Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/dfabbb-90c2-4952-863f-8a4e22c67c1b/1/ykYrWgu5S_tgEDzbR_j3P_hUvX8.mft
File:                     ykYrWgu5S_tgEDzbR_j3P_hUvX8.mft (raw, json)
Hash identifier:          sQlMAKZnStt4+kPObK1IAjPBq6RGqhIqmxhJRXiI6Hc=
Subject key identifier:   94:3C:76:A5:AA:F6:5B:8D:20:03:E0:73:BB:40:0A:54:6A:E8:C8:CB
Authority key identifier: CA:46:2B:5A:0B:B9:4B:FB:60:10:3C:DB:47:F8:F7:3F:F8:54:BD:7F
Certificate issuer:       /CN=ca462b5a0bb94bfb60103cdb47f8f73ff854bd7f
Certificate serial:       01A0FE352AE50D08B77EBBF527D2B27DB657
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ykYrWgu5S_tgEDzbR_j3P_hUvX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/dfabbb-90c2-4952-863f-8a4e22c67c1b/1/ykYrWgu5S_tgEDzbR_j3P_hUvX8.mft
Manifest number:          A1
Signing time:             Fri 02 Oct 2026 20:01:32 +0000
Manifest this update:     Fri 02 Oct 2026 20:01:32 +0000
Manifest next update:     Sat 03 Oct 2026 20:01:32 +0000
Files and hashes:         1: 8NWtet7eSCy10rH32fkjWsmApiw.asa (hash: LavvHCxedDdHzBFi5lznXEA20zqPWwWh71l5QIxCQcg=)
                          2: ykYrWgu5S_tgEDzbR_j3P_hUvX8.crl (hash: macdY0/+LI6itKwVYyDGqJEAyqNAzSZVsXLOsBtIcwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/dfabbb-90c2-4952-863f-8a4e22c67c1b/1/ykYrWgu5S_tgEDzbR_j3P_hUvX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/dfabbb-90c2-4952-863f-8a4e22c67c1b/1/ykYrWgu5S_tgEDzbR_j3P_hUvX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ykYrWgu5S_tgEDzbR_j3P_hUvX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fe:35:2a:e5:0d:08:b7:7e:bb:f5:27:d2:b2:7d:b6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca462b5a0bb94bfb60103cdb47f8f73ff854bd7f
        Validity
            Not Before: Oct  2 20:01:32 2026 GMT
            Not After : Oct  3 20:01:32 2026 GMT
        Subject: CN=943c76a5aaf65b8d2003e073bb400a546ae8c8cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ec:85:b9:c3:37:77:0b:e6:f3:8d:23:fc:f7:
                    e1:e7:ba:73:86:2b:0f:88:c1:29:d6:07:70:c7:46:
                    3e:5b:d2:77:6d:c1:fa:33:d6:f0:df:17:62:25:bb:
                    53:7b:51:22:dd:5a:f0:5f:19:2e:d1:a5:a5:19:f9:
                    55:fa:4c:47:e8:8a:a3:d9:c4:5f:4f:b3:76:95:97:
                    d0:4c:7e:f9:6d:1f:b8:1e:24:e4:48:e7:8d:5c:1e:
                    1f:cb:67:6d:35:55:62:7b:f5:eb:9f:37:d4:11:9b:
                    f2:55:89:36:cc:2b:46:f2:46:36:e3:5e:d8:a6:b6:
                    cc:0f:9f:3d:44:ee:f7:e5:ae:d7:42:ce:b6:58:e2:
                    98:26:d4:aa:f3:ef:eb:e3:71:c9:50:33:dc:32:ad:
                    51:f1:f8:e7:30:32:b3:06:76:75:0b:01:6c:4b:cd:
                    b5:28:7b:5c:f5:8b:5e:26:79:11:87:81:21:97:4e:
                    bf:51:fc:ac:76:38:39:8f:85:d5:83:8e:1c:05:7f:
                    6f:df:ef:83:f3:99:08:03:cd:e2:19:02:c3:be:85:
                    e3:99:33:a9:83:7f:d1:0d:79:14:e2:94:f4:ef:78:
                    9d:9b:f0:d4:1f:b5:94:0b:90:dc:f0:d2:9b:74:51:
                    6e:67:bd:ce:20:57:6a:8f:28:97:30:9a:d5:61:c3:
                    52:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3C:76:A5:AA:F6:5B:8D:20:03:E0:73:BB:40:0A:54:6A:E8:C8:CB
            X509v3 Authority Key Identifier:
                keyid:CA:46:2B:5A:0B:B9:4B:FB:60:10:3C:DB:47:F8:F7:3F:F8:54:BD:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykYrWgu5S_tgEDzbR_j3P_hUvX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dfabbb-90c2-4952-863f-8a4e22c67c1b/1/ykYrWgu5S_tgEDzbR_j3P_hUvX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dfabbb-90c2-4952-863f-8a4e22c67c1b/1/ykYrWgu5S_tgEDzbR_j3P_hUvX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:db:11:2f:ab:7c:71:30:22:62:74:07:8a:4f:2f:5b:3b:be:
         a9:00:0e:d8:b8:46:09:c7:d1:47:42:8a:d4:ef:d5:2a:53:f4:
         20:c7:a0:72:22:d5:8e:99:35:35:8c:ba:09:5b:a9:6d:26:4e:
         d8:2f:98:98:b6:39:cb:a1:ab:b7:f3:ea:4e:f7:cd:56:d4:44:
         d7:c6:31:00:60:77:3a:98:b4:ba:8a:5d:cb:4e:c4:bd:d5:07:
         eb:d7:37:0e:21:6b:43:ea:30:bd:b8:02:1f:36:2b:6d:28:a1:
         d8:48:fe:ba:0b:24:ab:e5:8c:8e:a5:5a:c6:4a:96:ae:30:8a:
         14:9e:3d:75:62:f8:21:09:c6:7d:5e:e7:d2:fc:79:99:22:68:
         13:81:b1:c9:9a:cf:02:81:dc:d3:3c:01:02:10:ea:2c:76:4e:
         d1:2d:ef:99:d7:a8:d5:d8:c4:90:b6:a6:2d:05:5f:c6:12:08:
         15:df:ce:68:09:8c:8f:21:35:3e:aa:c3:a0:fd:1a:e0:b4:52:
         e3:a6:92:66:5a:1f:fc:08:36:c7:17:6b:dc:54:06:ae:aa:f9:
         b8:ad:70:28:37:af:db:de:45:7c:60:bb:c0:05:84:60:f7:a0:
         11:af:e6:e9:1b:58:e7:1b:c8:b2:d5:69:6a:a8:52:19:61:a0:
         6c:f9:61:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD+NSrlDQi3frv1J9KyfbZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNDYyYjVhMGJiOTRiZmI2MDEwM2NkYjQ3ZjhmNzNmZjg1
NGJkN2YwHhcNMjYxMDAyMjAwMTMyWhcNMjYxMDAzMjAwMTMyWjAzMTEwLwYDVQQD
Eyg5NDNjNzZhNWFhZjY1YjhkMjAwM2UwNzNiYjQwMGE1NDZhZThjOGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweyFucM3dwvm840j/Pfh57pzhisP
iMEp1gdwx0Y+W9J3bcH6M9bw3xdiJbtTe1Ei3VrwXxku0aWlGflV+kxH6Iqj2cRf
T7N2lZfQTH75bR+4HiTkSOeNXB4fy2dtNVVie/XrnzfUEZvyVYk2zCtG8kY2417Y
prbMD589RO735a7XQs62WOKYJtSq8+/r43HJUDPcMq1R8fjnMDKzBnZ1CwFsS821
KHtc9YteJnkRh4Ehl06/Ufysdjg5j4XVg44cBX9v3++D85kIA83iGQLDvoXjmTOp
g3/RDXkU4pT073idm/DUH7WUC5Dc8NKbdFFuZ73OIFdqjyiXMJrVYcNSbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQ8dqWq9luNIAPgc7tAClRq6MjLMB8GA1UdIwQY
MBaAFMpGK1oLuUv7YBA820f49z/4VL1/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWtZcldndTVTX3RnRUR6YlJfajNQX2hVdlg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kZmFiYmItOTBjMi00OTUyLTg2M2Yt
OGE0ZTIyYzY3YzFiLzEveWtZcldndTVTX3RnRUR6YlJfajNQX2hVdlg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kZmFiYmItOTBjMi00OTUyLTg2M2YtOGE0ZTIyYzY3YzFi
LzEveWtZcldndTVTX3RnRUR6YlJfajNQX2hVdlg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHNsRL6t8
cTAiYnQHik8vWzu+qQAO2LhGCcfRR0KK1O/VKlP0IMegciLVjpk1NYy6CVupbSZO
2C+YmLY5y6Grt/PqTvfNVtRE18YxAGB3Opi0uopdy07EvdUH69c3DiFrQ+owvbgC
HzYrbSih2Ej+ugskq+WMjqVaxkqWrjCKFJ49dWL4IQnGfV7n0vx5mSJoE4GxyZrP
AoHc0zwBAhDqLHZO0S3vmdeo1djEkLamLQVfxhIIFd/OaAmMjyE1PqrDoP0a4LRS
46aSZlof/Ag2xxdr3FQGrqr5uK1wKDev295FfGC7wAWEYPegEa/m6RtY5xvIstVp
aqhSGWGgbPlhdA==
-----END CERTIFICATE-----
Generated at Sat Oct 3 05:54:07 2026 by rpki-client