Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.mft
File:                     RY-8K-wAmQ5cw7QhdHwFV6jtu_8.mft (raw, json)
Hash identifier:          glifsPqp4fQZzJ7AxQwQzhMk3L/jXDq0wy6MQmpEhW4=
Subject key identifier:   06:1E:2A:35:9F:BF:C1:C9:A5:B1:7F:C0:29:F5:E7:AB:B3:24:B4:9E
Authority key identifier: 45:8F:BC:2B:EC:00:99:0E:5C:C3:B4:21:74:7C:05:57:A8:ED:BB:FF
Certificate issuer:       /CN=458fbc2bec00990e5cc3b421747c0557a8edbbff
Certificate serial:       01A08BD606EE5BCC07F8B624C78F051A0E56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.mft
Manifest number:          C2
Signing time:             Thu 10 Sep 2026 15:00:54 +0000
Manifest this update:     Thu 10 Sep 2026 15:00:54 +0000
Manifest next update:     Fri 11 Sep 2026 15:00:54 +0000
Files and hashes:         1: 8vX1WdlmM8tymTaEX4AMsj1Yp1U.roa (hash: wdVLNmwDr0kbfoI7x7yvRxbo7hOTDr5XiPVUT8cP3+4=)
                          2: PUjKVuvXyy_Bmuww0cD28b0h0YU.roa (hash: 2Hrc6A2H1DaOZgvfa2sIx+XtUdZTXzHJ1TKysCf+RYU=)
                          3: PvcdpObefkzVah2If1vGVRM5pPw.roa (hash: E2SK6HlEkywPIAxJejC343dtDicPwBaW8NfPI1M31po=)
                          4: RY-8K-wAmQ5cw7QhdHwFV6jtu_8.crl (hash: z6Exgg5ZIbSgolve+HvmD0qoO50uBB7hZhMI1XISjYI=)
                          5: v8lfLOKHVZnkrdD-G0CENmIoGFY.roa (hash: +aHQYF/Vd4+YgYybVszc6iY/MnmjqAxgJRPynynFvpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 15:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:d6:06:ee:5b:cc:07:f8:b6:24:c7:8f:05:1a:0e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458fbc2bec00990e5cc3b421747c0557a8edbbff
        Validity
            Not Before: Sep 10 15:00:54 2026 GMT
            Not After : Sep 11 15:00:54 2026 GMT
        Subject: CN=061e2a359fbfc1c9a5b17fc029f5e7abb324b49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:db:f2:8f:9b:60:d3:2c:8d:ab:c4:f9:e1:b6:
                    59:99:c3:d5:99:a6:b1:ae:d4:d8:47:01:68:8d:27:
                    9c:9c:79:b8:30:44:fb:5b:ff:d7:25:b7:a5:eb:e7:
                    51:c4:89:78:ed:cd:cd:54:94:14:92:77:63:fb:f1:
                    3d:9a:d2:95:2b:b7:20:90:7e:4e:8d:3a:ed:3b:e7:
                    0b:42:f2:97:2d:f6:80:97:2b:a2:aa:a5:8c:a8:1d:
                    ab:1f:e3:3e:52:77:90:fc:93:c1:a9:65:16:4b:a8:
                    61:a9:4f:d2:f3:a2:32:95:be:36:dd:0d:7d:e7:10:
                    fc:a9:d6:73:7a:92:e8:f0:39:48:45:b7:7d:b7:2a:
                    e0:e0:16:61:14:3b:4e:6d:39:f4:47:20:ff:4a:b8:
                    cd:a0:4c:8f:6f:fc:02:c8:0f:b9:91:d7:db:0d:86:
                    11:50:fc:ff:ed:85:20:af:dc:77:ab:22:98:c5:d5:
                    a4:f8:e0:b4:a3:b9:8e:06:c7:1c:15:90:08:5b:9f:
                    53:6d:11:90:e8:77:b1:f4:8d:63:2e:d9:6d:63:71:
                    28:29:60:70:e4:9d:5b:ca:f4:2a:9c:94:9b:ef:b8:
                    79:be:dd:95:ae:bb:7c:47:ce:b3:98:06:72:d6:34:
                    d0:8f:4f:dc:3e:d4:21:cb:ad:8d:a3:f8:9d:b9:89:
                    d6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1E:2A:35:9F:BF:C1:C9:A5:B1:7F:C0:29:F5:E7:AB:B3:24:B4:9E
            X509v3 Authority Key Identifier:
                keyid:45:8F:BC:2B:EC:00:99:0E:5C:C3:B4:21:74:7C:05:57:A8:ED:BB:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:7d:42:03:f3:af:ff:9b:92:e9:b2:12:b4:f6:71:59:4b:c8:
         96:d2:b1:67:24:7e:c2:85:1c:c8:4f:b1:5c:e5:a8:69:f3:da:
         86:21:26:a1:2b:76:58:ee:f3:ba:c0:3d:57:61:65:20:3d:f3:
         6c:1e:ba:f1:8e:10:c1:57:4f:51:2f:99:18:e1:09:29:f5:b7:
         63:41:99:e0:0e:cc:86:4f:b9:61:35:4f:28:82:5f:aa:2c:64:
         6d:ae:50:5a:1e:51:5c:84:29:5f:4b:8b:ae:86:3b:3e:88:f6:
         14:f4:f9:15:94:90:a9:f3:19:56:40:9a:fe:68:64:9d:ec:7e:
         c8:e1:df:bf:70:72:f7:9e:7d:2b:93:fd:9d:cc:c4:2f:eb:b5:
         a8:2d:17:f7:d1:89:85:85:64:95:af:e8:b3:06:a8:93:76:d7:
         a7:29:a4:c8:89:43:63:62:54:d4:8a:d0:60:31:34:eb:8f:45:
         92:f5:f7:1a:5e:04:23:6d:0b:00:14:2f:25:9b:a2:cb:61:23:
         b1:a8:99:6c:92:3a:d3:f1:65:21:39:4a:2b:3d:93:38:ee:b4:
         b0:00:6d:b6:8d:00:be:b0:32:73:bb:1a:93:60:55:b2:d2:f7:
         0c:80:74:95:db:80:db:a9:74:5b:fb:39:a5:54:10:6f:ff:91:
         95:4c:ec:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCL1gbuW8wH+LYkx48FGg5WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OGZiYzJiZWMwMDk5MGU1Y2MzYjQyMTc0N2MwNTU3YThl
ZGJiZmYwHhcNMjYwOTEwMTUwMDU0WhcNMjYwOTExMTUwMDU0WjAzMTEwLwYDVQQD
EygwNjFlMmEzNTlmYmZjMWM5YTViMTdmYzAyOWY1ZTdhYmIzMjRiNDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Nvyj5tg0yyNq8T54bZZmcPVmaax
rtTYRwFojSecnHm4MET7W//XJbel6+dRxIl47c3NVJQUkndj+/E9mtKVK7cgkH5O
jTrtO+cLQvKXLfaAlyuiqqWMqB2rH+M+UneQ/JPBqWUWS6hhqU/S86Iylb423Q19
5xD8qdZzepLo8DlIRbd9tyrg4BZhFDtObTn0RyD/SrjNoEyPb/wCyA+5kdfbDYYR
UPz/7YUgr9x3qyKYxdWk+OC0o7mOBsccFZAIW59TbRGQ6Hex9I1jLtltY3EoKWBw
5J1byvQqnJSb77h5vt2Vrrt8R86zmAZy1jTQj0/cPtQhy62No/iduYnWEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYeKjWfv8HJpbF/wCn156uzJLSeMB8GA1UdIwQY
MBaAFEWPvCvsAJkOXMO0IXR8BVeo7bv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlktOEstd0FtUTVjdzdRaGRId0ZWNmp0dV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9kYmQ5NTEtMjU5Yi00NzU5LWE1MTkt
OWM1ZTFkZWIyYzMzLzEvUlktOEstd0FtUTVjdzdRaGRId0ZWNmp0dV84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9kYmQ5NTEtMjU5Yi00NzU5LWE1MTktOWM1ZTFkZWIyYzMz
LzEvUlktOEstd0FtUTVjdzdRaGRId0ZWNmp0dV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj31CA/Ov
/5uS6bIStPZxWUvIltKxZyR+woUcyE+xXOWoafPahiEmoSt2WO7zusA9V2FlID3z
bB668Y4QwVdPUS+ZGOEJKfW3Y0GZ4A7Mhk+5YTVPKIJfqixkba5QWh5RXIQpX0uL
roY7Poj2FPT5FZSQqfMZVkCa/mhknex+yOHfv3By9559K5P9nczEL+u1qC0X99GJ
hYVkla/oswaok3bXpymkyIlDY2JU1IrQYDE0649FkvX3Gl4EI20LABQvJZuiy2Ej
saiZbJI60/FlITlKKz2TOO60sABtto0AvrAyc7sak2BVstL3DIB0lduA26l0W/s5
pVQQb/+RlUzswA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 01:13:12 2026 by rpki-client