Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
File:                     y2qe-BDtqvUkU9KDc-8PebCb1j0.mft (raw, json)
Hash identifier:          51au9HaVVNR2Bk0u80iV2rd4/5h0uN5Gec4uKXooYzY=
Subject key identifier:   6E:B2:2D:1B:61:D6:D7:DD:66:36:9D:B1:3E:E3:A3:17:9E:D7:9F:E4
Authority key identifier: CB:6A:9E:F8:10:ED:AA:F5:24:53:D2:83:73:EF:0F:79:B0:9B:D6:3D
Certificate issuer:       /CN=cb6a9ef810edaaf52453d28373ef0f79b09bd63d
Certificate serial:       01A16AFF6698DE46847F9AFD35C38520DD94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
Manifest number:          0112
Signing time:             Fri 23 Oct 2026 23:01:25 +0000
Manifest this update:     Fri 23 Oct 2026 23:01:25 +0000
Manifest next update:     Sat 24 Oct 2026 23:01:25 +0000
Files and hashes:         1: 7sRoOWKbSUAYn6fc2kMDiGOFSzI.asa (hash: bVK40h1po743oXeQksBOOUrJaKABeP31ahdGkgnYLa4=)
                          2: y2qe-BDtqvUkU9KDc-8PebCb1j0.crl (hash: KsKfsbKxJJ7esQhyZ1der7RVsLWvfFn669A4MQzyRiI=)
                          3: yGP7KHN5i6r4CM3VtuiDVwZbygU.roa (hash: nCK2wB6Dr/unpkoAYydpAEc9XrgdXrIMJdbTLv5g6hA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6a:ff:66:98:de:46:84:7f:9a:fd:35:c3:85:20:dd:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb6a9ef810edaaf52453d28373ef0f79b09bd63d
        Validity
            Not Before: Oct 23 23:01:25 2026 GMT
            Not After : Oct 24 23:01:25 2026 GMT
        Subject: CN=6eb22d1b61d6d7dd66369db13ee3a3179ed79fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:35:21:36:07:b3:61:cd:00:31:d6:13:2e:1f:
                    07:66:42:85:62:23:5f:bf:0d:16:eb:4f:a0:5a:01:
                    72:6f:ec:75:6b:99:43:07:6b:c3:e9:79:47:92:f2:
                    d7:58:38:c8:2a:7a:2e:3b:1e:a9:fa:f5:a6:ec:a0:
                    74:73:42:65:36:9c:90:ae:eb:cd:88:fb:70:87:c8:
                    39:98:e6:35:76:35:b4:73:b4:6f:b3:42:6b:fb:58:
                    67:07:81:0d:76:73:65:2e:8a:a3:14:6a:8d:9f:95:
                    ee:9f:c4:fc:c8:67:a1:a6:aa:36:c0:b7:b1:99:87:
                    4a:d7:80:f7:e5:07:d6:e9:9d:86:6e:a9:29:0f:5e:
                    ac:83:58:b7:3e:49:78:82:40:73:a6:1e:77:c7:19:
                    c1:ab:bf:44:f8:a5:5a:30:13:c4:35:ed:1b:4c:50:
                    0a:1e:7d:c8:85:7e:34:95:c1:7f:7b:8e:2b:35:b2:
                    ba:06:0c:c3:76:bf:4f:97:a3:e0:3b:de:e8:18:69:
                    42:d8:1f:90:34:8a:1a:9f:2e:78:e4:31:6d:ae:f6:
                    f1:41:c8:46:08:6b:b5:c7:10:b2:5a:99:e0:10:90:
                    58:30:b4:76:07:3f:5a:e5:18:8f:93:84:0b:5e:cf:
                    50:4c:48:00:50:1e:8b:92:78:a5:05:91:90:c8:12:
                    fc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B2:2D:1B:61:D6:D7:DD:66:36:9D:B1:3E:E3:A3:17:9E:D7:9F:E4
            X509v3 Authority Key Identifier:
                keyid:CB:6A:9E:F8:10:ED:AA:F5:24:53:D2:83:73:EF:0F:79:B0:9B:D6:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:5e:05:ec:7e:eb:19:59:0c:87:d6:07:a5:17:ae:83:c9:d9:
         af:4f:91:ad:94:2b:37:15:f1:5e:1d:1c:86:5f:af:ca:0b:f6:
         46:21:16:dc:5d:3b:04:8a:40:cd:f0:cf:03:3f:84:8a:3c:55:
         2e:57:38:8e:69:db:a5:a3:34:47:d2:d0:c3:1e:1e:53:30:d4:
         7e:bd:c9:cd:95:33:4e:5a:b1:f5:2b:d7:95:50:fd:44:25:fd:
         23:83:49:7a:f5:a6:fb:3b:7f:fd:1a:dc:95:12:b5:86:64:93:
         ba:6c:0f:32:75:e4:39:54:d6:06:c3:6a:16:64:c2:b2:9d:9c:
         fa:ca:f3:0d:38:12:8d:17:27:bd:93:08:bf:67:a1:8d:54:97:
         c5:9f:71:9b:a4:d1:d0:ff:8f:27:70:37:81:83:ad:dd:8e:40:
         93:20:4f:e9:9c:dc:60:59:5b:89:21:4b:c3:dd:7c:d5:09:93:
         41:0f:71:97:39:3e:c2:da:f3:36:34:19:9d:67:ef:fe:7a:3a:
         81:cb:ce:27:b0:e9:bb:1e:b8:e7:9e:3d:e7:e3:45:90:1e:2a:
         20:9b:05:a2:a8:65:9d:72:f4:17:15:ac:f2:42:12:5d:b9:58:
         52:f3:91:8c:c7:5f:5d:2b:24:d3:21:f3:c2:a0:e1:a8:27:fa:
         d3:d7:15:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:47:45 2026 by rpki-client