Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
File:                     yAkUktLOioDAh7h2-R1qPCm-eiU.mft (raw, json)
Hash identifier:          T3WSVJBX7mzuVGmTnN1PebWmCTzgRXuRLKSaYV/Zbgg=
Subject key identifier:   0A:25:FA:46:1D:96:E5:92:9C:55:C6:31:4F:01:4D:96:38:1F:1B:23
Authority key identifier: C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
Certificate issuer:       /CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Certificate serial:       01A18BD3704836636DFB6A75D97CB0E6E18A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
Manifest number:          10C6
Signing time:             Fri 30 Oct 2026 08:00:52 +0000
Manifest this update:     Fri 30 Oct 2026 08:00:52 +0000
Manifest next update:     Sat 31 Oct 2026 08:00:52 +0000
Files and hashes:         1: 8dsL3d0zKteGNgXAMQBV42lOios.roa (hash: Pev55fmq4J10EVCjxW4G+QGn2d3P5hztkv0FQEW8Zn0=)
                          2: yAkUktLOioDAh7h2-R1qPCm-eiU.crl (hash: nCPz4rjoE4AgOYslgIybgnvHFvVSDuj2PXJXPbQp8wY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8b:d3:70:48:36:63:6d:fb:6a:75:d9:7c:b0:e6:e1:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
        Validity
            Not Before: Oct 30 08:00:52 2026 GMT
            Not After : Oct 31 08:00:52 2026 GMT
        Subject: CN=0a25fa461d96e5929c55c6314f014d96381f1b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ed:5a:26:ee:1d:9e:6c:89:26:00:af:3c:91:
                    4b:27:dd:47:32:a3:f8:11:26:f0:da:fd:f4:bb:36:
                    6f:32:2a:1e:0e:1f:36:46:f8:e8:98:4f:89:80:74:
                    88:82:92:e4:cb:18:b1:06:26:49:d2:09:d7:d4:43:
                    fe:d2:c3:6d:9b:b2:b9:dc:cd:8d:6c:7e:e2:13:fa:
                    1e:5e:04:c4:08:ce:42:dc:66:96:92:0a:c2:1b:0a:
                    07:6b:b5:6b:31:2a:0f:bb:c7:88:a7:cf:d7:63:9b:
                    aa:c4:64:17:28:96:15:05:52:ac:02:d8:95:cc:f9:
                    36:ef:af:13:3d:b9:79:dc:90:3f:fc:96:20:d2:23:
                    00:95:ff:94:f4:f5:d5:92:9b:3e:b2:ef:c5:64:cc:
                    9b:bf:84:5f:9b:c1:f9:56:c4:91:42:47:f0:62:db:
                    59:99:2b:5d:34:9f:0a:91:f3:57:f9:5f:a7:6d:9c:
                    1d:fb:f1:d7:9d:a9:75:2c:3d:60:98:c1:16:a6:22:
                    2f:c0:86:28:8e:9f:ec:8b:ce:e4:2e:59:30:93:f4:
                    86:bc:10:f6:0c:b3:dd:92:0f:31:b3:13:41:a1:a7:
                    c5:af:58:ed:b9:5b:c8:cd:02:05:98:31:8b:b2:c4:
                    2f:24:e4:77:51:02:7e:f7:4e:1c:77:09:e6:a3:19:
                    c6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:25:FA:46:1D:96:E5:92:9C:55:C6:31:4F:01:4D:96:38:1F:1B:23
            X509v3 Authority Key Identifier:
                keyid:C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:8d:49:54:77:de:6c:16:64:3c:56:33:10:7f:ae:69:e6:a3:
         c9:e7:84:2e:27:06:96:7c:d6:50:6d:17:cf:7e:de:2f:06:31:
         7a:fb:b8:bf:e0:34:79:8a:a3:04:fc:e6:5f:49:20:9e:cb:ce:
         5a:bf:9f:f9:f9:ab:e3:42:cc:15:cc:c6:0c:b1:ba:2a:0d:9d:
         d1:f9:88:c3:8c:2e:80:6d:e8:07:84:c0:57:9c:fe:93:aa:39:
         43:1b:d7:06:d2:d5:b6:6b:21:db:3b:79:41:6b:15:be:31:4f:
         8b:90:22:50:95:d3:4e:4c:67:5d:54:90:f5:e8:84:f1:3c:4c:
         d1:5b:6f:fd:41:e6:64:d6:ef:14:64:dd:13:06:25:16:d2:8d:
         17:f4:1f:e2:6b:df:9f:89:03:1f:1b:ff:98:e8:7a:9b:04:34:
         1e:c2:8b:e7:7a:4d:f8:b2:0a:32:f2:58:ee:7c:1a:b0:89:b4:
         bd:41:65:90:22:40:1a:d1:e2:40:bf:43:a8:46:d6:ec:0c:cc:
         8f:d5:8e:55:4e:f7:a2:95:26:d1:9c:ea:9f:76:81:4c:e0:86:
         6c:96:1c:d5:c6:4c:02:92:08:68:1b:af:6d:a8:5c:3d:cb:b9:
         61:79:e2:93:82:f0:9a:7e:d7:ec:5c:a1:cc:ef:9f:cf:73:02:
         23:31:a3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 12:43:18 2026 by rpki-client