Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/yRi-Y90mFBusC0klaPaK8K3-8-E.mft
File:                     yRi-Y90mFBusC0klaPaK8K3-8-E.mft (raw, json)
Hash identifier:          RrSL1+sc+d8xtfTpJU3E2hhmFIDK4FIgfyZV0CvPpDk=
Subject key identifier:   66:BF:0C:40:A2:87:A6:AE:DC:CA:73:E6:59:C9:8F:D5:C6:5E:7B:3A
Authority key identifier: C9:18:BE:63:DD:26:14:1B:AC:0B:49:25:68:F6:8A:F0:AD:FE:F3:E1
Certificate issuer:       /CN=c918be63dd26141bac0b492568f68af0adfef3e1
Certificate serial:       01A17B4D7E0CEA5E846DD1388340D1B9C936
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yRi-Y90mFBusC0klaPaK8K3-8-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/yRi-Y90mFBusC0klaPaK8K3-8-E.mft
Manifest number:          0167
Signing time:             Tue 27 Oct 2026 03:00:38 +0000
Manifest this update:     Tue 27 Oct 2026 03:00:38 +0000
Manifest next update:     Wed 28 Oct 2026 03:00:38 +0000
Files and hashes:         1: RW46yCzz9kz8SaKt5qRXLyMsiPQ.asa (hash: 6I1eQT1/PQ1Uug5H2qf66RDnAub6m8ZTPHVagky/c3E=)
                          2: yRi-Y90mFBusC0klaPaK8K3-8-E.crl (hash: LAdlQyIUSbB0uVP7ypdsiSQwVCHZAdn5HPU16hZfjKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/yRi-Y90mFBusC0klaPaK8K3-8-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/yRi-Y90mFBusC0klaPaK8K3-8-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yRi-Y90mFBusC0klaPaK8K3-8-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:4d:7e:0c:ea:5e:84:6d:d1:38:83:40:d1:b9:c9:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c918be63dd26141bac0b492568f68af0adfef3e1
        Validity
            Not Before: Oct 27 03:00:38 2026 GMT
            Not After : Oct 28 03:00:38 2026 GMT
        Subject: CN=66bf0c40a287a6aedcca73e659c98fd5c65e7b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:00:2c:4a:fd:4c:ad:dc:fa:cb:51:dd:e4:43:
                    49:78:7c:80:aa:dd:66:d0:d4:6d:3a:29:68:2c:8b:
                    15:7e:30:34:a0:a1:e2:bc:c7:ee:8e:9f:2c:d3:95:
                    1f:f7:7d:b3:bb:89:10:02:b2:95:6e:69:c1:87:b0:
                    88:05:95:5d:b0:97:02:21:5c:a4:e5:11:a8:84:85:
                    79:d1:56:b0:89:b6:f4:df:6e:fa:31:26:d4:ce:a2:
                    f0:4c:9b:8a:81:0b:8e:53:e4:50:b5:04:02:a3:bc:
                    f2:94:11:7c:43:81:40:07:a6:b0:71:84:00:37:3c:
                    8b:48:da:9a:b5:95:4a:85:92:1d:36:54:7f:4a:eb:
                    19:81:7b:00:ff:ab:00:2c:37:1c:38:47:d7:fd:80:
                    a1:37:e5:9c:32:32:95:7c:83:d6:cc:48:ae:bd:d7:
                    7d:dc:0d:dc:9a:75:4d:f0:c7:11:4f:fc:e3:4e:6f:
                    ce:15:9f:25:0c:e1:35:94:04:f5:79:21:c4:c8:ff:
                    2c:c2:7a:f8:7e:e4:8b:94:48:79:a4:b9:bf:ce:7d:
                    e4:2d:0c:15:c1:8c:bb:7f:44:f8:49:4e:f2:25:6b:
                    f4:e6:e8:2b:f3:62:6e:91:30:7d:74:3c:3d:9b:4b:
                    1f:f8:b5:26:d8:c3:3c:16:f8:08:fc:2b:a8:ff:b6:
                    9c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BF:0C:40:A2:87:A6:AE:DC:CA:73:E6:59:C9:8F:D5:C6:5E:7B:3A
            X509v3 Authority Key Identifier:
                keyid:C9:18:BE:63:DD:26:14:1B:AC:0B:49:25:68:F6:8A:F0:AD:FE:F3:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRi-Y90mFBusC0klaPaK8K3-8-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/yRi-Y90mFBusC0klaPaK8K3-8-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/yRi-Y90mFBusC0klaPaK8K3-8-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:f1:d1:5b:1b:79:63:1e:c0:c9:7e:a4:2d:34:cc:b0:ef:f1:
         76:5b:8d:75:73:d4:b4:f6:4d:20:74:b9:c0:b8:36:2b:ba:e9:
         4b:12:30:58:ac:70:5a:82:e8:8b:34:e2:23:b5:61:be:a2:6d:
         31:41:e9:57:6c:66:8e:db:f2:ea:1e:01:c9:d1:7e:4f:8b:3a:
         5c:2f:1c:78:41:2f:ad:75:34:70:61:1b:47:43:08:db:fc:4f:
         6b:fa:40:aa:4d:0e:86:ca:6b:43:36:4a:1b:12:e0:f3:d0:1a:
         37:bc:f8:f3:0f:08:40:77:4e:1d:6b:19:4b:64:40:c5:e0:1c:
         3e:f2:00:32:e3:c0:68:e4:42:7b:f3:7f:63:f1:6c:c1:62:d5:
         2f:5a:6f:93:d8:ab:12:56:6f:0e:66:2b:eb:50:e2:26:32:2e:
         a2:37:ac:19:01:68:e2:58:bf:f9:2d:c6:35:d8:43:60:4f:13:
         cf:b5:11:ab:d8:56:1a:10:9c:92:01:11:15:d4:d9:8b:6e:28:
         f8:0b:4b:46:ca:5a:ff:cd:23:47:30:b4:9a:3d:9e:6d:f8:48:
         2d:11:cc:97:7c:35:cd:c4:02:89:de:be:13:55:60:3e:db:95:
         38:e7:0b:49:53:ba:37:3f:82:86:d2:50:6e:8b:b3:44:12:c5:
         8b:5d:42:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:56:50 2026 by rpki-client