Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/98d6bb-0a89-48c4-b932-5b389343dbc9/1/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.mft
File:                     yr8ZNP_pv5zjUVcu0uuCB8tVU1g.mft (raw, json)
Hash identifier:          sWeHlN9W3xCcxXbRBXKwDidZYVg4M9vG0rTar9Q3bAg=
Subject key identifier:   86:11:0B:B2:B3:B0:18:B7:D5:95:D4:C4:40:8C:DB:57:6C:B3:6E:AD
Authority key identifier: CA:BF:19:34:FF:E9:BF:9C:E3:51:57:2E:D2:EB:82:07:CB:55:53:58
Certificate issuer:       /CN=cabf1934ffe9bf9ce351572ed2eb8207cb555358
Certificate serial:       01A180E26B71D9374FDDE799D306B8731A25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/98d6bb-0a89-48c4-b932-5b389343dbc9/1/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.mft
Manifest number:          0519
Signing time:             Wed 28 Oct 2026 05:01:24 +0000
Manifest this update:     Wed 28 Oct 2026 05:01:24 +0000
Manifest next update:     Thu 29 Oct 2026 05:01:24 +0000
Files and hashes:         1: 16Z0OkWb0Dur5XwCN5u7vEudWIw.asa (hash: 79o/CH9AjYATd4cRUHGgcd4zfje42HRxj+qIvXvEvq8=)
                          2: UsDg17ey3WBd3YL6TLfVROu-CSg.asa (hash: 2bXU+5OuSeAs7p+4THuO4D5+o2Rqa2JGVMNWeb/YToI=)
                          3: yr8ZNP_pv5zjUVcu0uuCB8tVU1g.crl (hash: 4UPTRx96aBWWRGTLOPlAL2hJpleuhD8YnZ+KF92cSq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/98d6bb-0a89-48c4-b932-5b389343dbc9/1/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/98d6bb-0a89-48c4-b932-5b389343dbc9/1/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 05:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:e2:6b:71:d9:37:4f:dd:e7:99:d3:06:b8:73:1a:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cabf1934ffe9bf9ce351572ed2eb8207cb555358
        Validity
            Not Before: Oct 28 05:01:24 2026 GMT
            Not After : Oct 29 05:01:24 2026 GMT
        Subject: CN=86110bb2b3b018b7d595d4c4408cdb576cb36ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a6:d7:e8:f5:b6:57:a9:d7:33:49:53:21:2d:
                    7b:2d:67:44:06:ba:92:49:29:ad:6f:98:a5:18:f4:
                    0d:bf:0f:a9:2e:d0:bb:55:07:88:7d:ca:8b:16:c5:
                    2f:c2:34:02:97:2d:db:7a:35:4b:c9:b6:f1:0e:89:
                    81:4f:c7:da:9e:eb:7e:65:db:a9:9e:4d:df:23:06:
                    93:2b:84:99:43:55:bc:f8:2a:ff:72:05:5b:be:d4:
                    04:8a:2f:11:83:fe:db:34:78:bd:5f:c7:31:59:fb:
                    cf:0d:b8:24:88:f7:77:77:76:b4:f5:0d:c3:2d:fd:
                    75:c8:dd:8b:93:e3:fe:e6:a3:5a:e8:ea:d8:88:8f:
                    62:f5:97:68:4a:9e:8a:d2:82:cf:a9:bc:42:c4:db:
                    b5:01:4a:20:04:da:32:89:a8:3d:49:b5:b9:23:f2:
                    37:f9:06:76:09:7c:a1:63:87:ab:99:e9:9e:90:31:
                    b9:8d:b3:c1:1f:76:0b:01:0c:ac:2f:49:61:5b:96:
                    a1:99:bb:81:7c:f4:96:e2:00:75:9d:6e:1c:b3:11:
                    c6:61:a0:d2:66:99:dd:ca:29:90:81:ca:79:f1:fb:
                    6e:70:0c:ad:4b:43:ad:2d:44:ff:e2:0c:fa:ef:24:
                    70:1e:5e:ba:39:6f:2c:fd:d7:0f:8b:aa:ba:cd:19:
                    52:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:11:0B:B2:B3:B0:18:B7:D5:95:D4:C4:40:8C:DB:57:6C:B3:6E:AD
            X509v3 Authority Key Identifier:
                keyid:CA:BF:19:34:FF:E9:BF:9C:E3:51:57:2E:D2:EB:82:07:CB:55:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/98d6bb-0a89-48c4-b932-5b389343dbc9/1/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/98d6bb-0a89-48c4-b932-5b389343dbc9/1/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:0d:fc:15:ce:a0:10:8d:af:10:28:2b:ba:20:dd:bf:5a:40:
         e1:5b:0b:ed:08:3d:be:fb:7f:34:2a:6f:20:84:4f:16:47:64:
         ff:fa:40:02:5f:72:2d:c5:37:68:8e:4e:9b:40:98:26:e3:27:
         72:0f:1f:71:e4:9a:6c:d1:c4:c1:07:de:d4:b1:59:e4:b9:bb:
         5c:9b:40:fa:8e:31:d5:f6:5e:33:2e:ea:8d:ae:a6:ff:0d:9e:
         fa:43:4d:c5:89:f5:3a:bd:02:45:91:1f:05:36:f3:cd:12:18:
         a2:8d:d5:9c:03:26:d8:fe:f9:cf:c1:9f:e2:16:c8:76:37:3a:
         0e:f3:13:29:ed:4b:b4:34:e4:2b:15:e8:d6:d0:41:0e:e1:44:
         6c:fe:7d:1d:3c:15:c3:97:73:52:68:c4:84:6e:4b:29:bd:7a:
         f6:87:ea:05:12:fb:e3:35:ff:dd:0d:e5:a7:be:e5:b8:0a:6d:
         9b:82:48:5b:82:7c:bc:5f:09:00:6d:01:87:1e:e2:64:d3:78:
         96:45:ff:48:29:02:2c:db:da:24:a5:87:12:7a:5e:6a:85:36:
         f7:4d:b1:bd:3e:e2:1e:69:66:24:37:24:0b:fb:12:bf:2d:e5:
         f9:2b:03:53:81:ef:51:18:df:8d:36:f2:83:c0:eb:23:92:59:
         ec:73:d4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:36:15 2026 by rpki-client