Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
File:                     YihBc2HBxAaumnJX2qn7BiB4LTU.mft (raw, json)
Hash identifier:          KyCvZzMebLWEdo5edww0PPVDu94EIOsjyI7dcijLAdA=
Subject key identifier:   5C:4E:D1:90:D6:D6:C2:33:BA:0A:E4:70:B9:98:1D:D5:66:64:2E:F5
Authority key identifier: 62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
Certificate issuer:       /CN=6228417361c1c406ae9a7257daa9fb0620782d35
Certificate serial:       01A06E39649E7C8BB6A5E19B852F49AF3E6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
Manifest number:          12DE
Signing time:             Fri 04 Sep 2026 21:00:50 +0000
Manifest this update:     Fri 04 Sep 2026 21:00:50 +0000
Manifest next update:     Sat 05 Sep 2026 21:00:50 +0000
Files and hashes:         1: 0821mhhu_dqdcqQbxajhPPTXDuU.roa (hash: ooSLPjcpcEvK3V7j97ECx3S8mqo+5KuosVxep9334Qg=)
                          2: YihBc2HBxAaumnJX2qn7BiB4LTU.crl (hash: EKXXEIl3w+3DEQ91GxUrg+te5+AdTrwXNzlR6vVsVYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:39:64:9e:7c:8b:b6:a5:e1:9b:85:2f:49:af:3e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6228417361c1c406ae9a7257daa9fb0620782d35
        Validity
            Not Before: Sep  4 21:00:50 2026 GMT
            Not After : Sep  5 21:00:50 2026 GMT
        Subject: CN=5c4ed190d6d6c233ba0ae470b9981dd566642ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:20:d9:5d:2e:ba:41:5f:01:73:fc:cd:9d:25:
                    88:49:9a:e4:63:3f:27:1c:49:6e:5d:12:bf:20:82:
                    02:1b:b3:f0:d3:d0:96:36:e9:e6:b1:40:4e:ac:b4:
                    93:4b:78:be:aa:d3:8d:16:09:98:a0:f4:d2:a9:60:
                    9d:83:90:b8:c3:a4:50:6e:b0:88:b2:b8:7b:ca:54:
                    26:c9:ae:f5:63:30:24:b7:9b:fb:fe:a1:a0:0c:24:
                    48:a4:4d:20:5c:98:e6:30:90:b6:04:5f:b3:89:c9:
                    4c:7e:b2:d3:16:3d:01:d9:37:2e:02:f5:60:d4:48:
                    76:25:01:26:14:e8:a6:dd:36:83:f5:cf:a1:76:9c:
                    74:be:3c:ee:73:47:46:63:0e:56:4a:bc:4c:f5:ed:
                    77:49:b6:11:b3:02:21:ec:8c:6c:f2:06:71:61:3f:
                    f7:cc:4f:e2:f2:91:ae:01:64:3a:10:53:72:00:48:
                    1d:6a:32:8e:b6:49:49:57:b5:5d:bb:59:7e:f8:58:
                    2e:50:8f:43:4c:a4:e0:e4:06:df:f4:53:d8:d8:3c:
                    cf:36:0f:39:07:f5:26:78:97:14:46:b3:7a:1b:13:
                    e4:8c:16:ba:64:97:d6:ff:4f:d9:1a:71:f6:50:14:
                    6a:22:01:e5:d6:72:b5:e5:07:d2:ed:f6:6f:0e:28:
                    9a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4E:D1:90:D6:D6:C2:33:BA:0A:E4:70:B9:98:1D:D5:66:64:2E:F5
            X509v3 Authority Key Identifier:
                keyid:62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:96:70:fb:d4:9f:27:8a:52:5f:53:65:e8:80:39:a1:d7:cc:
         39:8f:6f:ee:69:03:e7:fd:db:32:c3:43:36:14:f2:0b:0a:dc:
         20:82:1e:b0:fe:52:fe:61:5b:31:bf:97:2c:bd:fb:19:50:e6:
         f1:35:49:97:e1:a0:53:2e:5d:26:86:fb:34:35:3d:51:fd:3d:
         6d:29:19:c4:c7:a0:82:ac:f1:28:94:8f:1a:2d:bb:31:69:fd:
         ee:cc:4c:29:92:c4:72:6d:11:38:20:19:eb:fc:ae:99:ad:69:
         15:f3:a5:49:b2:0f:af:3d:d2:a5:d0:08:04:84:e0:13:7e:61:
         6d:02:18:30:f2:54:94:8f:4a:45:1f:f4:f6:0b:e4:31:bb:4e:
         13:07:53:9f:e4:d3:48:f7:38:15:92:6e:65:3e:7a:c4:74:e0:
         69:f8:f0:31:db:11:48:86:38:ba:46:de:34:6a:ac:05:09:29:
         47:2e:41:f6:3f:af:26:51:86:60:88:46:3f:28:27:8d:5d:fe:
         fe:7a:c8:81:01:65:62:92:a4:6a:0c:7c:f1:05:d0:5a:12:dd:
         d5:f7:a1:1d:60:ca:2a:df:f0:99:08:bc:b7:e4:d9:a4:5f:85:
         67:7f:68:1c:60:b5:f2:70:d0:7f:dd:be:43:67:59:39:4a:e5:
         88:cc:b6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:40:56 2026 by rpki-client