Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
File:                     YO9KF7jv9Fugs51HSWVX44j__lI.mft (raw, json)
Hash identifier:          3rzVTKp1Z9uFEJ8CL4p+TjSWH9fe9+wIncDOPZk111c=
Subject key identifier:   E1:44:81:2E:18:98:DD:9A:9F:37:59:5E:33:26:F8:DF:58:33:82:EA
Authority key identifier: 60:EF:4A:17:B8:EF:F4:5B:A0:B3:9D:47:49:65:57:E3:88:FF:FE:52
Certificate issuer:       /CN=60ef4a17b8eff45ba0b39d47496557e388fffe52
Certificate serial:       01A089797B403FBDC4D698DD61645F808331
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
Manifest number:          052C
Signing time:             Thu 10 Sep 2026 04:00:34 +0000
Manifest this update:     Thu 10 Sep 2026 04:00:34 +0000
Manifest next update:     Fri 11 Sep 2026 04:00:34 +0000
Files and hashes:         1: YO9KF7jv9Fugs51HSWVX44j__lI.crl (hash: OrIJX7Uq7ghrXRbNP6WLQkonvdWAwKinU+PdbD37e8I=)
                          2: bqQFNJsrG869RK3Nfbwr65mLsd0.roa (hash: lGIgTiJR2g5VC3z+XfnzZ2hEM7gGKI2STx8vdvlyfrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 04:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:79:7b:40:3f:bd:c4:d6:98:dd:61:64:5f:80:83:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60ef4a17b8eff45ba0b39d47496557e388fffe52
        Validity
            Not Before: Sep 10 04:00:34 2026 GMT
            Not After : Sep 11 04:00:34 2026 GMT
        Subject: CN=e144812e1898dd9a9f37595e3326f8df583382ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1d:14:75:5c:e0:b3:ee:9b:ea:ce:ac:b0:be:
                    f9:22:f3:5c:2f:09:79:86:94:36:b0:15:54:85:47:
                    7e:f4:95:97:a8:7c:93:f7:96:db:fc:90:03:de:fd:
                    13:6f:ec:fa:90:e7:26:ae:6f:71:2b:52:cc:7a:48:
                    cd:15:3b:22:d1:87:b7:ad:e4:da:a2:b6:e9:af:b2:
                    7f:e3:5c:08:12:86:34:42:d8:a3:68:80:10:0e:da:
                    64:fa:00:84:e7:9d:a5:96:ec:b7:a4:3f:d4:59:dd:
                    4b:5a:c9:77:d4:3f:c9:f5:de:b9:10:50:ae:5a:81:
                    56:62:2c:76:0d:79:5b:14:d6:47:d7:7d:be:fc:3f:
                    ea:dd:3b:bb:d3:72:ac:d4:d4:82:64:30:a5:78:78:
                    a1:09:31:74:ff:64:de:f1:60:6f:70:de:3e:55:55:
                    17:e1:c3:45:a6:e7:7e:3e:0e:d8:98:9a:80:7d:31:
                    dc:8e:59:65:7f:20:9a:4e:7d:85:0d:6c:c1:d7:a4:
                    29:7d:65:86:28:f1:ee:5c:96:d5:d2:74:d9:2a:8f:
                    fc:d9:44:72:59:52:a2:92:17:8f:b1:ee:59:e8:e5:
                    9e:45:b3:02:a7:3c:24:fc:4f:8a:ee:38:ba:2e:c9:
                    a9:bd:8e:fa:3b:72:5e:5f:6a:bc:e0:f4:ad:64:e9:
                    4a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:44:81:2E:18:98:DD:9A:9F:37:59:5E:33:26:F8:DF:58:33:82:EA
            X509v3 Authority Key Identifier:
                keyid:60:EF:4A:17:B8:EF:F4:5B:A0:B3:9D:47:49:65:57:E3:88:FF:FE:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:01:a4:03:8e:7e:ac:9d:f1:1c:b8:4f:99:68:3a:01:f6:14:
         f6:9a:65:58:27:4b:d6:01:77:83:a0:1b:89:4b:96:64:01:e9:
         e6:ba:47:84:c3:ec:97:32:84:39:95:33:0e:37:b3:14:41:de:
         ae:d6:5b:ad:1c:c7:6e:2c:16:ba:cf:78:40:cf:43:1a:6c:88:
         47:b7:08:8b:65:57:e0:94:d6:2d:40:1f:47:ec:c8:d1:a3:5f:
         52:84:9e:62:2f:9e:00:59:db:00:75:88:67:70:ee:1d:78:66:
         cd:26:6e:17:f2:5f:27:dc:6c:a9:c8:7e:ca:bb:6b:f1:d9:84:
         f3:b8:fb:2c:c5:01:36:c2:c1:89:50:76:e4:72:30:36:25:8b:
         10:f4:89:64:fa:d9:93:e1:26:82:1a:36:e8:3d:e7:70:25:d9:
         09:3b:b8:e3:bb:9b:12:d3:4e:2d:2b:2a:55:c3:58:f6:20:30:
         90:7d:5c:08:78:c5:0f:37:95:c6:47:48:75:03:c3:a8:59:df:
         99:eb:52:09:59:bd:18:e7:5c:10:9a:f5:b4:7a:06:fe:5d:10:
         36:0a:05:90:cb:69:b1:c2:36:bc:53:b6:4a:ea:59:43:6a:f8:
         2e:b0:35:50:c8:1e:bc:93:64:7a:70:99:ae:a5:34:fd:f4:57:
         47:de:b3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:50:14 2026 by rpki-client