Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
File:                     0YZHAF-osG5H7i77_e3Jegx3Vfg.mft (raw, json)
Hash identifier:          zbR0QCjEMNj3mxybIYEkQ5Q8YTLCF7c0r1yG3f0MXow=
Subject key identifier:   58:4C:89:36:6F:85:59:AA:33:64:41:70:DF:01:49:83:D3:CE:BC:00
Authority key identifier: D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8
Certificate issuer:       /CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
Certificate serial:       01A14BE1C343C37A8B01FBC2CB3BCD002B24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
Manifest number:          1AAC
Signing time:             Sat 17 Oct 2026 22:00:49 +0000
Manifest this update:     Sat 17 Oct 2026 22:00:49 +0000
Manifest next update:     Sun 18 Oct 2026 22:00:49 +0000
Files and hashes:         1: 0YZHAF-osG5H7i77_e3Jegx3Vfg.crl (hash: YRn+OUqMytOTEJ3Z/Dfa38gszA9GR4/c9Tm3RqcGbwc=)
                          2: GmHD_yxmhmb7r8gjp6el8HpBXOw.roa (hash: fVaQ2rKEBssbb0vmO7FX3uJ1zApwIkrOyFVIx+Y+u/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4b:e1:c3:43:c3:7a:8b:01:fb:c2:cb:3b:cd:00:2b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
        Validity
            Not Before: Oct 17 22:00:49 2026 GMT
            Not After : Oct 18 22:00:49 2026 GMT
        Subject: CN=584c89366f8559aa33644170df014983d3cebc00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f8:a8:4b:97:79:41:ba:f2:33:24:c9:37:37:
                    74:f6:47:3f:91:c1:c4:a8:50:63:3a:8b:7f:13:4c:
                    52:1b:7d:6c:ec:5c:cc:16:53:6b:87:78:57:9d:ac:
                    4e:eb:34:37:41:f4:56:e8:5e:b4:71:e3:30:25:26:
                    5c:9f:76:d3:51:17:68:d5:a1:d2:cf:c8:f9:58:e9:
                    5a:a2:ed:66:e8:97:08:08:04:32:a8:86:aa:78:c7:
                    ad:b7:b3:65:ee:4c:10:e5:c4:12:54:44:b1:80:80:
                    e7:e3:d4:6b:16:aa:bb:00:bc:4c:3b:dc:c7:9e:70:
                    71:14:46:11:69:b6:90:47:59:dd:8a:c3:01:3a:b5:
                    a5:a4:27:98:5c:2e:97:15:59:93:5f:1f:cf:fc:f0:
                    27:41:7a:aa:0b:ac:bb:21:a1:df:4f:98:35:af:91:
                    07:1c:39:1a:dc:b2:13:6e:bc:ab:05:d3:49:b0:9c:
                    8c:8b:33:1c:30:23:c5:b4:5f:d8:69:c9:22:c1:9c:
                    a5:30:35:a9:09:21:64:80:86:ba:17:41:20:96:df:
                    17:bd:67:12:bb:8e:6b:ec:3c:86:7a:86:9b:5f:57:
                    3c:bd:2c:55:96:18:ed:a8:36:c4:5a:8f:ec:09:f4:
                    1a:57:b6:86:cc:22:2c:22:7e:a1:22:1b:12:17:5e:
                    54:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4C:89:36:6F:85:59:AA:33:64:41:70:DF:01:49:83:D3:CE:BC:00
            X509v3 Authority Key Identifier:
                keyid:D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:3d:9a:2c:de:43:8c:a3:4c:e8:a8:90:8c:58:74:98:e5:6c:
         ed:7d:4d:2a:71:65:4c:f0:96:0b:e1:66:03:c7:46:0b:c3:86:
         1a:a0:a7:e2:d7:84:15:e7:12:6a:f5:f2:41:5d:8b:cb:91:85:
         d2:90:79:9c:d9:08:a3:00:b4:95:30:26:af:3c:15:af:e7:63:
         77:fa:a6:4f:70:7a:77:b2:9e:57:16:12:bf:c7:a1:9e:fb:ec:
         94:40:00:3e:c2:c0:61:a4:31:66:3e:51:fc:93:be:8e:cd:e1:
         0b:e2:d9:91:48:fc:02:53:aa:e0:70:ff:9d:b1:82:28:20:89:
         34:0f:09:38:b5:79:66:fb:66:eb:24:6f:c6:f9:fb:59:0a:35:
         c2:9c:99:50:75:ae:6b:2c:24:d8:92:0a:3d:bf:0d:c1:19:81:
         17:ed:99:a5:c5:5a:fe:e0:d7:4d:f5:06:55:ec:53:ea:86:db:
         54:16:e9:c4:f3:37:9b:78:d4:32:b7:63:2d:43:90:60:86:b9:
         da:69:b2:c9:69:34:03:63:f6:15:37:c3:ee:0b:62:f2:b7:b3:
         8b:18:ee:dd:94:b8:3d:5e:e2:b2:05:e3:ff:52:5c:81:c4:e1:
         74:87:9b:b5:ee:b0:1e:b0:e3:38:47:38:1c:91:73:4b:aa:22:
         ea:a3:cf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 23:51:02 2026 by rpki-client