Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
File:                     yUcK5Bju3dazna6eehd6Gcd5nEE.mft (raw, json)
Hash identifier:          1pe2+jYC8KP2nho5oNPWcUDDq2/oQ8idCZfx5GN1dJE=
Subject key identifier:   27:CA:57:DF:03:A5:7F:5D:D7:F0:95:7D:10:33:35:19:43:C6:06:EC
Authority key identifier: C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
Certificate issuer:       /CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Certificate serial:       01A01FE75AE14465C57F83770AB5CB0F2F9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
Manifest number:          1A11
Signing time:             Thu 20 Aug 2026 16:00:50 +0000
Manifest this update:     Thu 20 Aug 2026 16:00:50 +0000
Manifest next update:     Fri 21 Aug 2026 16:00:50 +0000
Files and hashes:         1: CSaWGPAuSxGyvK0vYNlwHF6hyLk.roa (hash: /XZl1WB2nbiNcL9b2RlvpS4iBe26ZsfShmWMbksslmc=)
                          2: R7rOqqQV9FpDCZLBm9QH6KbRejI.roa (hash: mcqImNWLjpTecGkgufT+Ix02VEv/VipznJBswQOZYeo=)
                          3: S3ly6OpAOrIt_7luoCILOFS7SJ0.roa (hash: MI6S4+JLe7VwJwm81yAr9HyDfPieJGPwWA3IVqKAm4s=)
                          4: yUcK5Bju3dazna6eehd6Gcd5nEE.crl (hash: ThqawFIjOFKd2lrAFKwijiD53wySOccL6u27nukkmAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 16:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:1f:e7:5a:e1:44:65:c5:7f:83:77:0a:b5:cb:0f:2f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
        Validity
            Not Before: Aug 20 16:00:50 2026 GMT
            Not After : Aug 21 16:00:50 2026 GMT
        Subject: CN=27ca57df03a57f5dd7f0957d1033351943c606ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:2f:57:d7:67:d8:ea:7d:91:df:42:4b:6f:
                    38:f9:67:a1:84:79:f3:73:d5:bf:d9:a3:47:35:43:
                    e1:8f:ff:14:c0:13:d2:dc:37:07:7a:28:9d:ee:92:
                    ff:6d:23:4d:90:7e:fa:e5:ec:2b:a1:fb:47:89:35:
                    c5:e0:fa:e9:b6:19:c9:9b:d5:b5:37:c4:91:dd:9e:
                    88:36:f0:50:7b:3c:19:b4:fb:4d:d9:78:0d:c9:b1:
                    79:ee:af:24:b1:6a:4f:cb:54:c4:e9:09:2c:00:92:
                    15:1c:36:b3:99:0e:94:50:7d:87:76:bd:2e:11:5a:
                    1b:df:95:ea:08:8e:13:76:7c:59:48:cb:4b:62:62:
                    21:e1:60:87:e8:a9:9c:27:ce:77:69:55:1e:1e:63:
                    9c:ab:55:2e:cb:a4:6e:e8:f8:63:86:15:cf:d7:f7:
                    9e:ed:b6:87:40:57:59:fc:a0:b1:69:f0:f6:da:2b:
                    4d:60:c1:fb:8b:3a:22:0d:68:83:4d:33:a5:74:b1:
                    cf:03:59:dc:aa:0f:c0:6d:12:aa:6b:f8:34:14:b2:
                    d3:22:d6:56:82:5d:44:a7:94:f5:c6:c7:96:9e:67:
                    80:e6:5b:64:26:05:b3:99:f6:f7:19:fb:f0:fb:cf:
                    93:f7:11:f7:c2:dc:4d:a9:82:78:4c:81:5a:9c:a6:
                    3f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CA:57:DF:03:A5:7F:5D:D7:F0:95:7D:10:33:35:19:43:C6:06:EC
            X509v3 Authority Key Identifier:
                keyid:C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:dd:a3:4b:02:c1:c2:a8:58:dd:bf:c6:44:a7:de:fa:18:d4:
         e6:89:aa:cc:19:52:36:e1:41:48:06:fa:dc:9e:70:7a:6a:e7:
         1e:9f:88:6b:a0:8f:16:20:ef:c2:8e:29:cb:04:34:5b:8e:ad:
         d8:61:85:5e:16:21:f4:2b:de:85:86:49:da:f3:64:be:18:93:
         e8:7c:6b:11:ef:46:8f:e5:ad:2d:cb:13:ae:4e:85:e9:33:81:
         dd:1f:fd:c0:69:24:d2:9c:1f:fc:52:ac:5d:a9:57:b7:5b:4d:
         f4:93:0b:51:88:30:cb:f6:5d:9b:98:5d:2c:fe:9e:80:c0:ca:
         fd:8a:ed:d9:32:c4:1f:58:0a:73:5c:70:f6:01:ae:e4:60:9c:
         51:cb:aa:f2:00:7d:ec:a8:31:86:c4:f5:59:00:ac:7a:cd:c0:
         37:3a:65:f3:20:e9:53:eb:64:d8:f8:b3:54:53:dd:f7:14:58:
         ca:49:2c:2b:9a:41:84:18:22:70:5c:1c:3c:80:54:61:80:74:
         6c:ac:b3:70:b2:f8:1d:8d:db:dd:76:9a:0f:6e:79:9b:a7:28:
         07:82:f2:ac:29:31:14:8a:09:c4:b6:80:d9:7e:e5:b8:96:8a:
         fd:ca:93:05:d0:ef:e4:db:44:c2:8c:2a:fd:6d:4a:bf:23:d5:
         f7:11:2f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:09:16 2026 by rpki-client