Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/6a2d87-e53d-49bb-be01-60aad3db3e38/1/yYPuPVHGojyZCacJi4Z41cjf7O0.mft
File:                     yYPuPVHGojyZCacJi4Z41cjf7O0.mft (raw, json)
Hash identifier:          P3JCD4mvlXLaeQwCzdt2DmO82vBUCPRKF3339/FfhX8=
Subject key identifier:   08:75:F4:A8:CF:CD:41:5F:9A:8F:7F:62:ED:F2:A0:A3:C3:4D:6A:1C
Authority key identifier: C9:83:EE:3D:51:C6:A2:3C:99:09:A7:09:8B:86:78:D5:C8:DF:EC:ED
Certificate issuer:       /CN=c983ee3d51c6a23c9909a7098b8678d5c8dfeced
Certificate serial:       01A15F9F8830BE953CB2B5E39A2F2D63ED77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYPuPVHGojyZCacJi4Z41cjf7O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/6a2d87-e53d-49bb-be01-60aad3db3e38/1/yYPuPVHGojyZCacJi4Z41cjf7O0.mft
Manifest number:          B0
Signing time:             Wed 21 Oct 2026 18:00:52 +0000
Manifest this update:     Wed 21 Oct 2026 18:00:52 +0000
Manifest next update:     Thu 22 Oct 2026 18:00:52 +0000
Files and hashes:         1: eDcSlxP7XiXaAiDLRSTct9MD2zg.roa (hash: QmP1HE0WxKhN31L+VXAQfz3t8ci7ROFl6oUrHnBNHmY=)
                          2: yYPuPVHGojyZCacJi4Z41cjf7O0.crl (hash: rnV9GNQM6vOIT1FJG+3Xg3AP46M0rQnJ4jm5vZWDdzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/6a2d87-e53d-49bb-be01-60aad3db3e38/1/yYPuPVHGojyZCacJi4Z41cjf7O0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/6a2d87-e53d-49bb-be01-60aad3db3e38/1/yYPuPVHGojyZCacJi4Z41cjf7O0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYPuPVHGojyZCacJi4Z41cjf7O0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:13:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5f:9f:88:30:be:95:3c:b2:b5:e3:9a:2f:2d:63:ed:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c983ee3d51c6a23c9909a7098b8678d5c8dfeced
        Validity
            Not Before: Oct 21 18:00:52 2026 GMT
            Not After : Oct 22 18:00:52 2026 GMT
        Subject: CN=0875f4a8cfcd415f9a8f7f62edf2a0a3c34d6a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0a:8d:de:55:8b:c0:82:f4:22:e0:27:de:c9:
                    23:a2:30:cc:bb:49:19:0f:b5:5c:a5:77:9e:6b:31:
                    1c:3e:32:ed:2c:f5:22:68:fe:a1:10:8a:a1:7b:9b:
                    e2:7d:66:07:04:49:f3:49:a4:46:16:0b:fb:6a:b0:
                    4b:89:00:b8:fa:da:87:1f:94:d5:38:ec:4f:56:a3:
                    15:00:d6:78:89:70:53:d8:5b:53:11:41:bd:ef:67:
                    f9:f8:64:08:dc:89:32:a5:f9:06:55:1b:67:d3:69:
                    83:1c:03:46:fe:a7:54:37:f6:cb:f1:cc:b7:49:b2:
                    dd:05:a3:b7:92:97:12:50:3a:77:8b:7f:4f:f3:4f:
                    c0:4e:88:2b:51:a2:8f:5f:39:cb:3c:3c:30:53:86:
                    53:f8:85:71:e0:db:8c:5e:ef:b7:e6:db:88:b9:37:
                    15:2e:c2:3d:e3:06:3f:62:a2:82:1a:1a:ce:34:49:
                    a2:79:f2:4f:77:d5:4b:14:9b:2f:27:54:9a:b4:e9:
                    4b:2c:d7:d7:9c:b1:87:6f:91:69:ad:08:13:b1:5c:
                    c7:cd:3e:51:a9:e9:a2:53:0d:09:ad:5e:43:b9:2c:
                    ad:05:98:24:b3:d2:4f:21:3b:a1:09:95:56:d9:b7:
                    6d:e7:4e:0b:b3:2e:3e:05:0f:20:2c:53:33:be:20:
                    ba:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:75:F4:A8:CF:CD:41:5F:9A:8F:7F:62:ED:F2:A0:A3:C3:4D:6A:1C
            X509v3 Authority Key Identifier:
                keyid:C9:83:EE:3D:51:C6:A2:3C:99:09:A7:09:8B:86:78:D5:C8:DF:EC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYPuPVHGojyZCacJi4Z41cjf7O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a2d87-e53d-49bb-be01-60aad3db3e38/1/yYPuPVHGojyZCacJi4Z41cjf7O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a2d87-e53d-49bb-be01-60aad3db3e38/1/yYPuPVHGojyZCacJi4Z41cjf7O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d9:9f:1a:1c:59:a6:4a:6a:91:0d:8e:0a:2f:30:61:ae:14:
         a4:50:ec:49:23:af:0e:11:10:ae:8d:d5:30:59:25:38:21:24:
         91:a7:2b:95:39:0e:e7:ae:74:9f:e7:eb:bd:d2:6c:08:4c:9f:
         7c:06:72:0f:b4:bb:87:10:a6:18:a2:70:86:5f:c7:9b:a8:59:
         87:65:0f:5e:51:1e:80:5e:14:55:42:0c:4f:fd:a3:d0:31:17:
         36:56:9a:6a:2e:24:98:22:93:8e:1d:fb:55:e0:e0:56:83:1c:
         29:c2:82:e0:d2:2d:8b:c0:e5:bd:69:51:92:97:2f:7e:ad:19:
         6b:bc:96:47:fd:56:8f:ab:3d:4d:f9:93:98:dd:5b:18:f3:91:
         40:fe:de:d3:e5:f9:8d:17:a0:8e:d5:98:8b:cd:72:b4:dc:b1:
         e7:95:99:90:a4:a0:4f:0e:bb:2c:97:57:5a:3d:d2:06:35:b8:
         0d:75:37:26:90:a0:5c:48:fc:95:dc:7a:37:7f:6f:c8:ca:34:
         87:6a:f9:96:4d:5a:7a:f2:5f:eb:26:f1:59:9b:03:7f:c3:30:
         33:be:89:8f:e0:3f:b2:d9:7a:b0:c8:22:2c:5d:3d:9b:42:a4:
         1f:5d:33:a3:e4:64:06:48:48:07:a9:83:dc:a5:9a:c6:93:c8:
         35:55:d8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:47:27 2026 by rpki-client