Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.mft
File:                     YOPZchUzu192hceOyY34FPrV1nw.mft (raw, json)
Hash identifier:          G1bRQCNDvt5sHWQfA1XPz4+eoHcPtjRHJOJdBR9UzNk=
Subject key identifier:   F1:C9:08:0B:D9:FF:23:93:9B:7E:EA:17:E5:BE:B6:D6:2D:C9:7E:F3
Authority key identifier: 60:E3:D9:72:15:33:BB:5F:76:85:C7:8E:C9:8D:F8:14:FA:D5:D6:7C
Certificate issuer:       /CN=60e3d9721533bb5f7685c78ec98df814fad5d67c
Certificate serial:       01A16FB7071FE5DBBD94B832E11E0A7FF519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOPZchUzu192hceOyY34FPrV1nw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.mft
Manifest number:          01EF
Signing time:             Sat 24 Oct 2026 21:00:28 +0000
Manifest this update:     Sat 24 Oct 2026 21:00:28 +0000
Manifest next update:     Sun 25 Oct 2026 21:00:28 +0000
Files and hashes:         1: YOPZchUzu192hceOyY34FPrV1nw.crl (hash: oxwcMe+6zMJa48Y8hK3jTWYoz+C+y+3mfqIKJaGbByw=)
                          2: okPZ0EMnwJL524YI5m6pf0dydug.roa (hash: 12kkW5rSqZtsaJDVjPRmMQKFWipqt44KCipTx0aZSLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOPZchUzu192hceOyY34FPrV1nw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 21:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6f:b7:07:1f:e5:db:bd:94:b8:32:e1:1e:0a:7f:f5:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60e3d9721533bb5f7685c78ec98df814fad5d67c
        Validity
            Not Before: Oct 24 21:00:28 2026 GMT
            Not After : Oct 25 21:00:28 2026 GMT
        Subject: CN=f1c9080bd9ff23939b7eea17e5beb6d62dc97ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:49:3a:d8:b7:48:20:9d:0e:97:95:4e:d4:46:
                    3a:84:da:32:d6:f8:37:ce:7b:ca:a4:44:8d:5f:59:
                    59:b6:38:68:f8:a3:e4:ae:a1:97:68:71:c3:ef:06:
                    b4:2d:59:a7:46:a6:5f:dc:f0:5b:4d:c8:64:2b:3d:
                    7d:9b:32:62:cc:c9:ec:e3:e5:9a:7a:1f:fb:1e:7b:
                    7d:f2:68:0b:1d:3a:ba:c0:4c:d1:08:aa:1d:f4:ad:
                    80:55:2d:a8:05:04:ce:11:c0:40:8a:d2:3b:16:d2:
                    62:43:4b:d9:4b:b7:c2:6b:6a:92:99:bd:e3:56:2b:
                    61:e7:7f:62:46:bb:62:18:30:e8:00:1e:fd:f9:82:
                    4a:ca:fe:a6:78:c7:c1:df:7f:9f:49:3c:64:5f:d5:
                    08:bb:f5:e2:52:e0:84:d2:bc:b2:4f:4e:ec:23:56:
                    71:98:bc:03:03:8a:2b:c4:5d:21:3e:fe:b3:76:74:
                    bd:6c:0d:2c:15:2c:0c:38:60:b1:ec:98:5f:1d:fe:
                    48:c0:eb:dc:4b:39:ea:c7:b3:a6:cc:7f:32:61:5e:
                    48:f2:b2:4a:50:df:b8:51:3d:e3:c1:ea:73:ee:20:
                    95:98:c6:d9:46:75:d6:14:97:01:50:a6:52:4e:12:
                    7b:73:a7:01:42:b6:9c:37:2b:d9:13:6f:23:90:22:
                    60:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C9:08:0B:D9:FF:23:93:9B:7E:EA:17:E5:BE:B6:D6:2D:C9:7E:F3
            X509v3 Authority Key Identifier:
                keyid:60:E3:D9:72:15:33:BB:5F:76:85:C7:8E:C9:8D:F8:14:FA:D5:D6:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOPZchUzu192hceOyY34FPrV1nw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:f8:38:76:95:d4:d5:7e:f0:a7:92:d8:35:a2:4b:f6:0f:41:
         56:13:c7:44:3c:a4:f6:a2:b1:2c:5d:e0:7c:63:ca:4f:bd:42:
         12:00:76:b4:41:58:1c:23:2a:13:79:3b:bf:b0:52:1c:4a:11:
         94:c6:ab:9e:34:2a:27:39:ef:00:76:4c:dd:32:eb:f2:fa:e4:
         68:a8:98:59:0d:96:db:eb:92:0a:16:05:d6:c2:a8:e8:5d:c4:
         96:bf:94:19:d5:f6:9b:9b:ea:99:98:b0:8a:f3:c9:58:d6:7d:
         37:24:3c:4b:54:03:bc:68:10:5f:ca:ac:f9:57:49:b1:dd:8e:
         55:d4:ed:39:40:fe:28:b1:7b:ac:ec:ab:43:85:52:18:cf:19:
         bb:89:c1:cd:5e:af:8e:2f:d8:ee:8c:59:5b:7c:6a:e6:82:9d:
         40:74:89:d7:da:a8:88:ed:6a:02:66:da:43:5a:10:18:66:16:
         b7:54:ae:e2:dd:0c:e0:b2:eb:56:c6:9f:a8:b1:98:2d:be:96:
         70:47:0a:8e:1f:db:8e:38:a7:fa:76:47:8b:51:4e:96:1b:09:
         70:8d:2d:0a:2c:b9:59:3c:47:e6:f3:69:3c:1b:82:db:df:4c:
         ca:22:c9:91:51:b4:4f:13:94:22:50:80:53:1c:d3:65:b0:34:
         e3:1e:21:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFvtwcf5du9lLgy4R4Kf/UZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZTNkOTcyMTUzM2JiNWY3Njg1Yzc4ZWM5OGRmODE0ZmFk
NWQ2N2MwHhcNMjYxMDI0MjEwMDI4WhcNMjYxMDI1MjEwMDI4WjAzMTEwLwYDVQQD
EyhmMWM5MDgwYmQ5ZmYyMzkzOWI3ZWVhMTdlNWJlYjZkNjJkYzk3ZWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkk62LdIIJ0Ol5VO1EY6hNoy1vg3
znvKpESNX1lZtjho+KPkrqGXaHHD7wa0LVmnRqZf3PBbTchkKz19mzJizMns4+Wa
eh/7Hnt98mgLHTq6wEzRCKod9K2AVS2oBQTOEcBAitI7FtJiQ0vZS7fCa2qSmb3j
Vith539iRrtiGDDoAB79+YJKyv6meMfB33+fSTxkX9UIu/XiUuCE0ryyT07sI1Zx
mLwDA4orxF0hPv6zdnS9bA0sFSwMOGCx7JhfHf5IwOvcSznqx7OmzH8yYV5I8rJK
UN+4UT3jwepz7iCVmMbZRnXWFJcBUKZSThJ7c6cBQracNyvZE28jkCJgiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHJCAvZ/yOTm37qF+W+ttYtyX7zMB8GA1UdIwQY
MBaAFGDj2XIVM7tfdoXHjsmN+BT61dZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU9QWmNoVXp1MTkyaGNlT3lZMzRGUHJWMW53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wZGQ1N2MtYWU3My00YTFmLWFhMTAt
MTg1ODg0ZTBiNTQ4LzEvWU9QWmNoVXp1MTkyaGNlT3lZMzRGUHJWMW53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wZGQ1N2MtYWU3My00YTFmLWFhMTAtMTg1ODg0ZTBiNTQ4
LzEvWU9QWmNoVXp1MTkyaGNlT3lZMzRGUHJWMW53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbPg4dpXU
1X7wp5LYNaJL9g9BVhPHRDyk9qKxLF3gfGPKT71CEgB2tEFYHCMqE3k7v7BSHEoR
lMarnjQqJznvAHZM3TLr8vrkaKiYWQ2W2+uSChYF1sKo6F3Elr+UGdX2m5vqmZiw
ivPJWNZ9NyQ8S1QDvGgQX8qs+VdJsd2OVdTtOUD+KLF7rOyrQ4VSGM8Zu4nBzV6v
ji/Y7oxZW3xq5oKdQHSJ19qoiO1qAmbaQ1oQGGYWt1Su4t0M4LLrVsafqLGYLb6W
cEcKjh/bjjin+nZHi1FOlhsJcI0tCiy5WTxH5vNpPBuC299MyiLJkVG0TxOUIlCA
UxzTZbA04x4hYQ==
-----END CERTIFICATE-----
Generated at Sun Oct 25 04:57:25 2026 by rpki-client