Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
File:                     yda1mpPjJAg_vKQjfkfp9evzcas.mft (raw, json)
Hash identifier:          z4KPeA542uD4rXN/GUqJ0Ozi7VDzd/GhGne5/hWmp8c=
Subject key identifier:   E3:FF:89:FC:A1:08:ED:A4:2D:4B:04:FD:06:54:84:F7:63:99:D3:B9
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Certificate issuer:       /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial:       01A1AA1561572409FBD534FCE0953438DD26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
Manifest number:          1B03
Signing time:             Thu 05 Nov 2026 05:01:30 +0000
Manifest this update:     Thu 05 Nov 2026 05:01:30 +0000
Manifest next update:     Fri 06 Nov 2026 05:01:30 +0000
Files and hashes:         1: FBCGTG64vLpl2gDVPvanQJATgB8.roa (hash: axM4/0Pr+RIyWyZE+LhS3ebRSN92aTrPRUXzdJeL/U0=)
                          2: Gqg2-sCdeAnxIxjnCqOjFkh4pyY.roa (hash: fXnPA1IUb+WwCmX8j2rz10mUAQFbNKLaEL207SLATEk=)
                          3: Xh_fZpcuD-kXAKnMm-XCgP1QCcM.roa (hash: E/KI5295u2flUvuXh7zmO0XDhUT77Ekqi6kGos1unAA=)
                          4: cdMwDxOwsmOgnXKtKxgQS9EwG5s.roa (hash: 9KAJy5B5/gYF9JmztZmHa3vCIGRv+J2QDYi/xV8zpFc=)
                          5: w9cLMtPbCYYrwoKERp06IPmC2bE.roa (hash: ey9n1gs4fwmE4LkooDwQ9cZLvMTfaqnyxO7TGDUAj68=)
                          6: wywpQzax_4ZtKoz9uAZxDjtcPmw.roa (hash: Q0w8drpmsGxodbGwxBVJJ2K2KkXwUZiHuoYb5PWlT/8=)
                          7: yda1mpPjJAg_vKQjfkfp9evzcas.crl (hash: H3XJ59Q+Q3a8+Cvk/5BGUe2liOLsD58IlToA+lyk2SI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 05:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:aa:15:61:57:24:09:fb:d5:34:fc:e0:95:34:38:dd:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
        Validity
            Not Before: Nov  5 05:01:30 2026 GMT
            Not After : Nov  6 05:01:30 2026 GMT
        Subject: CN=e3ff89fca108eda42d4b04fd065484f76399d3b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d5:db:5c:51:bf:79:16:43:92:be:d7:d7:89:
                    86:7b:96:8b:30:65:9b:b3:38:8e:d9:92:97:2d:a1:
                    3e:94:0c:b0:18:dd:db:07:cd:f1:a4:ad:05:23:49:
                    3f:ad:96:1f:02:f9:af:2b:cd:9b:e3:51:c0:a4:a2:
                    cf:71:5d:d7:43:4e:71:1b:30:ea:d0:d1:0b:23:21:
                    f8:c2:9a:be:27:f3:8b:a9:1e:9c:f7:a0:ec:83:c2:
                    55:22:80:9a:85:eb:64:18:97:67:b2:af:39:ad:c1:
                    f8:07:d5:3d:f9:16:7b:5f:18:a5:04:37:5a:ed:33:
                    55:ff:ef:d1:e7:36:3d:c3:29:fb:55:10:1e:f4:37:
                    c5:0e:27:39:e5:a3:b8:2c:7b:da:f0:bb:6d:89:69:
                    4b:83:59:b6:93:b4:67:cd:b7:38:4f:58:8c:e2:34:
                    fe:e2:b1:33:3b:7b:b7:9e:ee:70:f3:38:66:b8:ce:
                    6d:30:76:bf:3a:c9:c1:84:f2:46:b9:b2:a6:4c:7b:
                    54:ee:f9:fe:ef:6d:d5:77:9e:fc:04:4b:d6:a1:7a:
                    c9:54:c3:3f:02:7d:22:a0:31:07:9d:be:66:83:2f:
                    ac:b0:97:79:1c:78:ec:59:10:ce:04:fc:9e:88:21:
                    90:bc:8c:c9:0d:fc:ae:be:69:6d:a7:80:26:b8:b3:
                    f4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FF:89:FC:A1:08:ED:A4:2D:4B:04:FD:06:54:84:F7:63:99:D3:B9
            X509v3 Authority Key Identifier:
                keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:4b:5b:36:63:26:44:e8:54:84:a9:32:5a:83:3f:ba:32:92:
         20:8f:10:e6:1b:7b:53:1a:e0:0a:9d:bd:38:c4:b4:47:da:d2:
         59:17:ce:f2:7b:e0:9b:f3:c5:3f:81:3f:57:40:4e:85:1a:13:
         4c:2d:c9:2d:0e:cc:84:1e:9e:08:fc:8d:ca:3e:71:c4:79:50:
         fc:42:b5:f3:4a:34:5d:d6:f1:9d:ee:c4:2f:e9:6a:72:ee:5c:
         dc:25:d4:f7:27:0f:29:63:92:3c:c7:70:bc:a6:58:30:b2:25:
         0e:c2:21:26:8c:a3:83:d3:ee:13:9d:4f:4f:07:ed:67:6a:97:
         1a:13:f7:0d:e0:66:6a:eb:c7:b8:b1:2b:a4:13:94:a5:6f:e0:
         59:fa:41:41:8c:fe:99:54:a5:5d:47:f8:08:84:3b:d5:e2:32:
         65:8a:8a:03:85:61:61:6d:c6:aa:ef:63:5e:5c:c6:36:a3:a8:
         a6:fc:13:eb:da:b5:dd:33:d4:5a:4a:78:ba:bb:13:88:cb:50:
         9a:87:4a:b6:d9:86:ae:87:e3:d3:fd:9c:55:12:a2:75:a8:bf:
         97:ea:c7:68:10:9c:70:6a:e0:e1:eb:07:c3:0a:d8:df:20:ac:
         da:b3:be:38:e3:2f:03:64:41:9d:93:e7:bc:06:ef:ec:1e:22:
         37:2a:c5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:08:39 2026 by rpki-client