Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
File:                     YRuftFY550kvKzYx9kD2q5r7YpA.mft (raw, json)
Hash identifier:          lirinSq2K3TXYv0I3VMz0zbMjuRgq5M5biGO/uA2l3U=
Subject key identifier:   E6:B5:23:E3:18:57:FC:A6:30:78:A4:79:6C:C0:2C:47:AB:B0:C7:F8
Authority key identifier: 61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
Certificate issuer:       /CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Certificate serial:       01A1807400EA5B7F8D39E4E6C39CB424EC8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
Manifest number:          0569
Signing time:             Wed 28 Oct 2026 03:00:48 +0000
Manifest this update:     Wed 28 Oct 2026 03:00:48 +0000
Manifest next update:     Thu 29 Oct 2026 03:00:48 +0000
Files and hashes:         1: 3-z9WVuuMK0MQ-O8ytcjQmUulmQ.roa (hash: QlGcIApQxI3USCeOW3H47w4RX3p+KD+avqAifqggosI=)
                          2: YRuftFY550kvKzYx9kD2q5r7YpA.crl (hash: SAl2W3NHtBbtneqR78Il53WkSzJ3jalZvs2gt9NE+ts=)
                          3: eYKGIFqmXxArxKrm4dHPlBfdDkQ.roa (hash: OjAQmRNCdlZ/ho0O0hjfQYZhYcPqc7W3tUBnTWwRO0M=)
                          4: i8JTjG8kAd1c1HqV5LoJhukgMAE.roa (hash: u27SpMwjFzAC7wQTCgUg0cr2wavmv6lyaTijyCZtCvI=)
                          5: uKdnnQsot7mlRO752cNll6GISRQ.roa (hash: VbgboVS4OB0UdrRSp+d5djlaTMUsF7uI2qR/6y5b4JE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 03:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:74:00:ea:5b:7f:8d:39:e4:e6:c3:9c:b4:24:ec:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
        Validity
            Not Before: Oct 28 03:00:48 2026 GMT
            Not After : Oct 29 03:00:48 2026 GMT
        Subject: CN=e6b523e31857fca63078a4796cc02c47abb0c7f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fd:11:04:3c:d0:17:73:55:89:cc:1c:fc:a6:
                    8a:ba:77:e2:6a:6a:d9:be:5b:44:72:6a:e3:44:8d:
                    d3:ec:54:9e:ec:40:ce:d3:17:6b:19:3a:1d:4d:95:
                    4d:4c:19:9f:c1:d2:80:08:b2:1e:ef:f7:d2:8e:f2:
                    44:ed:53:84:63:9d:ee:8e:0e:d6:c0:b6:1b:ad:34:
                    a0:7b:93:3a:50:6f:7b:61:a6:be:40:e9:48:33:aa:
                    3d:72:42:c4:d4:37:ea:e9:f2:e4:e1:44:e6:c9:79:
                    5c:97:f0:42:a0:96:1c:43:fe:28:2a:e1:96:58:ef:
                    f4:74:a6:e3:f4:07:ac:da:2a:2b:8e:7b:f2:2d:18:
                    5d:ae:c3:8a:53:66:a1:7e:97:a0:a9:35:b3:31:08:
                    38:1c:70:7f:86:b9:dc:0b:34:ac:17:74:a9:1c:cd:
                    7d:93:45:08:a5:79:d4:ee:fc:50:5f:2f:08:80:87:
                    2b:44:14:5d:80:c3:51:0b:d3:8c:c2:69:e2:7c:fc:
                    ec:bd:3e:73:63:90:4d:7a:4a:20:75:7e:bb:d0:e3:
                    4b:18:fa:1c:0d:c2:f1:df:36:82:cc:28:e8:32:b6:
                    29:0c:2c:7a:97:99:53:50:7e:14:fb:7b:16:7f:94:
                    d6:f0:a5:ed:bc:0e:d5:b4:fa:e2:7b:0a:bc:08:8d:
                    3d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B5:23:E3:18:57:FC:A6:30:78:A4:79:6C:C0:2C:47:AB:B0:C7:F8
            X509v3 Authority Key Identifier:
                keyid:61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:9d:8e:5e:42:a2:0c:02:c1:f5:98:b3:06:39:22:21:91:20:
         c4:a5:3b:f6:8f:d1:0d:7c:0c:44:b1:54:74:26:8a:4e:dc:c7:
         b5:d8:21:21:86:38:3b:a1:fa:24:2f:25:9c:ae:25:7b:5c:07:
         42:2f:4f:c0:ab:97:ce:6e:85:63:70:40:0e:76:11:2d:e9:3b:
         58:37:f3:d8:ff:4b:fc:39:19:91:94:8a:b4:5d:16:16:8d:5a:
         55:29:1f:8a:fc:c1:c0:f9:4b:87:cc:c7:26:b6:a4:d8:94:2d:
         cb:5c:63:77:d7:82:42:3d:46:b3:3d:b8:2e:00:b2:78:a5:83:
         69:dc:12:8b:3f:bd:e3:df:81:70:e3:62:65:0b:5e:f3:7f:9d:
         0e:0e:31:07:ff:65:fd:a9:40:55:58:ad:ec:f4:4c:2a:bb:9b:
         68:15:e8:e8:a1:48:e1:92:c2:fe:87:b0:a1:46:8e:f2:46:47:
         fd:b9:b8:07:0c:d7:13:90:9f:7a:46:fc:0b:15:72:24:82:82:
         78:27:f1:10:e3:eb:c1:9f:d5:15:31:8a:db:56:de:9e:47:e9:
         64:65:8c:cc:d3:f5:47:cd:05:6d:b0:a0:8c:c5:9d:f6:86:71:
         64:fb:12:28:c6:f0:9f:7d:e9:ba:70:0f:70:c0:7b:37:9e:d4:
         91:ed:ce:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:37:15 2026 by rpki-client