Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
File:                     yteUrGAc4lBbZfl1p9UWovAKWzE.mft (raw, json)
Hash identifier:          klr9vsnKEJ6yBsQLubtkemgrCNuKHOzesUUsd7rWbzg=
Subject key identifier:   4A:DB:62:6D:55:A2:89:B5:BB:5E:C3:64:9B:36:95:6B:5B:C7:82:37
Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Certificate issuer:       /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Certificate serial:       01A17D053940B360C9CDAB475B957A27A993
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
Manifest number:          1AD5
Signing time:             Tue 27 Oct 2026 11:00:56 +0000
Manifest this update:     Tue 27 Oct 2026 11:00:56 +0000
Manifest next update:     Wed 28 Oct 2026 11:00:56 +0000
Files and hashes:         1: 7llwUQb2MWs6HplnXw9JJ1A5tmk.roa (hash: aiurRHfiE4dklL1f4bmak642G7m5NT5/fQUkQdcYZhc=)
                          2: PZTHXJOe6Rub2_B35Qp_XWm1nCI.roa (hash: ECesKQ6eT4CAViBPjtKG3epmntO2VSEJzUCQqkLEU1U=)
                          3: aFAces1pfL2Gf7A82Ua9HdY5M_8.roa (hash: ihoy12eYWp6w4F3+SZfOyRsI/MGwgD7ZEiY1ooLQCpo=)
                          4: hHr7Y0UynB44y_uXn0Cj4kqW7mo.roa (hash: wecTOMqFEhRZq5XHYAG33+1Fx0NIuyBCiv4Opf1IkrY=)
                          5: pNxj6kdZkMnJYCmMCjf3eYaPL2Q.roa (hash: TTBHabL5n03Hv3G+3nODRR9KvMRepVZdF4Y0GodkG3o=)
                          6: yoOlkunfyIDQIpu8hSJPuV67N8k.roa (hash: 3vGjw6ITVAmFgqvDm6vNVM3T1UQ++9p2OwqdlJ0wKCw=)
                          7: yteUrGAc4lBbZfl1p9UWovAKWzE.crl (hash: UL4R+Y2NlorM5hIdFF/X/egl0RBH1d1nx621DUHRfL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:05:39:40:b3:60:c9:cd:ab:47:5b:95:7a:27:a9:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
        Validity
            Not Before: Oct 27 11:00:56 2026 GMT
            Not After : Oct 28 11:00:56 2026 GMT
        Subject: CN=4adb626d55a289b5bb5ec3649b36956b5bc78237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ed:6e:a1:94:84:9a:a4:37:8d:7c:91:bc:9e:
                    c7:8c:de:28:8c:69:c3:15:93:94:37:bb:b3:26:89:
                    e4:ec:6d:3d:2c:e3:69:f9:ea:9a:0e:12:88:16:24:
                    5c:01:ca:c3:52:6b:fd:a0:fb:f6:42:0e:f4:d6:33:
                    9e:be:b7:5c:b4:72:ca:4e:ac:41:2b:e1:b4:e6:57:
                    1e:2e:15:31:59:d3:e7:5b:3b:21:36:79:8b:01:87:
                    d3:cb:e7:16:ce:7c:68:17:0f:28:44:dd:1e:57:cf:
                    ad:50:a4:ef:74:73:4a:cb:63:fb:2c:66:af:2b:da:
                    70:bc:ec:84:71:b2:5a:ab:d2:ea:cc:8c:ca:68:83:
                    64:2e:c9:f6:dc:c8:61:5e:ac:3c:31:14:a0:66:e5:
                    01:bc:e4:86:bb:91:99:fb:c1:cf:65:5c:73:29:c8:
                    14:1b:85:8e:4e:33:04:d8:71:b1:55:63:eb:8c:4f:
                    9d:b9:f9:c8:f3:14:40:b7:71:22:5b:b5:e2:d1:42:
                    e9:36:e3:55:16:9d:3d:08:48:85:5d:ed:84:06:32:
                    b2:83:2a:d2:12:b7:04:d4:20:15:97:1f:6c:86:42:
                    a5:1c:9b:a5:97:e0:99:52:82:23:51:36:8d:4f:15:
                    18:5d:5f:e2:32:e8:9a:e8:0e:4b:9c:3c:d3:36:89:
                    65:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DB:62:6D:55:A2:89:B5:BB:5E:C3:64:9B:36:95:6B:5B:C7:82:37
            X509v3 Authority Key Identifier:
                keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:a3:26:00:35:43:24:31:cd:0f:0d:48:92:b1:7c:3a:4e:39:
         4a:3f:34:3f:88:b2:27:64:2f:73:eb:9c:04:dc:79:87:7a:02:
         c3:b8:2c:48:52:e1:5b:77:da:22:97:84:68:81:ed:93:86:75:
         f7:b0:23:66:1c:3b:87:12:f3:07:2f:6c:f6:1d:57:d0:1a:b5:
         81:f8:0b:df:7f:08:3e:59:c2:a7:8e:88:17:be:ba:cc:f0:dd:
         33:b1:20:64:65:b9:19:c8:19:32:a1:97:84:d4:91:52:39:cc:
         c6:a9:94:99:c4:23:70:e6:8b:81:4c:33:9a:cf:52:7e:a9:be:
         22:b4:56:71:e6:f6:67:56:d5:89:de:eb:7d:c6:30:fd:77:c1:
         49:60:10:18:70:4c:75:2b:a8:f8:b4:78:a0:c8:a6:03:2b:85:
         20:eb:6b:be:be:8d:ad:86:f8:00:40:82:c4:62:8d:dd:c7:82:
         43:c9:b1:ee:32:ca:a3:e1:75:08:d7:e4:80:9c:c8:13:59:b5:
         07:4e:b1:05:8f:bd:8f:b0:d0:ad:0e:65:38:57:cc:2b:fc:e1:
         f6:91:70:3e:06:3c:91:95:98:fc:80:e7:4e:8c:d8:b2:06:55:
         84:da:b5:70:f7:1e:9a:93:1b:ad:2f:56:c5:9b:f0:18:62:d8:
         74:4b:92:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:28:45 2026 by rpki-client