Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
File:                     Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft (raw, json)
Hash identifier:          0mswWtojsVSW1cm9oYNCqjaHh4/jhvzyQbWI4DXqrxk=
Subject key identifier:   E0:D4:2B:6B:69:6F:41:47:B3:B0:6A:14:1F:D9:CF:99:F9:C4:74:F6
Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
Certificate issuer:       /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Certificate serial:       01A06E395D8999097200F16D68B740CD04E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
Manifest number:          138B
Signing time:             Fri 04 Sep 2026 21:00:48 +0000
Manifest this update:     Fri 04 Sep 2026 21:00:48 +0000
Manifest next update:     Sat 05 Sep 2026 21:00:48 +0000
Files and hashes:         1: CK8OJfLCISBl1ouaHEnbpGJbOnw.roa (hash: pt47KAPdqRnN1dkS3yo4ZlI5RRvRrx+uI3TswhWMkuU=)
                          2: Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl (hash: E+Lz3IJFpWz2NDHqf/sHsDN3mtbU6NHu2XR9njk/ofQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:39:5d:89:99:09:72:00:f1:6d:68:b7:40:cd:04:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
        Validity
            Not Before: Sep  4 21:00:48 2026 GMT
            Not After : Sep  5 21:00:48 2026 GMT
        Subject: CN=e0d42b6b696f4147b3b06a141fd9cf99f9c474f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5a:e0:04:ad:27:3a:6f:c2:d3:d9:fb:70:7f:
                    56:a4:1d:06:0e:cd:52:c7:4c:9d:4b:ab:5d:65:56:
                    3e:1c:d2:ec:f1:65:58:55:2a:bb:99:2e:22:da:9c:
                    cd:c6:f4:a2:7c:5e:6f:1b:af:de:5d:61:9b:e6:25:
                    13:93:a6:65:67:de:9b:ae:b5:ff:0b:c5:0a:27:d8:
                    a7:5e:ba:15:2d:63:f5:00:d1:65:1f:37:51:9f:35:
                    d0:a9:41:7c:a6:9a:3a:f8:37:44:33:60:4f:18:9a:
                    ef:10:09:86:22:0a:7b:c1:3a:45:09:b4:d2:cc:99:
                    33:07:47:b9:a9:21:e2:96:37:10:dc:0d:fb:61:86:
                    af:5b:c6:b1:1c:19:d2:4f:66:a5:6d:91:f1:92:24:
                    48:35:08:8b:9d:d4:7a:f2:3f:c9:ac:ec:5e:5d:a3:
                    f9:b4:f0:dc:d4:f1:d9:9b:98:da:ac:c5:8d:44:f3:
                    9a:f6:a2:6e:90:73:19:e6:69:df:6f:93:40:16:41:
                    09:02:75:0c:a0:27:ec:c5:5c:ea:50:c8:b8:e0:6b:
                    7b:c0:43:8b:c8:00:13:72:f7:e8:1a:a3:ee:19:4e:
                    eb:ba:56:b1:70:c3:56:e8:49:9c:e6:89:02:b0:29:
                    60:94:39:3a:cc:0d:b2:ff:73:b6:88:68:5d:90:0f:
                    1f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D4:2B:6B:69:6F:41:47:B3:B0:6A:14:1F:D9:CF:99:F9:C4:74:F6
            X509v3 Authority Key Identifier:
                keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:18:82:fb:90:58:52:df:98:2f:f9:5c:a6:5b:34:3f:e5:a0:
         f8:0d:e0:29:c4:60:e1:a0:9f:f2:4a:48:b3:a5:ff:e1:13:45:
         01:5f:73:78:c8:7e:2f:0d:98:2c:58:9f:e6:a3:6f:4b:1e:96:
         03:9a:24:86:07:08:e8:ac:c8:52:a8:7f:7f:5e:83:d2:6e:74:
         df:7d:95:45:51:3d:ce:8e:26:38:4a:1c:f4:53:13:d0:75:13:
         40:0f:d8:3a:a9:6d:50:d6:9a:aa:ca:7d:a3:05:4c:98:98:e4:
         a6:65:af:0b:65:01:d4:a2:96:4f:2d:b7:00:85:4c:97:73:95:
         4c:49:19:ae:ec:13:33:0e:b3:c8:3a:d9:99:43:dd:9d:1c:0e:
         df:7c:99:1c:4f:c7:c9:b6:54:14:ad:d4:d6:f8:3f:cc:ee:61:
         40:d9:80:8b:d4:e3:fe:3f:c6:42:ba:c4:e5:00:ab:94:a7:7d:
         33:0c:2e:d5:44:39:14:f1:27:07:59:4e:a5:9a:94:ac:6c:c3:
         41:6f:bb:29:bc:a2:45:a1:32:6c:d8:5f:3e:c6:3f:59:32:14:
         f7:72:a6:d6:59:08:8f:49:3a:a3:48:66:b2:4e:92:9c:56:c3:
         40:62:35:9c:32:ee:ce:3f:06:d5:25:c5:10:b4:07:61:ac:ef:
         25:2f:fc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:47:19 2026 by rpki-client