Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
File:                     RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft (raw, json)
Hash identifier:          s73HDqPJy3zVgJY9/IcDB2L6QoSO2seLcKwpH8jY/VU=
Subject key identifier:   75:CE:89:FC:25:A4:0E:34:AD:EF:33:DD:E2:3F:1D:F8:26:E1:51:2F
Authority key identifier: 47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
Certificate issuer:       /CN=472694d8a399a3a66f442ec72295c754acbbad41
Certificate serial:       01A113AA9CC7CE21F72262F7F55B20F9844D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
Manifest number:          1967
Signing time:             Wed 07 Oct 2026 00:01:50 +0000
Manifest this update:     Wed 07 Oct 2026 00:01:50 +0000
Manifest next update:     Thu 08 Oct 2026 00:01:50 +0000
Files and hashes:         1: 9Y9_-ghmVyAuliB_ZM6L4N2aR9Y.roa (hash: AlB+NM2coMQme+Vwjxfjbx7bvSYOwHST/cCoDhabdh8=)
                          2: BGx_SKWg0A0x4u2zJMu40hnQx4Q.roa (hash: 3vgm19azZKbua/L5jF2wErVGYC2PH4djUu3AdY79HJs=)
                          3: RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl (hash: sEBLofNJKaCMsIh5mxnz0LGoPJsUSs2ugmBTj7W9Eb8=)
                          4: gHq4ZQAB43U72DuDXjjiZ0-2-00.roa (hash: UuXFiLQX/A/tFOUVtGrjRAOGOHSsYt/+KkH7+iWkPIk=)
                          5: xiXKqk3tGFwKj2r6-VSmJj7eq_k.roa (hash: 1zP1wd86zOnUvyVaHLe0E+PkkU2X/81i9Nla1ulLn0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:13:aa:9c:c7:ce:21:f7:22:62:f7:f5:5b:20:f9:84:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472694d8a399a3a66f442ec72295c754acbbad41
        Validity
            Not Before: Oct  7 00:01:50 2026 GMT
            Not After : Oct  8 00:01:50 2026 GMT
        Subject: CN=75ce89fc25a40e34adef33dde23f1df826e1512f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1f:3e:f5:d7:41:bd:1b:47:c8:43:b7:7f:f0:
                    56:bb:9c:ac:bd:63:27:7c:9a:4e:b9:09:db:9b:10:
                    d6:ec:1c:17:5c:f8:4d:56:15:6e:2f:ec:10:82:7d:
                    02:af:ee:8b:84:99:fa:20:ec:d8:ac:cf:52:ef:89:
                    ef:c5:65:3e:4f:2d:e6:83:ad:e3:93:66:b4:24:3e:
                    89:5b:a3:ea:01:9b:da:6f:f0:95:b5:73:2c:9c:c7:
                    13:30:23:63:e1:e4:c3:c4:9a:09:2f:58:40:c9:5b:
                    f1:bc:96:dc:8d:38:4f:e0:38:d0:6b:24:be:3e:c1:
                    e8:be:bc:74:72:87:73:92:fb:00:20:02:97:d4:85:
                    56:4a:2e:c8:4c:8f:4b:73:a8:7a:58:d9:31:db:94:
                    e6:42:69:a0:d0:7a:d0:fb:c5:51:51:aa:42:ac:b9:
                    cb:67:57:6a:0d:3c:e9:e5:58:5d:4b:81:37:b3:33:
                    21:bb:06:65:4b:1b:ad:52:14:02:08:8f:c7:3f:dd:
                    0e:91:cd:39:6b:b3:8a:24:58:4c:9c:60:4b:72:d8:
                    01:4b:0f:74:17:4c:4e:bd:01:d7:87:8f:89:7f:ac:
                    e7:47:e0:97:d6:3e:1b:2d:c8:50:02:b1:57:65:94:
                    1f:f4:dd:90:39:40:0b:0b:0a:ca:09:35:f0:03:0e:
                    a2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:CE:89:FC:25:A4:0E:34:AD:EF:33:DD:E2:3F:1D:F8:26:E1:51:2F
            X509v3 Authority Key Identifier:
                keyid:47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:59:58:5c:f1:fa:0b:1b:40:d8:2b:eb:2d:ac:d3:28:7b:48:
         13:06:d2:fb:68:62:c7:78:a2:bf:9c:0b:05:60:cd:3a:19:bd:
         6e:f3:83:e1:49:36:fa:98:c6:03:a9:8c:4e:f6:06:5c:fe:81:
         b5:bf:0b:55:02:b2:f8:0e:51:34:00:df:9c:89:3c:b9:c0:cc:
         15:36:53:03:2d:ec:3c:68:49:1d:5a:b9:be:c1:62:ff:4b:19:
         61:25:42:d7:32:d5:96:9a:e8:2d:b0:78:a8:0b:fa:90:19:1d:
         7e:c0:56:0c:30:7f:82:c1:4f:bc:9d:ac:ce:a4:99:66:53:99:
         a6:a0:fd:a3:97:fd:f6:13:b7:c3:7a:ad:04:8e:9e:c4:9d:22:
         63:68:94:23:f7:4a:9e:07:67:a4:c8:60:9e:44:5c:30:ae:33:
         b3:7e:9b:0e:b3:ca:18:b6:35:8d:11:84:78:70:d2:94:3f:20:
         ad:ae:31:07:36:fc:5d:b2:e9:e4:c7:5a:de:a1:2a:a8:66:32:
         2c:d4:94:6c:fc:a2:58:4d:1d:23:df:db:52:bb:09:82:80:e9:
         8b:a7:2d:3e:ec:8e:31:e9:99:6e:c5:19:c8:60:56:3c:73:9d:
         e1:61:8b:84:75:e5:9a:6e:69:8c:e9:a5:a8:1f:9c:2c:f2:1a:
         4b:37:46:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:52:25 2026 by rpki-client