Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/yUq4SzgPMuOxVvyjcKKE_LB2Grc.mft
File:                     yUq4SzgPMuOxVvyjcKKE_LB2Grc.mft (raw, json)
Hash identifier:          ie8KaGCOne3JnJOYqJB1zBvakb2FQHK+P2ShF/Y0g/8=
Subject key identifier:   97:AE:E5:99:A1:78:95:29:B1:25:07:20:74:C2:BC:90:28:F1:3D:B6
Authority key identifier: C9:4A:B8:4B:38:0F:32:E3:B1:56:FC:A3:70:A2:84:FC:B0:76:1A:B7
Certificate issuer:       /CN=c94ab84b380f32e3b156fca370a284fcb0761ab7
Certificate serial:       01A120F74A99B30F6F66BFFE5AF06540EBD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yUq4SzgPMuOxVvyjcKKE_LB2Grc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/yUq4SzgPMuOxVvyjcKKE_LB2Grc.mft
Manifest number:          01D9
Signing time:             Fri 09 Oct 2026 14:00:39 +0000
Manifest this update:     Fri 09 Oct 2026 14:00:39 +0000
Manifest next update:     Sat 10 Oct 2026 14:00:39 +0000
Files and hashes:         1: 9vZ-bh78nQSisMvdujS-2j3jEKQ.roa (hash: 9I7QrI133VXhhj9mm/9D7pspc5I/xtLd60jZL9gznBc=)
                          2: yUq4SzgPMuOxVvyjcKKE_LB2Grc.crl (hash: JxEkjNN2PASZ5aqVvu7h1YVAu2b8+E7uPyg11/qUVU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/yUq4SzgPMuOxVvyjcKKE_LB2Grc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/yUq4SzgPMuOxVvyjcKKE_LB2Grc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yUq4SzgPMuOxVvyjcKKE_LB2Grc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:20:f7:4a:99:b3:0f:6f:66:bf:fe:5a:f0:65:40:eb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c94ab84b380f32e3b156fca370a284fcb0761ab7
        Validity
            Not Before: Oct  9 14:00:39 2026 GMT
            Not After : Oct 10 14:00:39 2026 GMT
        Subject: CN=97aee599a1789529b125072074c2bc9028f13db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:54:24:02:b5:90:18:86:d7:26:80:b3:ab:c1:
                    49:69:70:6a:5d:6e:b2:cc:b7:4c:11:bc:14:4e:57:
                    11:b3:d0:1d:b2:03:d2:49:31:13:66:41:ea:20:99:
                    7f:3c:1d:90:55:59:b3:e7:ad:75:3b:3f:88:00:b0:
                    3e:a8:96:d8:25:3c:d9:6c:d9:0a:95:fb:cc:60:c6:
                    65:84:75:b7:18:7b:4c:63:8f:d9:5d:58:c6:cf:79:
                    5d:15:8b:06:84:48:4a:2b:ac:53:70:fb:92:7b:64:
                    c4:e4:96:c6:83:38:7c:a3:d7:32:eb:e2:87:0e:23:
                    d8:2a:f8:71:93:e9:65:4a:9d:55:9e:d4:fc:3e:93:
                    54:03:40:6a:33:47:c4:4d:8b:42:4a:6f:58:00:4f:
                    81:c4:13:75:c6:3a:42:da:8d:fa:85:07:81:15:43:
                    51:8b:a8:a5:ae:b5:16:89:99:e8:0f:02:47:30:f6:
                    5b:c1:a8:96:ee:b5:fe:7c:67:df:c2:61:ef:8c:63:
                    2d:e2:16:51:35:2c:3c:47:33:d0:7e:77:b7:df:b2:
                    ba:88:6d:4f:d9:89:ed:3f:f8:d5:00:b0:12:ca:81:
                    8e:34:f5:2b:af:17:ac:8d:0d:4e:f4:25:96:1a:0d:
                    26:b5:de:24:ec:25:69:53:36:b3:91:ea:40:98:8e:
                    4a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AE:E5:99:A1:78:95:29:B1:25:07:20:74:C2:BC:90:28:F1:3D:B6
            X509v3 Authority Key Identifier:
                keyid:C9:4A:B8:4B:38:0F:32:E3:B1:56:FC:A3:70:A2:84:FC:B0:76:1A:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUq4SzgPMuOxVvyjcKKE_LB2Grc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/yUq4SzgPMuOxVvyjcKKE_LB2Grc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/yUq4SzgPMuOxVvyjcKKE_LB2Grc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ff:09:51:ca:99:63:1c:a3:f7:be:4b:a5:f0:aa:08:49:14:
         6c:2b:47:6a:2b:a8:24:f7:a2:69:81:c1:c7:9a:44:3c:f1:98:
         14:d4:93:2d:5b:fb:f8:27:91:97:69:f1:2f:5e:22:b5:b8:77:
         39:f6:d3:b3:ef:e1:00:71:fd:6e:df:e3:7a:83:39:9a:d4:7f:
         44:a5:da:59:7a:48:df:12:53:f8:39:bb:fc:4f:34:43:95:d9:
         e9:34:20:50:a3:d9:5d:ba:e8:0b:16:ec:a5:00:9b:c5:36:07:
         21:03:f2:8d:63:be:24:76:fb:3d:d7:88:d5:a1:75:e7:d2:c8:
         1e:35:85:49:2b:dd:3f:d2:e5:50:bb:42:a3:7a:e5:cd:87:d9:
         42:db:b6:6a:01:df:49:73:43:af:d5:a3:54:19:a7:ef:d5:d3:
         0b:49:98:06:9a:94:b8:41:86:61:16:c0:98:83:53:f2:b0:4c:
         b7:a9:d0:d5:5d:6c:9e:6a:31:3f:65:27:b1:21:56:00:6e:c4:
         74:13:0e:62:6b:ba:ae:49:65:66:62:65:81:7c:0a:f6:a6:fd:
         3f:9c:a9:e0:e9:f6:5b:b9:a8:77:7c:4c:a3:79:c3:1b:2f:89:
         99:41:f3:a6:73:ac:81:96:0e:cb:df:38:c3:50:5c:19:4a:7e:
         6b:2b:7d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:43:53 2026 by rpki-client