Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.mft
File:                     Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.mft (raw, json)
Hash identifier:          gB2f07DTrwl/ZSj+9rw+CuCCLdrud7Dw1g66WV6ov30=
Subject key identifier:   7C:57:7A:44:26:63:8E:22:45:6C:9D:B8:7C:09:73:01:E4:69:A1:93
Authority key identifier: 63:F4:2E:D5:F7:BD:1B:25:AF:9B:EC:15:D2:D9:C7:E8:2C:50:46:12
Certificate issuer:       /CN=63f42ed5f7bd1b25af9bec15d2d9c7e82c504612
Certificate serial:       01A0EBF977E0E9954D64F1E41C05610F50DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.mft
Manifest number:          D0
Signing time:             Tue 29 Sep 2026 07:03:09 +0000
Manifest this update:     Tue 29 Sep 2026 07:03:09 +0000
Manifest next update:     Wed 30 Sep 2026 07:03:09 +0000
Files and hashes:         1: BED9GISLCJhk0pThitFKhHhPnWQ.asa (hash: 6cUNoJrVBhHEyPZpndIyjIlnjwedGAHfcHstbr3UCqM=)
                          2: Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.crl (hash: AjBKh2zYZ7mCikOa8FxFlcz2SiZrJ74uU+ZFSCAbbQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 07:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:f9:77:e0:e9:95:4d:64:f1:e4:1c:05:61:0f:50:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63f42ed5f7bd1b25af9bec15d2d9c7e82c504612
        Validity
            Not Before: Sep 29 07:03:09 2026 GMT
            Not After : Sep 30 07:03:09 2026 GMT
        Subject: CN=7c577a4426638e22456c9db87c097301e469a193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:94:55:43:32:1b:03:35:9a:44:d7:2c:9b:8c:
                    e1:57:b8:07:70:25:8b:1b:de:e8:34:1a:30:3d:59:
                    8f:9d:13:bf:a0:9a:a3:c1:13:cf:e4:11:40:a4:e9:
                    7f:b1:43:f8:e8:c8:5b:8b:70:cb:a8:17:f4:d8:c6:
                    a3:92:b5:0a:ce:24:62:33:c6:69:e6:99:fc:aa:f1:
                    2d:40:32:2b:ce:00:6e:f8:28:db:a4:11:31:f9:e7:
                    af:10:b5:29:3a:e4:9c:1b:61:c1:3b:d2:07:56:8b:
                    a2:d5:60:f6:7e:0b:7e:fd:d9:40:38:d2:0f:e0:c4:
                    08:e5:61:b7:c1:df:9a:61:2c:00:10:11:65:6e:ec:
                    6c:6c:6c:9d:19:bf:73:37:d8:f1:90:02:61:11:7c:
                    04:c4:6b:24:16:93:1e:11:73:82:90:da:60:e8:17:
                    48:de:10:32:5d:26:38:f9:26:4c:b8:1a:06:2a:73:
                    c2:6d:72:c6:e0:f3:08:5b:07:2c:0a:6c:44:01:1e:
                    e9:f2:45:19:b4:bc:4d:1c:d2:cc:65:53:06:5a:18:
                    93:f9:2f:1a:6c:46:04:4d:e6:00:47:de:b8:c4:99:
                    c8:01:1b:7b:53:a4:1e:43:e2:79:a1:0f:ca:1a:57:
                    4a:e9:c5:5f:c7:6a:95:3b:91:a1:ce:96:e8:0e:e6:
                    c9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:57:7A:44:26:63:8E:22:45:6C:9D:B8:7C:09:73:01:E4:69:A1:93
            X509v3 Authority Key Identifier:
                keyid:63:F4:2E:D5:F7:BD:1B:25:AF:9B:EC:15:D2:D9:C7:E8:2C:50:46:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:1e:f2:c6:65:1c:96:6f:54:a5:52:24:66:d1:f6:26:2f:fe:
         cb:fc:4a:8e:f4:86:f7:74:c4:86:c7:91:e6:63:7e:98:38:ab:
         63:9f:25:54:3f:1d:42:06:f8:07:9f:1c:e5:50:a3:9d:50:d9:
         30:e9:4f:22:48:a8:85:cd:a1:2e:32:7b:d0:75:83:af:57:e2:
         92:38:b5:cb:8e:72:9c:02:5f:60:11:54:92:61:74:cf:8f:11:
         22:b3:29:5b:3c:58:df:b4:19:27:00:dc:6e:af:c2:ab:a0:ca:
         d1:de:fb:ec:8d:86:e3:ef:1c:4e:b6:b5:27:92:cf:00:b4:f8:
         61:c9:26:a4:c3:85:d0:cf:32:b4:83:a8:db:69:77:94:17:ad:
         ec:1f:bc:f9:06:90:b8:5f:61:64:0e:c6:08:d6:24:26:68:ff:
         4c:e0:f2:19:bc:f4:1d:f6:69:e0:4a:59:e2:a3:8f:5f:14:f3:
         26:0f:70:9d:42:e5:b0:18:e2:a6:ca:3d:bb:3b:c2:e2:8c:94:
         c9:9b:77:a5:2e:49:c3:2f:a6:ec:2f:ba:bb:6d:e9:88:51:3d:
         f1:60:63:a8:21:d1:4a:74:14:9a:c9:b2:0f:1c:b4:88:03:77:
         83:6f:d3:af:81:ce:46:ce:e7:e9:a8:02:4d:74:15:35:93:d0:
         68:42:c7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:10:39 2026 by rpki-client