Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
File:                     YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft (raw, json)
Hash identifier:          DwfGWBJW8bi8Lr0v+JB9w4y7QLuJ7K5pD4Z4Jw3/JOU=
Subject key identifier:   12:34:94:73:44:B9:BC:4F:B6:AF:1C:65:89:F4:79:C7:6A:CF:51:AF
Authority key identifier: 61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C
Certificate issuer:       /CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
Certificate serial:       01A172B8C753D320B1B51F32FA45DE19C089
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
Manifest number:          1268
Signing time:             Sun 25 Oct 2026 11:01:14 +0000
Manifest this update:     Sun 25 Oct 2026 11:01:14 +0000
Manifest next update:     Mon 26 Oct 2026 11:01:14 +0000
Files and hashes:         1: 7kMdYp5roGfF1VU63Cc4JGcx5Js.roa (hash: uj86j/OpDs/f0Rygt+3blYLNRZRYXffCKOesowzFlqw=)
                          2: YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl (hash: QSnmy2MIsMKvhfYcxRj+UST4WNrwoJqhKSSAg9WTjCc=)
                          3: mB6ctQ7JDyjcQ3pzEiNkX3oG_lc.roa (hash: eNl+c0XuwCaTPy+dCHBabXrocGDi3GDbO258cnnWPK4=)
                          4: mET4_I0vQujHayV2JM5NI5ita-A.roa (hash: e7Iitk3hYpEL0ONAjD0IO1Ux9f6z5Emc5/EOv6IJZlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:72:b8:c7:53:d3:20:b1:b5:1f:32:fa:45:de:19:c0:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
        Validity
            Not Before: Oct 25 11:01:14 2026 GMT
            Not After : Oct 26 11:01:14 2026 GMT
        Subject: CN=1234947344b9bc4fb6af1c6589f479c76acf51af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c9:38:3e:c2:c4:bd:b4:f1:6c:90:c7:4e:04:
                    97:d3:9c:cd:68:f9:56:a0:cd:c1:98:6b:3c:4f:5f:
                    15:1d:48:90:63:70:29:0e:52:be:9d:e5:91:a1:c9:
                    3a:b8:43:de:1a:42:1f:91:13:a0:d2:9f:ef:89:df:
                    09:3b:ac:af:be:37:95:45:ae:9f:4a:6c:1f:49:64:
                    84:7d:1c:37:c5:5a:67:80:cc:97:e4:49:ce:34:68:
                    da:cc:10:77:9e:3e:8f:49:c2:eb:e5:3d:c5:bf:bd:
                    2a:a7:df:29:de:a3:1d:c5:7a:3a:11:03:28:a4:f1:
                    d0:a5:db:f7:aa:81:d6:4f:bf:da:eb:86:63:08:56:
                    9c:c2:d5:c3:0d:e9:a0:bd:0f:40:d8:7d:48:1a:9a:
                    95:25:96:c3:69:7f:27:a2:26:38:e4:c6:49:b2:83:
                    55:78:20:0d:fe:a4:22:60:6e:a0:ed:44:27:cf:77:
                    76:a0:98:bf:23:6b:3d:e3:f9:3c:48:2b:bc:f6:86:
                    e4:d6:34:92:59:6f:f7:cb:3d:2f:ff:84:36:5f:81:
                    ec:4e:11:14:88:0b:9f:54:44:74:40:f7:e7:8b:ae:
                    3b:85:de:91:c4:f7:dc:f2:be:68:87:4c:c6:ba:73:
                    be:13:fd:bf:b9:d5:dd:b9:9a:d2:b4:a7:da:c6:e8:
                    81:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:34:94:73:44:B9:BC:4F:B6:AF:1C:65:89:F4:79:C7:6A:CF:51:AF
            X509v3 Authority Key Identifier:
                keyid:61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:5f:56:55:b6:bf:12:87:95:e0:43:16:4c:18:67:d8:3e:9a:
         aa:48:e8:f2:4e:18:62:f0:ef:90:6d:9d:bb:b8:43:2c:db:f4:
         15:62:36:da:23:57:ac:24:8f:f1:f3:e4:dd:b8:15:e6:f6:e5:
         6b:2d:2b:3c:86:c3:eb:7b:bd:f1:8f:cd:4b:71:9c:48:f3:61:
         0c:42:30:48:ea:14:ac:27:76:84:71:42:39:a1:f5:9f:b3:a4:
         43:98:cf:7c:3a:8b:75:74:1b:09:9e:6d:32:b4:bb:21:f0:61:
         9e:dd:8d:11:87:d6:d5:a3:76:c3:ff:e6:da:99:52:47:27:ea:
         db:c7:78:4b:12:b1:fa:e9:39:2c:b9:81:36:c8:66:b4:4f:a2:
         05:ea:51:85:df:0d:9f:96:14:e5:de:fa:98:e0:7e:c6:96:70:
         e4:ef:8b:11:a5:a1:78:b0:f2:ac:40:11:ea:57:40:f8:cb:78:
         93:ae:db:6c:bd:02:a6:9f:18:b9:ce:84:de:f4:76:87:7a:11:
         f5:f8:f7:6e:d5:b7:87:e6:f0:19:07:47:57:58:fd:3e:6b:3c:
         8b:ac:94:93:e8:c3:11:a7:58:b0:fb:64:5b:a3:40:23:ce:86:
         ab:bc:ed:2c:ca:8f:d2:a6:fe:0b:10:d7:61:6c:86:7e:45:12:
         b2:5a:b3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:29:03 2026 by rpki-client