Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
File:                     YbBXiaToJL6BA953DcJcWT7z_co.mft (raw, json)
Hash identifier:          0t46fJah/JAVtV4dQARjTequMdA4svNTQuEQHfkpLIM=
Subject key identifier:   6F:ED:15:FC:27:AC:87:FC:5B:76:7F:78:25:D5:0C:7E:73:6A:3E:93
Authority key identifier: 61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
Certificate issuer:       /CN=61b05789a4e824be8103de770dc25c593ef3fdca
Certificate serial:       01A1562F692AEAF242DD7C10C1D8F8849A5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
Manifest number:          165F
Signing time:             Mon 19 Oct 2026 22:01:50 +0000
Manifest this update:     Mon 19 Oct 2026 22:01:50 +0000
Manifest next update:     Tue 20 Oct 2026 22:01:50 +0000
Files and hashes:         1: 0FXE-aMYDoHsJWIgYZ6p4cTAvIc.asa (hash: m9vFjKk2IkfNxMT1oBT/EqvBwRhxlH++eft+dvmvzfI=)
                          2: B1xlxtkgltJzqbUtpT-T2k7OjtI.roa (hash: qZlWNzGPdE+IKxAZlX53rTWx5ECKk+OZ5/kaPPhGDH4=)
                          3: YbBXiaToJL6BA953DcJcWT7z_co.crl (hash: uOlUFTB+9+ivzPLCwXN42h+b1FGcfyH/4T1RA1nrVf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 22:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:56:2f:69:2a:ea:f2:42:dd:7c:10:c1:d8:f8:84:9a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b05789a4e824be8103de770dc25c593ef3fdca
        Validity
            Not Before: Oct 19 22:01:50 2026 GMT
            Not After : Oct 20 22:01:50 2026 GMT
        Subject: CN=6fed15fc27ac87fc5b767f7825d50c7e736a3e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1b:d3:77:b1:bf:7c:5f:51:5d:60:53:e3:bf:
                    7c:22:f5:df:d9:14:09:16:33:11:41:8a:b6:d1:04:
                    82:1b:88:e5:d9:3c:6f:cb:0b:69:d2:0a:e0:d2:1c:
                    19:f5:bd:89:f4:79:5d:22:87:d5:a4:e6:3a:80:c3:
                    c2:75:5a:c9:bf:d2:ab:ec:f2:28:6b:65:85:d8:49:
                    c9:39:10:96:13:1f:25:71:57:6d:3f:5b:c8:6b:61:
                    64:32:ea:69:e3:12:08:1d:16:69:6b:50:c2:ae:bc:
                    55:84:68:0f:98:61:4a:ac:59:3d:a1:9b:30:db:15:
                    43:71:94:8f:55:69:c8:5c:cd:5f:ec:c2:f1:88:79:
                    fc:35:55:0b:a6:b4:6a:ff:99:3b:25:01:45:ef:88:
                    ff:c1:95:56:a0:b8:9d:ff:02:89:d9:51:5d:71:fd:
                    e0:6b:9b:43:f1:19:67:0c:82:4b:4e:7d:9b:6c:70:
                    21:ae:97:dd:f5:d1:85:08:f8:15:d5:37:0f:7f:c1:
                    81:7d:9e:10:8b:08:da:74:93:16:fc:c5:ca:7c:9d:
                    19:6d:f2:00:a5:66:af:7f:42:f2:3e:e5:74:9c:54:
                    56:6b:52:0c:3c:b7:fe:23:df:59:3e:d0:4d:70:8f:
                    fb:c8:d6:40:49:d0:ec:02:ce:e9:16:99:2f:dc:ca:
                    85:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:ED:15:FC:27:AC:87:FC:5B:76:7F:78:25:D5:0C:7E:73:6A:3E:93
            X509v3 Authority Key Identifier:
                keyid:61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:96:95:d8:82:e9:28:7e:5a:d2:e3:e5:d7:39:8d:8e:be:1b:
         48:d7:42:f8:7b:1c:c7:70:c4:9b:67:19:89:1f:18:db:70:c6:
         ea:fa:6f:2a:54:ab:a1:a3:84:ca:b0:62:3b:db:98:b7:f7:d6:
         14:94:75:aa:bf:f3:ae:4b:c7:4f:4f:99:a6:b6:0b:1d:b0:7b:
         19:f6:02:6b:75:c2:76:e1:40:a7:7a:f8:05:ca:4c:8c:f9:14:
         a4:8c:26:48:b5:c7:0d:35:c3:56:46:95:d6:ac:a9:cb:f9:61:
         24:9f:95:e2:1b:dc:54:46:a1:9e:b0:ec:10:86:33:c4:4e:d3:
         84:40:bd:f5:09:e7:8f:79:2f:10:9a:a9:8e:8e:c8:43:f1:35:
         d0:82:7f:7e:74:2c:4c:59:2a:6f:cb:e7:05:93:65:da:c1:0b:
         c1:7e:f2:e9:6f:4c:2a:27:36:4e:cc:cd:24:37:b9:d9:a3:a0:
         5a:b1:15:11:c5:3f:cc:7d:65:83:ac:9c:9f:4b:ce:2b:f0:14:
         d2:dc:8f:17:96:9e:0b:6d:fc:4d:44:1a:7f:ef:14:db:88:8d:
         ea:57:05:d7:81:95:ee:48:f9:39:a3:6b:a6:5b:7a:a3:32:0c:
         2f:b9:64:c2:84:18:17:69:d9:6e:27:b7:eb:60:4a:cc:bf:be:
         4f:28:d8:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFWL2kq6vJC3XwQwdj4hJpfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYjA1Nzg5YTRlODI0YmU4MTAzZGU3NzBkYzI1YzU5M2Vm
M2ZkY2EwHhcNMjYxMDE5MjIwMTUwWhcNMjYxMDIwMjIwMTUwWjAzMTEwLwYDVQQD
Eyg2ZmVkMTVmYzI3YWM4N2ZjNWI3NjdmNzgyNWQ1MGM3ZTczNmEzZTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRvTd7G/fF9RXWBT4798IvXf2RQJ
FjMRQYq20QSCG4jl2Txvywtp0grg0hwZ9b2J9HldIofVpOY6gMPCdVrJv9Kr7PIo
a2WF2EnJORCWEx8lcVdtP1vIa2FkMupp4xIIHRZpa1DCrrxVhGgPmGFKrFk9oZsw
2xVDcZSPVWnIXM1f7MLxiHn8NVULprRq/5k7JQFF74j/wZVWoLid/wKJ2VFdcf3g
a5tD8RlnDIJLTn2bbHAhrpfd9dGFCPgV1TcPf8GBfZ4QiwjadJMW/MXKfJ0ZbfIA
pWavf0LyPuV0nFRWa1IMPLf+I99ZPtBNcI/7yNZASdDsAs7pFpkv3MqFowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/tFfwnrIf8W3Z/eCXVDH5zaj6TMB8GA1UdIwQY
MBaAFGGwV4mk6CS+gQPedw3CXFk+8/3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWJCWGlhVG9KTDZCQTk1M0RjSmNXVDd6X2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83ZjJjMDctY2VmNS00MmY0LThmMzIt
ODYzMWZiZjVjNjIwLzEvWWJCWGlhVG9KTDZCQTk1M0RjSmNXVDd6X2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC83ZjJjMDctY2VmNS00MmY0LThmMzItODYzMWZiZjVjNjIw
LzEvWWJCWGlhVG9KTDZCQTk1M0RjSmNXVDd6X2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqpaV2ILp
KH5a0uPl1zmNjr4bSNdC+Hscx3DEm2cZiR8Y23DG6vpvKlSroaOEyrBiO9uYt/fW
FJR1qr/zrkvHT0+ZprYLHbB7GfYCa3XCduFAp3r4BcpMjPkUpIwmSLXHDTXDVkaV
1qypy/lhJJ+V4hvcVEahnrDsEIYzxE7ThEC99Qnnj3kvEJqpjo7IQ/E10IJ/fnQs
TFkqb8vnBZNl2sELwX7y6W9MKic2TszNJDe52aOgWrEVEcU/zH1lg6ycn0vOK/AU
0tyPF5aeC238TUQaf+8U24iN6lcF14GV7kj5OaNrplt6ozIML7lkwoQYF2nZbie3
62BKzL++TyjYTw==
-----END CERTIFICATE-----
Generated at Tue Oct 20 08:22:32 2026 by rpki-client