Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
File:                     YlDmLARIEp9jWJGKccM0TiWoLZs.mft (raw, json)
Hash identifier:          EbFZJeYLF9xD4qabTocJwfYsPCVkW2+Vq8AmLTWr5js=
Subject key identifier:   93:7C:89:36:E2:6D:36:28:6B:3D:AC:42:7A:F0:12:39:4D:83:6A:87
Authority key identifier: 62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B
Certificate issuer:       /CN=6250e62c0448129f6358918a71c3344e25a82d9b
Certificate serial:       01A18299F56AB53EC2474CFE236EBD08F37D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
Manifest number:          0475
Signing time:             Wed 28 Oct 2026 13:01:30 +0000
Manifest this update:     Wed 28 Oct 2026 13:01:30 +0000
Manifest next update:     Thu 29 Oct 2026 13:01:30 +0000
Files and hashes:         1: DRO3tCTePWIvKHPgw6pmaXwU0JU.roa (hash: nsXU89cmKGMuchI2BpERlyONOF3QYxV+4FYWi2CIuFY=)
                          2: YlDmLARIEp9jWJGKccM0TiWoLZs.crl (hash: mhkCisHyvg4IqodkgMfbyNQpuRywT9NZN7caT2ROeqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 13:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:82:99:f5:6a:b5:3e:c2:47:4c:fe:23:6e:bd:08:f3:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6250e62c0448129f6358918a71c3344e25a82d9b
        Validity
            Not Before: Oct 28 13:01:30 2026 GMT
            Not After : Oct 29 13:01:30 2026 GMT
        Subject: CN=937c8936e26d36286b3dac427af012394d836a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:81:f1:c7:14:c1:b3:18:a0:97:8b:90:fa:
                    b5:2f:41:7f:10:be:04:a3:d2:27:48:2b:a1:bc:43:
                    81:4e:43:85:a8:9d:fc:21:90:3a:12:3d:a0:30:d5:
                    07:28:68:0a:96:ee:f0:4c:23:3f:50:76:97:0e:b2:
                    24:29:06:e1:77:87:fe:0c:1a:21:c7:9f:68:1b:e0:
                    ee:5e:66:af:09:8f:f7:a3:0d:24:4f:a5:53:df:f4:
                    76:9b:43:bb:f5:17:49:69:41:dc:75:e2:b4:ff:be:
                    c7:59:14:09:00:ad:f3:34:d3:d6:00:d2:e3:8e:95:
                    2a:4d:38:49:42:9e:b5:6e:56:cb:d4:6c:d2:20:a0:
                    36:68:5e:88:fe:53:4f:11:18:ff:0e:8c:3e:44:3b:
                    39:d7:64:c4:55:d3:5d:96:78:77:63:d8:42:1b:38:
                    0b:14:79:5b:76:b6:3f:8b:c8:04:d9:bc:6d:70:d1:
                    76:e9:26:b4:3a:4f:4b:77:7d:93:a2:87:70:4c:6d:
                    43:1e:7c:b3:28:db:a5:66:7b:c9:f1:dc:24:63:6e:
                    ec:b4:ae:12:9a:f2:e1:c2:f7:21:46:fd:51:dd:c9:
                    be:69:a3:d1:7f:5b:db:f6:9f:b9:5d:83:9c:56:06:
                    b7:79:ba:e9:62:d4:6d:d6:65:90:68:1f:dc:2e:60:
                    d1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7C:89:36:E2:6D:36:28:6B:3D:AC:42:7A:F0:12:39:4D:83:6A:87
            X509v3 Authority Key Identifier:
                keyid:62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:6a:1c:fb:7a:12:91:cc:1c:d4:bf:c6:67:26:80:9d:66:7f:
         e0:f3:c3:7a:ed:27:cd:a9:f4:7c:76:1f:c7:8e:01:9b:d3:ec:
         20:6e:3f:cd:74:fc:84:b6:cb:b6:f1:de:c5:a4:d3:7d:c2:e5:
         fb:f7:e2:70:c5:3e:09:bf:a8:14:d0:49:f2:3d:25:dd:03:58:
         79:41:93:6f:68:14:9a:fc:fc:52:69:f0:9b:14:e0:d0:f4:24:
         e2:6d:73:01:07:e1:f1:57:77:32:9d:4c:02:0e:52:42:55:a4:
         08:7f:15:27:32:bd:2f:cb:68:7c:f9:b0:5f:f9:0d:e2:a6:e3:
         c2:ec:c4:1a:9b:9c:5c:52:98:17:ed:00:a9:18:df:a7:f1:c2:
         4c:21:2e:92:4d:dd:e5:0d:61:0f:96:64:92:8e:10:6c:4e:48:
         fd:a6:c7:25:20:7f:59:29:11:cb:a4:3e:3e:f3:4c:09:dc:27:
         e3:b4:a7:e3:e8:50:42:b1:83:8b:1f:1b:80:ac:b5:91:89:72:
         73:10:59:18:af:06:89:16:05:cb:bb:1e:ce:c2:83:76:9c:f0:
         cd:c2:bf:a4:ca:15:c4:65:20:47:b0:5e:e1:87:7f:f6:90:7a:
         14:7e:55:32:b6:1e:e0:ac:eb:9e:57:81:cd:c5:e8:6c:52:d4:
         a8:27:c6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:32:20 2026 by rpki-client