Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
File:                     jYBF-d8IxTBX6d-ft7eldRA__0o.mft (raw, json)
Hash identifier:          8iTVqjGSURVzxTQ8x8HuAhZHiyjw2pUAuiO+PCnkmY8=
Subject key identifier:   D1:21:BB:55:20:62:D8:17:C2:FC:0B:50:9D:1A:A5:A8:24:6E:70:E6
Authority key identifier: 8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A
Certificate issuer:       /CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a
Certificate serial:       01A0908E37402DD065753F5B2FE7A29E5122
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
Manifest number:          0549
Signing time:             Fri 11 Sep 2026 13:00:34 +0000
Manifest this update:     Fri 11 Sep 2026 13:00:34 +0000
Manifest next update:     Sat 12 Sep 2026 13:00:34 +0000
Files and hashes:         1: 0wmiIEGgBNaM0SH3E3jDJzi9lvA.roa (hash: 5FuZkazkiJGDrvBOsL3FrqVNzaE9M0HyAMUTf9d4FZQ=)
                          2: jYBF-d8IxTBX6d-ft7eldRA__0o.crl (hash: WRGpQMN1Sd4n2TLybIXRt11CTSvE1VQfySuYnAgSDTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 13:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:90:8e:37:40:2d:d0:65:75:3f:5b:2f:e7:a2:9e:51:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a
        Validity
            Not Before: Sep 11 13:00:34 2026 GMT
            Not After : Sep 12 13:00:34 2026 GMT
        Subject: CN=d121bb552062d817c2fc0b509d1aa5a8246e70e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:55:e1:3e:fb:ab:e0:0c:ae:0b:a3:2d:62:9e:
                    bf:04:a4:7c:c0:8b:65:5f:5e:69:ae:24:cb:6f:9e:
                    30:84:6d:94:50:81:c1:ec:de:7c:a3:33:74:09:a1:
                    db:a4:16:ed:4f:a4:29:d3:94:f3:04:a5:d6:9f:dd:
                    46:db:8d:61:56:0b:f8:9c:26:40:e5:17:4e:78:ce:
                    e0:54:05:bd:64:97:40:77:b8:7d:ad:f2:23:ea:42:
                    7f:c4:29:d5:7f:41:35:ce:82:54:6d:db:c1:4e:6b:
                    58:70:07:00:0f:02:84:77:24:fc:ce:4f:c2:3f:95:
                    8d:93:3f:4b:78:ff:9f:4b:9d:f8:6a:3b:cb:53:d5:
                    fd:00:17:16:53:51:28:f6:08:76:72:7b:30:92:d6:
                    50:12:88:8b:9b:04:44:9c:77:0e:ce:8a:2e:be:70:
                    5a:e2:d9:9b:77:24:01:65:8f:f8:3e:3e:32:cc:36:
                    b2:08:02:82:47:ee:81:0c:f2:b2:db:7b:e9:36:25:
                    10:20:a5:0f:f1:c6:90:67:bd:9f:bd:09:e9:0c:d2:
                    52:0e:57:b9:5f:32:f8:ca:0a:43:29:a3:11:1e:56:
                    fc:d7:59:90:64:f6:fc:1d:f2:fc:a3:ac:ac:ba:81:
                    05:03:50:45:a9:a1:46:e5:80:65:3b:9d:a0:07:21:
                    74:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:21:BB:55:20:62:D8:17:C2:FC:0B:50:9D:1A:A5:A8:24:6E:70:E6
            X509v3 Authority Key Identifier:
                keyid:8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:7f:f9:40:90:37:60:83:44:75:19:1d:af:b8:b9:b0:b3:34:
         a2:75:8e:c6:10:aa:b4:8e:ca:e3:41:ae:7a:ec:55:ba:56:52:
         d9:44:0e:14:4b:3f:02:d5:7a:c8:9f:78:18:d3:56:30:d3:74:
         74:20:3f:86:e9:07:49:40:46:8d:aa:e9:70:5b:46:1d:3f:9e:
         7a:46:6b:f4:af:97:e9:2a:fb:c1:02:f4:1e:a1:00:bb:e0:26:
         3a:f2:fc:cc:87:c7:ab:94:df:ca:24:da:27:c1:a6:71:ef:e9:
         40:30:07:ed:53:eb:7f:c8:27:46:4c:d1:9c:d3:ee:89:ba:7c:
         96:01:af:5d:5d:4e:f1:1f:52:4f:3a:3d:c2:b5:fb:69:c8:26:
         89:f7:f3:05:4a:a5:5a:57:c8:0b:55:f9:c1:59:ea:b5:82:cd:
         ec:e4:d4:a2:34:5b:0f:0c:8b:66:e1:36:6d:b7:96:3c:85:87:
         5b:f9:d4:0c:72:15:26:78:a3:85:e7:2c:59:ee:c5:5b:21:23:
         bb:76:e1:22:07:25:ab:bb:b9:40:22:7f:74:01:75:8d:96:d5:
         2e:db:fb:58:a7:29:6a:01:a0:a6:07:fb:7d:c6:fd:40:b7:b8:
         31:d0:3e:15:60:6d:b6:31:9f:ff:0f:b5:a8:f9:92:1a:23:21:
         86:3b:74:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 20:40:13 2026 by rpki-client