Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
File:                     yYuCXzbpzDMDFclA3oAMurzjOXs.mft (raw, json)
Hash identifier:          T/Nv2fRhNo0to7iPXBn98ayTcr4BSkT1pENfV1VG8SQ=
Subject key identifier:   66:96:C2:A1:7E:EE:99:0B:BC:61:45:E7:3E:B4:58:84:ED:94:4A:E4
Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Certificate issuer:       /CN=c98b825f36e9cc330315c940de800cbabce3397b
Certificate serial:       01A15F9FCA2DE60F7C7B5DA539218B6F4A3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
Manifest number:          16C8
Signing time:             Wed 21 Oct 2026 18:01:09 +0000
Manifest this update:     Wed 21 Oct 2026 18:01:09 +0000
Manifest next update:     Thu 22 Oct 2026 18:01:09 +0000
Files and hashes:         1: BIg9g8urjWzblnNO_lVEgCU_0L4.roa (hash: Zkf0cuxdTPBJNDfyoYR/TqE/qjZVNjVMgcTyzgopEr0=)
                          2: Iphm7z7updBWRc2PNItoZmhVxuU.roa (hash: ld3zzmRGDXodfmUypvYiol82dEtF61c0SzZg6YzCfrA=)
                          3: T0TpEfENHz0bxlptxB0nFINW90A.roa (hash: TVxTNouu1BfDbucKooEPdLrXN8aLRFVGM4/IuDaxZE0=)
                          4: fpWqB6GHlXOWcBg30kWtguLx_NY.roa (hash: fXvgv1LhXoBErsUNrvQ4zZ5bYi/IxJJ6Qaj/JGmSwZU=)
                          5: hRup2JJMWBOF-WiIMoiCnCzzApo.roa (hash: /227YrF7k3BWfB+D58mu+onRUSZxRqZuv9vNnJFuS4M=)
                          6: yYuCXzbpzDMDFclA3oAMurzjOXs.crl (hash: suhWGy8pp2znpTyQ5F1gYtLnHWQK5jkKVUhmgVEzZJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 18:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5f:9f:ca:2d:e6:0f:7c:7b:5d:a5:39:21:8b:6f:4a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b
        Validity
            Not Before: Oct 21 18:01:09 2026 GMT
            Not After : Oct 22 18:01:09 2026 GMT
        Subject: CN=6696c2a17eee990bbc6145e73eb45884ed944ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3e:6e:5a:c3:c7:33:8d:f1:40:19:0b:bf:10:
                    47:d0:9f:f5:3d:47:47:71:d2:ce:ed:9e:c7:0d:09:
                    fa:c0:54:52:12:3d:b8:e5:6c:bd:2a:22:4e:9d:c1:
                    39:81:a3:43:af:bf:5c:50:41:b4:57:7b:78:b0:46:
                    cc:0f:cc:ef:7d:c6:e6:12:30:cb:32:5b:1b:80:45:
                    bc:23:27:6d:08:e5:4a:5e:2b:16:dc:11:ee:db:57:
                    34:a1:3b:95:62:61:ae:fc:46:70:2a:29:de:fd:0e:
                    69:59:f5:61:30:c6:aa:ad:a8:9f:18:d3:2f:81:64:
                    36:3f:94:ee:ff:30:13:bc:0d:79:e9:9a:13:e9:9d:
                    e9:52:b9:e3:ba:5c:ab:a8:14:be:f4:06:0c:3c:a5:
                    c2:ff:43:63:9e:c5:9d:67:44:0a:c7:2a:80:a0:20:
                    88:82:5e:25:03:a7:4f:04:14:30:74:d0:a8:5e:44:
                    90:85:64:92:9a:cc:7e:e7:8c:4a:ad:9f:cb:fd:22:
                    b0:4e:81:45:6c:97:9b:b1:6d:5f:ec:b3:af:51:26:
                    30:74:89:03:92:95:59:f8:8d:cb:53:d2:a9:cb:0a:
                    83:84:f7:21:85:ad:0e:d3:ab:8d:29:63:78:35:d2:
                    dc:a5:f3:f0:16:ce:84:cc:28:df:6a:96:7f:3d:f6:
                    fe:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:96:C2:A1:7E:EE:99:0B:BC:61:45:E7:3E:B4:58:84:ED:94:4A:E4
            X509v3 Authority Key Identifier:
                keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b6:44:65:b0:63:6f:fa:09:5e:c3:9a:39:2f:54:93:76:36:
         46:5e:69:13:64:60:40:58:f5:cb:0f:84:1b:6c:36:63:7e:5f:
         5d:5b:34:b8:18:0c:83:6a:07:d9:f3:95:4d:e9:fa:41:b4:ef:
         82:a9:8a:35:d9:47:92:24:1c:dd:37:18:82:c4:ab:0c:03:05:
         e7:e2:83:b5:fa:3b:62:9d:76:b5:88:9b:cd:45:ec:2c:52:76:
         9b:ac:51:e5:0d:27:38:d8:c0:89:24:24:92:a3:14:9c:1e:23:
         f1:c7:da:00:3b:42:b3:9f:06:25:f5:77:09:76:38:59:8f:4d:
         1b:a1:24:02:f9:29:dc:80:11:e7:34:dc:02:92:c6:49:1b:8f:
         62:d6:e5:0b:e1:49:07:15:a0:d2:ce:bd:69:13:be:c0:bb:49:
         05:79:eb:81:ae:e2:ea:c8:0e:65:4c:77:97:75:0d:a0:ed:20:
         74:91:a8:d9:71:4c:5b:d4:ae:4e:da:c1:96:04:f9:5d:49:45:
         81:2c:96:27:9f:b2:a4:34:bc:6a:d9:34:fc:15:7f:65:c6:20:
         c2:e5:52:cf:9d:5b:75:6f:b1:4d:e3:49:f4:75:59:fc:9c:b4:
         93:50:61:36:83:31:d0:36:bb:73:31:77:70:ab:e6:e4:b2:ed:
         19:99:06:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:15:09 2026 by rpki-client