Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
File:                     yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft (raw, json)
Hash identifier:          WL6U2mc4JK8Sin4wVNseKUtDIP5SQm0vMNJRif7BJkA=
Subject key identifier:   91:EA:D8:46:C0:0C:E4:15:31:D7:90:BA:D4:84:DB:A0:B2:68:24:72
Authority key identifier: C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
Certificate issuer:       /CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Certificate serial:       01A06EA80AD4A31EB0CD80299B088EDEC676
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
Manifest number:          16CE
Signing time:             Fri 04 Sep 2026 23:01:41 +0000
Manifest this update:     Fri 04 Sep 2026 23:01:41 +0000
Manifest next update:     Sat 05 Sep 2026 23:01:41 +0000
Files and hashes:         1: YjABWXq1K-e_wEund0ue5nxCxOU.roa (hash: PI1L0CXgsAmafCm4unnTqfAaCBg3v/MEpLRsMdPwg9s=)
                          2: yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl (hash: fvxm7c20zAAYr7pID7rnuASxMbd8MqAbH8jCBp5c6Ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 23:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:a8:0a:d4:a3:1e:b0:cd:80:29:9b:08:8e:de:c6:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
        Validity
            Not Before: Sep  4 23:01:41 2026 GMT
            Not After : Sep  5 23:01:41 2026 GMT
        Subject: CN=91ead846c00ce41531d790bad484dba0b2682472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d7:04:58:90:82:f7:a6:5b:3e:ea:c9:7a:12:
                    34:38:4f:40:da:26:36:6a:50:d5:c7:00:95:5d:fe:
                    26:b4:84:ec:ff:74:1c:ea:a4:38:5a:69:d2:43:96:
                    35:9e:af:4e:60:6c:a2:bd:51:7f:6c:1a:6a:04:14:
                    0b:76:ec:1a:f2:20:b0:af:02:0e:4b:ca:77:14:d6:
                    28:39:e2:06:54:f2:92:14:01:ad:c8:39:3f:ff:5d:
                    6e:9d:c7:e5:01:bd:25:d1:a8:f9:c3:05:d0:59:8b:
                    ae:1e:2e:05:f0:24:13:bd:fc:b2:16:6e:39:fc:02:
                    e2:dd:e3:71:e2:4e:0e:f2:fd:a0:5c:1e:43:1c:73:
                    19:fd:8e:2a:f0:1c:0e:a6:8b:8b:c6:01:bf:a3:2b:
                    9c:4f:2c:37:53:85:38:31:89:f6:40:64:c1:6f:72:
                    f7:04:ae:80:84:74:ea:37:91:66:db:66:d1:b1:9b:
                    81:ae:fb:fb:41:87:fe:79:08:c3:76:53:c0:89:c3:
                    0f:8c:54:a9:76:e3:04:05:e4:e1:70:18:4a:ce:93:
                    eb:c9:4b:ac:9e:0e:64:59:42:ab:a8:8a:0c:20:70:
                    02:4d:ac:30:8f:49:4a:8a:0b:7d:2e:81:ed:17:62:
                    88:dd:67:ba:d9:16:b0:65:4f:cb:82:93:19:ac:62:
                    32:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EA:D8:46:C0:0C:E4:15:31:D7:90:BA:D4:84:DB:A0:B2:68:24:72
            X509v3 Authority Key Identifier:
                keyid:C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:d9:f4:24:2c:93:97:9a:3d:69:24:9f:57:ad:cd:ed:9c:82:
         9c:2f:d6:2a:e3:cd:35:77:52:91:1b:cb:26:2c:a7:cf:d2:de:
         e3:fb:33:b6:5a:10:a9:b5:5c:78:ec:e9:d6:0b:e9:16:1a:6d:
         f2:21:10:ca:33:77:b3:3b:98:46:89:9f:67:73:53:42:2e:ba:
         a0:df:42:13:07:e7:c0:aa:55:f9:ec:af:be:92:d1:54:0b:2c:
         7f:b1:c9:d1:9e:ce:fa:8b:66:65:02:e2:b1:e3:11:dd:68:ca:
         ff:92:1a:ad:84:0e:9e:c5:e3:3c:b6:41:c3:dc:37:8d:76:11:
         aa:b7:92:53:0a:8a:75:c4:6c:18:28:ae:55:95:07:6c:fb:89:
         7e:ac:0f:df:69:0a:15:4a:71:e8:b5:72:fd:b7:e8:ac:75:fd:
         46:8f:34:8c:6b:bb:69:91:5b:f0:11:8d:60:d6:55:81:fe:ce:
         9c:5d:23:42:39:3f:20:bf:b5:ed:d6:b8:a3:0f:10:8f:83:58:
         44:3d:28:84:b9:36:1f:d8:96:87:d3:13:f6:16:51:93:27:01:
         15:9f:05:a3:5e:be:43:7d:31:3f:63:3e:57:dc:56:90:ff:38:
         91:42:cb:ad:ce:b8:47:8e:f4:56:45:60:5e:d9:f5:0f:a1:c6:
         f0:15:92:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBuqArUox6wzYApmwiO3sZ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YWIzYzViNjlhZjVjMjE4ZGQ0YWY3NjRjOTQzNjZjNjQ2
ZjgzYTUwHhcNMjYwOTA0MjMwMTQxWhcNMjYwOTA1MjMwMTQxWjAzMTEwLwYDVQQD
Eyg5MWVhZDg0NmMwMGNlNDE1MzFkNzkwYmFkNDg0ZGJhMGIyNjgyNDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19cEWJCC96ZbPurJehI0OE9A2iY2
alDVxwCVXf4mtITs/3Qc6qQ4WmnSQ5Y1nq9OYGyivVF/bBpqBBQLduwa8iCwrwIO
S8p3FNYoOeIGVPKSFAGtyDk//11uncflAb0l0aj5wwXQWYuuHi4F8CQTvfyyFm45
/ALi3eNx4k4O8v2gXB5DHHMZ/Y4q8BwOpouLxgG/oyucTyw3U4U4MYn2QGTBb3L3
BK6AhHTqN5Fm22bRsZuBrvv7QYf+eQjDdlPAicMPjFSpduMEBeThcBhKzpPryUus
ng5kWUKrqIoMIHACTawwj0lKigt9LoHtF2KI3We62RawZU/LgpMZrGIyWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHq2EbADOQVMdeQutSE26CyaCRyMB8GA1UdIwQY
MBaAFMirPFtpr1whjdSvdkyUNmxkb4OlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUtzOFcybXZYQ0dOMUs5MlRKUTJiR1J2ZzZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hMjZiMGYtMzM1My00ZTU5LWJmNzAt
MTE4NDU0Y2NkNDEyLzEveUtzOFcybXZYQ0dOMUs5MlRKUTJiR1J2ZzZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9hMjZiMGYtMzM1My00ZTU5LWJmNzAtMTE4NDU0Y2NkNDEy
LzEveUtzOFcybXZYQ0dOMUs5MlRKUTJiR1J2ZzZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtn0JCyT
l5o9aSSfV63N7ZyCnC/WKuPNNXdSkRvLJiynz9Le4/sztloQqbVceOzp1gvpFhpt
8iEQyjN3szuYRomfZ3NTQi66oN9CEwfnwKpV+eyvvpLRVAssf7HJ0Z7O+otmZQLi
seMR3WjK/5IarYQOnsXjPLZBw9w3jXYRqreSUwqKdcRsGCiuVZUHbPuJfqwP32kK
FUpx6LVy/bforHX9Ro80jGu7aZFb8BGNYNZVgf7OnF0jQjk/IL+17da4ow8Qj4NY
RD0ohLk2H9iWh9MT9hZRkycBFZ8Fo16+Q30xP2M+V9xWkP84kULLrc64R470VkVg
Xtn1D6HG8BWS5g==
-----END CERTIFICATE-----
Generated at Sat Sep 5 09:28:23 2026 by rpki-client