Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft
File:                     Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft (raw, json)
Hash identifier:          dD5NJMt6lYypBLdh1jejKQXjL8iOrGWNaYkF/KjvBFk=
Subject key identifier:   52:A8:AB:87:C3:6E:DF:16:A5:B1:CB:5A:54:A0:7F:4C:E7:3C:BB:9D
Authority key identifier: 63:C1:B9:FF:E9:86:72:BF:62:F4:87:F4:7D:AF:EA:30:F5:BE:F0:9C
Certificate issuer:       /CN=63c1b9ffe98672bf62f487f47dafea30f5bef09c
Certificate serial:       01A16E002450409830FBF9D8997FF3742766
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft
Manifest number:          1A4F
Signing time:             Sat 24 Oct 2026 13:01:05 +0000
Manifest this update:     Sat 24 Oct 2026 13:01:05 +0000
Manifest next update:     Sun 25 Oct 2026 13:01:05 +0000
Files and hashes:         1: Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl (hash: ZwMYX8cHZdlaaro76cm/uQuI7Ku8Nuzr+izO666Ppqs=)
                          2: uUWVa1294AWFSpDUYVKBN-fvYMc.roa (hash: axEGfOzW4g5Z2ybzJ+kEQtiDgU2ikyT0bamMhlhBt2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 13:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6e:00:24:50:40:98:30:fb:f9:d8:99:7f:f3:74:27:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63c1b9ffe98672bf62f487f47dafea30f5bef09c
        Validity
            Not Before: Oct 24 13:01:05 2026 GMT
            Not After : Oct 25 13:01:05 2026 GMT
        Subject: CN=52a8ab87c36edf16a5b1cb5a54a07f4ce73cbb9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3e:1f:a3:5c:43:85:e9:04:6f:cc:56:48:2a:
                    a1:cd:75:63:3f:88:b8:b3:41:fb:15:ce:7c:e3:d6:
                    f2:eb:81:d6:99:20:67:eb:46:56:8c:bc:a0:18:65:
                    44:64:37:1e:56:58:df:a9:08:47:ea:7a:06:15:ed:
                    e4:53:e3:10:20:52:c6:20:36:54:63:0e:80:87:02:
                    86:5c:8c:88:f9:df:73:40:e3:4c:40:5e:37:27:69:
                    ef:5f:df:28:cc:7e:50:d6:73:2f:ed:b4:2d:59:16:
                    fe:77:88:83:d6:b9:94:94:df:07:d5:01:a5:00:f4:
                    4a:b7:c1:c2:e5:d4:e1:f0:28:ba:30:aa:1f:19:63:
                    f5:ab:3a:c6:b6:9d:ad:18:19:49:5a:4c:d1:fe:ca:
                    c4:dd:70:f4:35:3e:99:c7:c1:e8:66:58:2c:d8:f3:
                    c0:04:eb:0b:07:2b:df:9b:d8:f9:b9:38:b6:e2:91:
                    fc:94:01:3b:05:41:44:79:07:cb:28:c1:82:48:25:
                    c3:32:05:a1:d6:76:d4:ad:4f:00:aa:3d:dd:11:d2:
                    70:8d:ca:da:ce:1f:37:22:80:17:4a:92:d8:86:0d:
                    c8:75:8c:51:50:55:43:93:ba:fc:d7:8c:86:44:89:
                    a5:64:12:bb:85:72:7f:52:c6:39:f4:fc:08:95:61:
                    14:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A8:AB:87:C3:6E:DF:16:A5:B1:CB:5A:54:A0:7F:4C:E7:3C:BB:9D
            X509v3 Authority Key Identifier:
                keyid:63:C1:B9:FF:E9:86:72:BF:62:F4:87:F4:7D:AF:EA:30:F5:BE:F0:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:38:91:5f:db:dc:70:23:5a:7b:c2:10:4b:e3:fd:c0:b1:f9:
         e1:b2:bb:55:94:89:02:48:8f:af:10:7c:25:f3:88:ae:84:b8:
         49:02:f7:48:ac:4e:08:a8:a4:c5:2d:c5:5d:33:2e:1d:84:c8:
         cc:df:17:42:3b:06:6b:66:05:19:5b:37:cc:b0:c2:9c:d0:68:
         4f:74:c6:1c:45:80:33:e6:18:a7:9f:b4:a6:b6:4a:61:44:19:
         b5:df:c0:92:bf:c6:f8:93:c3:cf:37:bb:fa:c6:45:59:04:fd:
         e8:1d:39:f1:38:61:37:0b:69:8d:37:c1:82:54:49:82:7d:c8:
         d9:12:ea:78:0b:45:34:1d:17:7d:69:b7:6b:2f:1f:ff:e0:9f:
         73:e5:76:7a:6e:50:30:e8:90:9d:ae:3e:d3:e6:87:38:20:22:
         d9:1a:d4:f7:d9:2a:31:b8:fb:df:ea:c9:6c:71:66:b2:ec:6c:
         90:14:f7:a4:40:66:53:83:aa:cf:81:78:68:db:06:3d:d8:ff:
         c8:12:58:bc:e9:4d:e5:81:e5:e9:67:b0:36:8f:c6:12:78:c1:
         9f:9f:cc:47:71:ed:4b:4c:e6:44:9f:dd:25:b6:b8:a6:2a:b6:
         5a:ab:8a:cc:e9:b4:e2:2f:67:36:4c:65:cc:d3:f2:84:4f:ab:
         a0:da:7f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:46:12 2026 by rpki-client