:31:
                    6d:da:26:1e:8f:c0:68:64:a3:8f:8a:c1:49:c5:45:
                    1e:11:85:e8:13:91:b4:6b:27:ba:e7:cc:6f:a1:a4:
                    61:1c:f0:04:51:ba:d3:02:30:0a:e6:59:21:9c:38:
                    9e:f6:15:bb:0a:a8:5f:36:52:ab:b7:01:80:03:3a:
                    3d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:BE:5B:4B:68:D1:56:6D:A4:44:43:50:19:91:4F:E9:D8:57:CB:AA
            X509v3 Authority Key Identifier:
                keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ce:6e:7a:f0:04:99:bf:9a:75:a7:78:ee:88:da:c9:7d:18:
         09:71:89:5e:b9:cd:6d:d6:02:b0:15:dd:38:b7:18:e4:8c:4a:
         5a:98:05:e3:2c:1f:d6:df:ea:60:72:67:2d:19:dc:a1:ad:c6:
         80:f4:18:6e:63:e0:d9:63:bc:87:15:b2:e0:f1:f5:20:a8:77:
         50:14:f5:b1:f0:64:92:a7:fa:4e:03:a1:7b:58:41:13:e4:98:
         25:1a:81:9f:44:f6:fb:b2:2e:84:90:be:98:7f:ff:9e:a5:77:
         d4:7b:d1:07:14:a0:47:93:d7:d2:40:cd:cf:6a:09:b1:c5:97:
         25:ec:cf:92:14:8a:4d:35:cd:17:39:f7:11:1a:64:15:6b:65:
         74:a6:00:e7:10:86:75:37:d2:a6:b5:a6:9f:df:7d:63:d8:9a:
         1a:fc:bf:50:15:b7:03:f1:63:fa:69:c6:1e:b1:be:8c:f7:e5:
         e2:b2:17:6b:5b:5f:40:07:44:a1:8f:c4:5a:76:77:9f:24:c7:
         9a:db:b1:05:3a:d0:ca:0a:74:bd:32:bf:19:f8:09:99:28:8c:
         22:95:43:9a:2d:e2:d2:32:51:53:e3:53:01:06:15:0b:7c:62:
         70:08:9e:6d:28:d3:0c:07:eb:8f:7c:0b:b8:b8:18:b5:04:7c:
         2d:72:31:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 01:33:27 2026 by rpki-client