Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
File:                     yJwsxInr5I9JBYSshm_jYsQRfnU.mft (raw, json)
Hash identifier:          8/mFGWGTA68k66vR/47wR/m86Jxcj5FVNm5nkZ/vXlE=
Subject key identifier:   4E:65:08:11:A7:CF:C4:A8:02:8C:F9:DD:0E:1F:10:A3:A2:68:6A:0A
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Certificate issuer:       /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial:       01A0897A85B02DFA4D2417A8DB8128C8F3D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
Manifest number:          1764
Signing time:             Thu 10 Sep 2026 04:01:43 +0000
Manifest this update:     Thu 10 Sep 2026 04:01:43 +0000
Manifest next update:     Fri 11 Sep 2026 04:01:43 +0000
Files and hashes:         1: F71lf1rO3_j_YrGDLp8vXCnWwNQ.roa (hash: 2T6cEG+G6vR7CgItj3CD3tb1JHo1M1LaioFUbAKMaFQ=)
                          2: KbGZziqCA41JgOpe8AUOSiv8rIM.roa (hash: MBAhT/6sVckMLfrlu1S3S4sTHwbcNuOAQSyBUhp+xNk=)
                          3: Lr_Xbb1THDKqD6RwPgUdUA9h3EY.roa (hash: cfMlImvmxi+0oJBR3nteg7NdpbusKTlCxQY6ByRViVA=)
                          4: ZkNagawyRZ70RDIXLqeICJ_NWvA.roa (hash: 1+wxgjSOWcm3+O0IK2qUtncsQ8Yyn6qzh3/LjTc9BqU=)
                          5: ba1PPFUfJQPbN0qUaPYUh_lra00.roa (hash: io880q/jxrQW2nbvQeP7+TanhHJv6EExV9pj2tnHEls=)
                          6: dNRPSnfq_fz0h0Bx9FN48757K24.roa (hash: PQQSUXtMe+CSMqNhT22afSsgYKHVv8p7crL3JYYOlA0=)
                          7: fotaW3reFeI2SLYUxkvM2Rp9oWU.roa (hash: 6ry4szc/4WpgdCqU6mLC/W0kQtFV5fQ4EQEyOj83ctw=)
                          8: yJwsxInr5I9JBYSshm_jYsQRfnU.crl (hash: 60e5vRL1spQca+K3AkoAqHFPkDOy9FuB8AF1iJGj3cc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 04:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:7a:85:b0:2d:fa:4d:24:17:a8:db:81:28:c8:f3:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
        Validity
            Not Before: Sep 10 04:01:43 2026 GMT
            Not After : Sep 11 04:01:43 2026 GMT
        Subject: CN=4e650811a7cfc4a8028cf9dd0e1f10a3a2686a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f8:ab:6d:db:53:67:32:a6:cc:50:fb:29:6a:
                    80:4e:97:5d:a6:f8:69:3d:6a:47:4e:0b:9e:1e:4d:
                    a1:25:88:78:a4:65:13:ea:3d:70:ff:80:7e:91:1c:
                    cf:f5:a2:3b:2d:f2:90:91:f6:89:0b:ed:ed:39:be:
                    aa:27:58:70:ed:c2:38:fe:1e:2b:31:7b:06:ca:70:
                    fc:11:c0:1b:28:a2:ba:85:28:f5:bb:77:e9:1b:13:
                    ed:ce:23:07:16:cd:63:31:33:d8:10:7d:e2:b3:cf:
                    0c:f8:4b:3e:8f:f4:3b:a8:2e:99:8f:db:af:9a:b6:
                    fa:58:25:5a:a9:41:cb:47:59:30:0c:42:a0:27:9b:
                    ea:2a:8b:28:97:7e:4b:8f:5b:a2:fb:68:b7:d4:46:
                    99:51:c1:ef:c4:33:7f:cb:53:96:1f:50:4c:d3:ce:
                    db:6c:65:de:5e:bc:d5:53:e8:85:7e:6e:87:76:c5:
                    c6:73:da:89:44:39:af:55:80:12:e4:1e:91:f4:c3:
                    46:26:80:73:ca:e3:0f:6a:47:9b:21:de:3b:f8:ed:
                    57:d0:6a:df:3d:9a:26:0f:ea:cd:c4:f7:05:b8:f8:
                    c9:64:2c:3b:56:2e:dc:92:87:a5:d9:df:c1:5a:6a:
                    49:1d:e6:d7:c8:c8:69:a8:ba:c1:4a:44:9d:a4:c4:
                    9e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:65:08:11:A7:CF:C4:A8:02:8C:F9:DD:0E:1F:10:A3:A2:68:6A:0A
            X509v3 Authority Key Identifier:
                keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e8:49:c8:22:7b:65:68:ef:44:03:5f:55:ad:6c:e7:ff:38:
         e7:bd:33:2c:3a:2c:78:83:f9:f3:5a:fc:ce:4d:47:b1:33:4d:
         3f:0b:e8:75:06:c6:1b:51:c0:36:28:ed:7a:92:f8:23:e2:34:
         5e:1f:db:26:45:20:7c:e5:2a:84:7d:2b:2b:43:a9:40:2e:26:
         82:92:4b:cf:c7:45:6d:57:1e:48:4c:5a:88:72:7d:aa:0e:66:
         31:fc:07:b0:aa:b9:73:d5:4d:03:6a:1e:d3:f7:49:28:d4:d0:
         e0:de:cb:00:61:4d:39:5d:2a:5e:de:bd:84:e9:23:23:87:8f:
         45:94:aa:6e:ea:b1:a2:c3:88:2d:06:f2:a8:37:cc:76:42:fb:
         c7:5a:cd:dd:ba:24:4d:73:78:04:aa:fb:17:95:d1:53:f1:73:
         df:4e:22:10:62:c9:71:c6:2b:be:e1:d5:15:5b:dd:14:e7:82:
         d1:dc:e5:ac:5f:5f:91:a9:9e:54:37:ea:34:7a:bc:59:76:b0:
         6c:48:c9:cb:46:9d:14:bc:fe:c4:49:81:ce:53:bc:c3:15:38:
         81:57:93:a4:9f:1e:ad:22:9c:36:51:0a:c5:10:f8:8a:af:e8:
         58:0d:f4:10:21:0b:8b:b4:61:27:12:0f:6d:49:91:c0:8a:6e:
         c5:74:b7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:18:22 2026 by rpki-client