Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
File:                     YI5qalQBfdO5sszjX9Wpp_KkVJg.mft (raw, json)
Hash identifier:          gilroFDvuagUOCSRaIjvpOOrI1Ikgu6Q88SypFGiYzo=
Subject key identifier:   27:CF:57:11:87:8E:A7:21:EA:D6:88:4F:5C:5A:B7:A9:84:03:CD:8D
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Certificate issuer:       /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial:       01A11D51AE9F58A6D806F54D54D010A15403
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
Manifest number:          1A96
Signing time:             Thu 08 Oct 2026 21:00:54 +0000
Manifest this update:     Thu 08 Oct 2026 21:00:54 +0000
Manifest next update:     Fri 09 Oct 2026 21:00:54 +0000
Files and hashes:         1: EGcAzbKTUnqrJBWDw9Zl1NjvipA.roa (hash: WN1W+AcOMLOyw+Z7FxISMQd+TynXYraLEQDBrawgt44=)
                          2: YI5qalQBfdO5sszjX9Wpp_KkVJg.crl (hash: lMq1hpDXzR2Lwq9VcXwat4wJABtrkJcVHOOO12yhBJk=)
                          3: _tJiHAhGvLVPtYOMlLKCBsGuaeI.roa (hash: 0t/lW4HNsvLF4G+Bu7vWjQlegvcFtdB8mR4eqRFVFzU=)
                          4: d-N2YiUYpoOLPomAp2JVyicVc40.roa (hash: zETEJQC7tB8lRhNeIGpvA+FfF5ncGBNLatmPmvMsTNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1d:51:ae:9f:58:a6:d8:06:f5:4d:54:d0:10:a1:54:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
        Validity
            Not Before: Oct  8 21:00:54 2026 GMT
            Not After : Oct  9 21:00:54 2026 GMT
        Subject: CN=27cf5711878ea721ead6884f5c5ab7a98403cd8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bd:c5:4a:71:f3:04:68:fe:63:e1:35:50:6e:
                    c3:27:42:bc:2e:d6:73:75:50:19:6d:94:56:37:d1:
                    e6:03:a4:06:de:f4:2c:21:14:a1:43:5e:b9:86:c5:
                    d0:c3:dc:b9:a6:ef:1a:9c:0a:9a:4a:f0:1f:be:92:
                    42:0a:71:5f:e5:c2:f2:80:ab:f1:ff:ce:af:68:68:
                    22:8d:4e:be:32:81:3c:83:a0:f5:91:d4:0c:3e:04:
                    0f:84:e8:d1:2b:aa:ae:85:ab:d7:0a:06:5c:43:4a:
                    ec:f4:29:f5:e1:19:6c:8d:46:3c:ce:89:82:9e:56:
                    a3:99:b0:32:47:8e:cb:cb:0a:89:63:92:08:cf:f2:
                    30:72:74:83:38:88:e1:b8:3e:0c:8a:de:25:40:62:
                    97:e0:42:16:89:1a:5f:63:34:af:b4:4e:69:1f:9f:
                    54:50:ee:44:98:32:ab:a2:5c:56:b4:f2:8c:e6:c8:
                    77:72:53:d4:ee:d2:90:7f:d3:d2:55:ab:0b:b5:a0:
                    47:e4:4a:ca:7d:db:fc:2d:28:9b:4d:b5:ed:d9:76:
                    63:12:24:f9:57:41:d6:0d:89:62:94:e0:13:97:06:
                    76:d1:e0:b0:62:0f:b2:cd:31:0d:5d:0e:ca:7f:f6:
                    53:51:a1:58:78:ba:0c:13:0a:bb:1f:23:71:28:30:
                    0b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CF:57:11:87:8E:A7:21:EA:D6:88:4F:5C:5A:B7:A9:84:03:CD:8D
            X509v3 Authority Key Identifier:
                keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:46:86:ff:c6:33:4e:54:21:c5:a2:cb:38:c6:45:b1:a5:6e:
         52:70:62:f7:96:ed:a2:74:25:28:81:b8:9c:05:a8:21:e9:0e:
         15:38:11:1f:52:36:d5:99:18:b5:94:0f:32:d4:56:27:49:c4:
         13:a8:10:90:9c:ba:65:4b:47:87:42:e4:58:a7:5e:6b:d3:68:
         bb:ba:4a:c6:34:d9:01:c3:f0:cd:d3:50:d8:89:19:41:ed:b7:
         16:e5:13:3c:11:60:e6:37:5a:f4:99:ec:b9:89:c0:6f:7b:01:
         31:40:34:a7:31:5f:5a:69:ff:6a:c9:bf:86:ee:3c:b5:8f:60:
         43:0d:04:1f:e4:27:41:7f:1f:64:13:e7:91:30:78:e9:b4:5b:
         b4:94:97:60:a8:cf:86:7e:53:13:85:23:36:1f:30:d1:e4:c6:
         56:df:09:d2:1b:34:7e:fd:7f:69:79:fe:a0:7e:8c:52:22:35:
         78:6f:0f:37:aa:c6:9a:ec:6c:fc:42:dd:4a:af:19:1f:49:eb:
         08:11:8a:c3:1a:e2:57:b4:95:a4:14:d9:24:1e:be:22:72:8f:
         6c:24:4b:c5:fe:aa:aa:f5:ba:f7:2a:3a:4e:fa:8b:a2:82:d6:
         f3:25:56:60:02:bc:3f:17:62:17:ed:9b:dc:c4:64:e8:c6:d4:
         76:7a:1f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 07:10:51 2026 by rpki-client