Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
File:                     YaXSF3WehhaW_HftmqY7lO2zvn0.mft (raw, json)
Hash identifier:          R2ZRNMovrtuotXE6rzfmjHiUmDxLTfFg+eITL/1UXag=
Subject key identifier:   C1:9D:39:91:BF:58:5A:9C:C3:61:58:94:11:E5:4E:D1:8A:2F:1B:10
Authority key identifier: 61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
Certificate issuer:       /CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Certificate serial:       01A08D56C94EBF9C009C0D15210CA0868797
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
Manifest number:          19D9
Signing time:             Thu 10 Sep 2026 22:01:10 +0000
Manifest this update:     Thu 10 Sep 2026 22:01:10 +0000
Manifest next update:     Fri 11 Sep 2026 22:01:10 +0000
Files and hashes:         1: 7nMDcW2MBzGpfpdKdPDTB0QB3hU.roa (hash: en70sYlojLOJhZvnO4mg1gQMw5JWdqgwDgeNhf3auMU=)
                          2: En1jde_TIQ7LiMKAfWOjQ8-vueQ.roa (hash: B07iauNs3fJKlZyy9+dMg1gGMxORKFzCKI2QAYo7MVI=)
                          3: QaLldwyWCNmsJuYxanxijJENiro.roa (hash: zZJuFSJ24SLOyuCH72+V4rIHBfJPcOF4kPyYmAT7g5s=)
                          4: YaXSF3WehhaW_HftmqY7lO2zvn0.crl (hash: YtXb4kftEO/7FLQ3umSU6OO06XWHaRkKkCIG5xGg6ew=)
                          5: jdSwXFGYkX-QEBXIuasgwFC2D7c.roa (hash: 8ECDcLMvUhxjcLk2BpSduz0pbSgekU1Tj/Vgy8O0Vqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 22:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:56:c9:4e:bf:9c:00:9c:0d:15:21:0c:a0:86:87:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
        Validity
            Not Before: Sep 10 22:01:10 2026 GMT
            Not After : Sep 11 22:01:10 2026 GMT
        Subject: CN=c19d3991bf585a9cc361589411e54ed18a2f1b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c3:83:5e:af:86:36:30:72:96:19:30:93:28:
                    0f:42:84:7e:d8:cb:51:12:fc:2c:d8:17:fd:c0:59:
                    e5:b0:31:1c:41:72:02:79:57:7b:16:35:e3:fe:57:
                    8b:63:41:25:78:9a:c4:d0:d6:bb:af:a8:20:5c:7f:
                    ed:ec:3e:7d:c6:9b:22:68:e8:fe:4b:92:bc:14:78:
                    0d:82:2f:b1:f1:11:00:e3:09:fd:cb:01:02:2d:2c:
                    6e:1b:43:2d:52:4c:cb:a2:1f:fb:29:ca:40:4b:a4:
                    ef:37:47:e6:9f:01:bc:0a:e3:bc:62:6f:7a:c7:a1:
                    7c:ff:7a:80:c3:7e:38:70:fa:89:2c:5f:a6:b2:4e:
                    35:ed:03:0e:b4:3d:8a:79:db:d5:27:1b:8a:cb:50:
                    96:22:cf:03:92:79:c7:f6:bc:66:ac:58:c2:09:29:
                    42:12:c2:d9:61:09:47:27:79:47:33:13:c0:53:2d:
                    f0:b1:fa:b1:09:3a:1a:4b:c6:03:01:52:2b:f8:13:
                    67:bc:2b:59:96:a9:cb:96:12:74:c9:37:e4:36:2a:
                    3e:e0:71:e2:5d:d8:06:a1:ed:6a:7d:51:09:53:03:
                    1e:0e:a6:83:fd:da:76:44:bc:b7:2f:24:43:b2:c0:
                    b1:40:53:40:cd:4a:3f:9f:cb:c6:96:24:1e:f6:a4:
                    54:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9D:39:91:BF:58:5A:9C:C3:61:58:94:11:E5:4E:D1:8A:2F:1B:10
            X509v3 Authority Key Identifier:
                keyid:61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:9d:48:cf:b2:1e:bd:7f:80:d5:c2:16:c5:cb:47:67:8d:1a:
         2c:14:13:da:a9:2b:cd:24:a0:49:ab:9a:90:b4:ad:d2:ba:e1:
         4c:80:3e:7d:56:95:3a:00:2e:dd:b2:1c:77:14:0f:7f:23:12:
         24:73:3f:17:87:f1:69:62:58:75:56:58:14:d8:2d:c2:6f:21:
         26:cc:aa:2a:b2:81:b9:d1:4c:50:af:f1:57:d7:c6:92:57:00:
         e8:00:e6:79:23:e8:54:d9:62:85:e7:a2:c4:9d:38:29:c9:b9:
         dc:2c:d2:20:bc:24:61:b1:57:6b:ab:ec:8e:1f:ef:a3:fd:e7:
         ca:dd:c0:8d:b8:6c:13:05:78:2d:91:67:64:60:2b:d5:4f:18:
         50:0a:f7:59:2a:10:7e:49:b4:80:15:3c:46:43:11:67:aa:a0:
         fd:8e:0d:07:11:6f:f4:07:76:fd:01:ce:c1:3d:88:a1:a5:0f:
         ea:13:28:49:8c:3f:0a:34:4e:9a:08:d8:9e:cf:18:cd:1a:8c:
         a1:37:35:3c:a0:71:b2:67:62:eb:c3:c1:ca:c4:3a:ab:7f:24:
         0b:03:cc:74:7e:8b:cf:fa:6f:fc:43:1b:40:6b:d1:3d:9e:5a:
         8d:d1:36:e2:96:16:e4:9c:0a:68:4d:36:31:25:77:9b:59:e0:
         1f:0d:16:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:36:39 2026 by rpki-client