Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
File:                     YKVAzkUEVjReyOCY709TY010vx8.mft (raw, json)
Hash identifier:          S/urZXKwOaAbYweqcOAO1BQKy0bNJboluj5bIiX371c=
Subject key identifier:   3F:E0:8E:2D:97:77:61:21:40:FB:D2:D7:21:0F:E0:90:F9:69:C7:56
Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
Certificate issuer:       /CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Certificate serial:       01A06CB8E5D5A8A0D85EAAB275FBEBCA5E8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
Manifest number:          08A4
Signing time:             Fri 04 Sep 2026 14:00:51 +0000
Manifest this update:     Fri 04 Sep 2026 14:00:51 +0000
Manifest next update:     Sat 05 Sep 2026 14:00:51 +0000
Files and hashes:         1: 6Mkl-omsDLx9m0bO1mz3oa6tBSo.roa (hash: Zk0U1/P1vQOMHHn2ahaAoT0XpDq9M1hljHTDc0qZE1E=)
                          2: AD3dL38ItgcaG-oFKVYv8zmfTus.roa (hash: DqDKMAFToDn+3i7WatsmOeHGyqsNBV2w2kEv4qRPVMY=)
                          3: JfzkG74hCuXipueYiQnJYRqjhXc.roa (hash: /UjZLGM2bizX+MblKNId48l/mey7CKbKk+KDmswLAkY=)
                          4: YKVAzkUEVjReyOCY709TY010vx8.crl (hash: xWzKUzBzSCdNlf1oO8A57/wii9pnq2t0X2FZ8Zuix/A=)
                          5: jjAcTZsE6SWG5o6mtHHOl3_x8mc.roa (hash: nUynGoee1lekBHyQycCWjTotr3IB8hCilEBQKb53ky0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6c:b8:e5:d5:a8:a0:d8:5e:aa:b2:75:fb:eb:ca:5e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f
        Validity
            Not Before: Sep  4 14:00:51 2026 GMT
            Not After : Sep  5 14:00:51 2026 GMT
        Subject: CN=3fe08e2d9777612140fbd2d7210fe090f969c756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:95:d6:bc:1e:ee:f6:5d:17:88:e7:44:7e:a9:
                    7f:a0:b8:ea:0f:5f:0b:9b:6b:63:aa:f4:8d:63:a5:
                    a1:e7:1e:3c:47:10:41:5d:63:31:ad:e9:ea:57:7f:
                    45:39:f2:7b:32:d2:3f:2f:78:8a:4b:a1:34:b9:4e:
                    be:5b:f0:3f:ff:f7:84:3d:2e:2e:7f:19:f3:97:4a:
                    e8:8b:06:72:36:00:c7:52:82:5b:18:7e:90:da:2c:
                    7b:40:ff:51:cf:f6:a5:d1:a6:bf:5d:82:62:28:15:
                    84:c5:81:1f:55:ab:aa:f7:18:aa:39:ab:ac:3d:dd:
                    30:d9:f7:a4:39:12:ae:e8:82:86:6c:6b:64:a0:f5:
                    1c:13:e3:ce:cd:0a:69:88:06:e3:f2:c8:73:df:22:
                    bf:6f:50:2a:e2:9f:a2:1f:e4:fa:3e:32:93:93:fe:
                    dd:ab:e4:b1:3e:98:3a:64:2b:51:c7:ca:ac:b7:e8:
                    bc:da:6f:25:d7:2e:14:30:10:af:e5:73:72:ae:78:
                    23:b8:27:bc:b2:70:44:88:67:ab:8e:60:e8:bd:39:
                    cb:33:9d:39:7a:86:3b:5e:a1:71:63:3f:8d:9d:4f:
                    ba:d4:4d:67:2d:bd:22:00:f7:80:1d:e8:fe:16:da:
                    49:92:4c:1f:5a:b4:f4:a9:83:68:e9:1a:08:53:09:
                    51:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E0:8E:2D:97:77:61:21:40:FB:D2:D7:21:0F:E0:90:F9:69:C7:56
            X509v3 Authority Key Identifier:
                keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ed:48:e8:81:12:fd:62:68:1b:f5:69:0e:04:93:10:63:86:
         75:e5:48:79:aa:db:27:12:03:c6:33:66:a3:b7:81:37:3d:66:
         9c:5e:75:cc:f4:77:ed:3e:61:4c:24:aa:ce:62:26:16:6d:b9:
         67:47:86:7c:c1:a1:ad:47:37:e3:ab:e1:60:37:c3:c3:df:d6:
         22:f9:3c:ed:4f:78:de:75:3b:93:cf:c0:7f:89:bc:c9:73:f4:
         a0:70:99:74:4b:6e:c4:38:9e:a0:22:94:9f:96:df:2f:20:0f:
         9b:ae:23:4e:53:86:95:07:a6:db:94:c6:8b:14:b3:b1:81:46:
         bd:64:25:4e:f5:0c:f6:d7:62:e7:e5:97:fe:a8:32:7b:23:67:
         c9:82:a9:15:15:b9:2d:04:6a:a8:51:68:7c:2d:67:dd:57:83:
         ae:e7:64:cb:e4:ae:e9:72:b0:5c:3b:63:ea:b0:ea:f0:1f:88:
         cb:14:c6:41:dd:e1:3b:8f:2e:bc:dd:b7:52:6e:dc:90:3d:64:
         1a:4e:77:b1:af:44:c8:fb:56:07:1c:5c:f7:2a:3c:d6:1f:89:
         2f:c1:0f:33:1b:f9:b8:b6:2c:5b:bd:f5:9d:e1:39:9f:a0:a3:
         f5:73:89:6c:db:4e:78:68:c4:08:ba:e3:db:3b:e4:da:97:29:
         5b:4d:b1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:13:06 2026 by rpki-client