Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
File:                     yYuCXzbpzDMDFclA3oAMurzjOXs.mft (raw, json)
Hash identifier:          EN3t/3QUQBjAmZv9bQ1Kvw1Ic5knGOg1tXsZ8rGIlEY=
Subject key identifier:   1D:22:AF:13:E3:D0:FB:BE:8F:A4:62:3C:D5:FC:AE:7C:9B:9D:14:87
Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Certificate issuer:       /CN=c98b825f36e9cc330315c940de800cbabce3397b
Certificate serial:       01A155F828B3C3604C496FF9AD897CE32A17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
Manifest number:          16C3
Signing time:             Mon 19 Oct 2026 21:01:28 +0000
Manifest this update:     Mon 19 Oct 2026 21:01:28 +0000
Manifest next update:     Tue 20 Oct 2026 21:01:28 +0000
Files and hashes:         1: BIg9g8urjWzblnNO_lVEgCU_0L4.roa (hash: Zkf0cuxdTPBJNDfyoYR/TqE/qjZVNjVMgcTyzgopEr0=)
                          2: Iphm7z7updBWRc2PNItoZmhVxuU.roa (hash: ld3zzmRGDXodfmUypvYiol82dEtF61c0SzZg6YzCfrA=)
                          3: T0TpEfENHz0bxlptxB0nFINW90A.roa (hash: TVxTNouu1BfDbucKooEPdLrXN8aLRFVGM4/IuDaxZE0=)
                          4: fpWqB6GHlXOWcBg30kWtguLx_NY.roa (hash: fXvgv1LhXoBErsUNrvQ4zZ5bYi/IxJJ6Qaj/JGmSwZU=)
                          5: hRup2JJMWBOF-WiIMoiCnCzzApo.roa (hash: /227YrF7k3BWfB+D58mu+onRUSZxRqZuv9vNnJFuS4M=)
                          6: yYuCXzbpzDMDFclA3oAMurzjOXs.crl (hash: Rp5p/zUXoYYIAMMRGwAA3zEdy1xky0vBg8UU7DXrf5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:55:f8:28:b3:c3:60:4c:49:6f:f9:ad:89:7c:e3:2a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b
        Validity
            Not Before: Oct 19 21:01:28 2026 GMT
            Not After : Oct 20 21:01:28 2026 GMT
        Subject: CN=1d22af13e3d0fbbe8fa4623cd5fcae7c9b9d1487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fc:42:d2:bf:f4:f5:ca:3f:a1:24:ca:ff:1a:
                    9e:88:74:43:8a:8d:1e:37:b1:d7:e0:47:fd:fd:33:
                    30:58:93:81:bc:64:7f:26:19:e3:50:27:92:1f:96:
                    03:b8:f3:4f:12:10:d8:bd:d8:a8:54:1e:ca:1f:76:
                    ed:9e:06:b3:60:1c:f4:13:81:65:79:98:ea:1c:37:
                    ba:db:58:85:48:1f:a7:d9:31:6a:10:c3:c8:79:ca:
                    88:c7:6a:6f:bf:9d:89:aa:4a:37:79:14:b8:b5:15:
                    76:b1:42:56:19:cc:b1:d8:b1:b0:50:b9:94:5f:44:
                    c0:2d:30:98:16:fa:2a:dc:59:c2:18:7d:65:48:29:
                    14:f4:32:3a:c4:bc:28:93:e0:fd:e7:09:43:b3:cf:
                    14:d1:2b:4c:13:e8:12:e5:fa:5f:45:10:cb:11:0d:
                    c5:f5:6a:e0:ec:72:26:6b:7f:8e:4f:0e:e0:42:1d:
                    6f:cd:25:52:f7:93:28:8d:04:42:8c:67:47:7a:17:
                    81:14:31:c7:c6:5e:4b:53:f7:ee:ce:db:3d:0f:ab:
                    bd:88:88:36:bf:58:77:a6:5f:64:91:3f:cd:b4:b1:
                    3a:7a:e1:b0:d8:b1:dd:be:8e:41:c9:f8:26:56:da:
                    dd:a5:0a:4e:6e:46:70:29:89:0c:13:f5:2e:6e:3d:
                    90:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:22:AF:13:E3:D0:FB:BE:8F:A4:62:3C:D5:FC:AE:7C:9B:9D:14:87
            X509v3 Authority Key Identifier:
                keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:5a:1d:6f:c6:f6:06:9f:0e:61:85:72:2e:59:66:f4:83:a0:
         f2:75:a0:e5:04:1d:65:c4:af:1c:d5:da:d2:af:9f:60:68:bb:
         1f:0a:21:33:9e:17:be:80:0b:a3:24:2b:58:5d:2c:5e:61:8d:
         15:06:df:90:d3:aa:79:5e:fd:2c:8c:80:d3:12:09:da:00:8b:
         37:11:ef:69:3b:d4:4e:5f:03:9a:7b:57:d5:69:5c:68:43:34:
         dd:49:0d:af:7f:0a:a3:60:c4:3a:d6:3f:24:c9:53:c5:7a:01:
         71:69:bb:2a:dd:84:cd:74:3b:c3:92:d1:e5:d6:28:34:3e:59:
         b7:2e:3a:b7:b2:02:76:85:3d:62:03:58:40:87:5a:2f:a0:de:
         63:92:94:09:fd:dc:5c:1d:01:8d:96:7e:15:79:1f:94:f9:05:
         62:c1:7c:e0:08:be:0c:ac:86:e7:0c:d6:cd:d0:2d:d1:89:c9:
         ab:41:a9:47:f9:9f:ba:4f:5e:f5:0b:d4:66:9e:21:78:de:8f:
         b7:87:5b:8a:14:a5:34:42:48:b6:b1:c2:e7:e1:f5:03:91:4d:
         38:b2:09:54:66:f0:74:e2:20:6c:90:66:03:f4:8e:f6:fd:87:
         64:35:d7:20:33:d0:d2:d1:25:90:88:a8:05:e6:7b:47:e8:82:
         00:35:ff:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:41:54 2026 by rpki-client