Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
File:                     yxODRz6KqHJwaPx1LgYOPb9j4O8.mft (raw, json)
Hash identifier:          A66M0cgQ+VFc6+dFUdtT++SrnUTgLBhoVrIF+kalbPc=
Subject key identifier:   A2:3C:89:43:C5:A2:5C:C8:17:B5:CA:37:F8:D3:35:75:23:7D:DD:EF
Authority key identifier: CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF
Certificate issuer:       /CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef
Certificate serial:       01A182D0F065D120153EB20C787747FF2939
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
Manifest number:          0C84
Signing time:             Wed 28 Oct 2026 14:01:33 +0000
Manifest this update:     Wed 28 Oct 2026 14:01:33 +0000
Manifest next update:     Thu 29 Oct 2026 14:01:33 +0000
Files and hashes:         1: 153fjxVtV5IdmULjsKFsyho7xsA.roa (hash: sMHTNIGNQvUhkdN5VlDx3F2+I4FUHbgADAQUyA3sCa0=)
                          2: yxODRz6KqHJwaPx1LgYOPb9j4O8.crl (hash: 9EtqEqtWNN8qIr2COYQsDlB0Z1Y9CCVDqR7Mmbya5I8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 14:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:82:d0:f0:65:d1:20:15:3e:b2:0c:78:77:47:ff:29:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef
        Validity
            Not Before: Oct 28 14:01:33 2026 GMT
            Not After : Oct 29 14:01:33 2026 GMT
        Subject: CN=a23c8943c5a25cc817b5ca37f8d33575237dddef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a9:fe:87:59:c9:a2:1e:63:31:fc:48:8c:c3:
                    c6:81:04:55:cf:7a:f2:5a:8a:54:19:12:35:9c:3c:
                    37:7d:7f:24:03:76:01:63:7d:a7:e0:07:78:60:29:
                    29:c9:47:72:76:3d:16:97:52:a1:3b:40:fe:d8:f9:
                    e7:a2:95:e8:36:f1:7d:f1:f4:b5:64:33:80:87:ca:
                    c5:3a:9e:d8:05:a8:c0:d8:38:25:b3:ec:be:bf:b7:
                    05:7e:12:fb:58:af:37:d2:da:a1:14:a9:10:08:7b:
                    49:a3:54:60:7d:b3:11:0b:56:8f:35:cf:34:bc:55:
                    db:98:ca:a0:6b:97:b5:26:09:92:71:e7:4a:ce:08:
                    7a:10:86:a6:36:5d:cc:58:90:d8:c0:ec:1c:d6:64:
                    e0:f6:c5:25:d5:b8:22:37:9f:29:5e:79:80:a8:85:
                    d5:9c:1e:7f:8d:8d:73:a8:30:8c:e0:77:1b:fb:2a:
                    dc:3b:b3:68:09:bf:03:91:4d:06:8f:e8:a1:23:16:
                    a9:fe:2e:50:50:50:65:31:9f:6c:32:39:2b:f6:55:
                    bc:7d:35:1f:85:37:5f:8f:09:93:58:52:93:8b:81:
                    d2:b9:3b:82:6f:94:17:9a:0c:dc:eb:b4:d1:88:e3:
                    b3:d1:0c:8b:93:d3:47:fb:e4:eb:2d:88:83:9d:a6:
                    b6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3C:89:43:C5:A2:5C:C8:17:B5:CA:37:F8:D3:35:75:23:7D:DD:EF
            X509v3 Authority Key Identifier:
                keyid:CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:02:63:b9:2d:07:f5:5e:cd:0d:2f:8b:6b:bf:e4:22:3d:a9:
         15:3d:b1:c9:dc:f9:4a:a9:93:23:72:92:34:f6:a7:d4:d6:e6:
         62:8f:37:1d:ab:e1:52:34:a7:56:b2:90:2b:ee:58:20:b7:a0:
         5d:4a:2b:f1:99:60:18:0b:49:e0:6b:de:8d:62:1f:f1:14:57:
         c9:47:0e:08:ac:e1:88:c7:c2:a3:a8:ae:09:e6:fe:07:de:0b:
         61:8a:60:c7:65:c4:13:53:5a:1f:be:d3:ae:e9:cc:ba:24:2d:
         50:6f:7e:d1:73:da:f7:d0:e3:dc:25:d9:80:f0:bb:6a:a0:3f:
         8d:d0:54:76:d1:c9:f7:22:13:ed:20:fe:7b:b0:05:3b:ca:9f:
         b1:90:94:9b:be:0c:62:cc:b6:79:12:d3:0a:64:c8:25:da:6f:
         e6:2c:19:37:ce:19:1a:68:6b:12:e9:5a:57:4e:d7:74:1d:3b:
         42:c1:9c:e9:f1:a0:38:de:81:eb:03:03:4e:a3:3f:47:84:a8:
         10:8c:07:57:91:11:58:70:a9:a6:86:14:8c:fa:0b:2a:04:b8:
         d4:ff:96:d5:df:5a:7c:79:23:aa:bb:e9:bc:eb:fc:75:50:70:
         1b:92:c1:a8:c5:5f:9d:bb:69:9a:ed:e8:78:3e:c4:9b:d7:d7:
         17:7a:71:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:42:44 2026 by rpki-client