Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
File:                     YfvYiH2oRHExjYOISsAF8BtE_Uk.mft (raw, json)
Hash identifier:          RHtiR4sk1+PZEsW5D5M2x6rLzUVfhBudhzu+kYcAL7o=
Subject key identifier:   A5:62:1B:F4:0D:65:AA:3A:AC:D8:F1:7E:A0:68:7B:52:DF:02:89:B9
Authority key identifier: 61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
Certificate issuer:       /CN=61fbd8887da84471318d83884ac005f01b44fd49
Certificate serial:       01A004A7650994BBFF1F06C8BD912166B430
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
Manifest number:          1325
Signing time:             Sat 15 Aug 2026 09:01:14 +0000
Manifest this update:     Sat 15 Aug 2026 09:01:14 +0000
Manifest next update:     Sun 16 Aug 2026 09:01:14 +0000
Files and hashes:         1: DhX1AL3YLB9SdItGYNcjsUvsOGE.roa (hash: +Q+chkOuahBdoqYleJ582M9GOlo0NXVt0stFukum49g=)
                          2: YfvYiH2oRHExjYOISsAF8BtE_Uk.crl (hash: PTmB7D7OKyPFDRKVBua8HUHE3nNsn3EqUSzaXhv+78M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 03:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:04:a7:65:09:94:bb:ff:1f:06:c8:bd:91:21:66:b4:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61fbd8887da84471318d83884ac005f01b44fd49
        Validity
            Not Before: Aug 15 09:01:14 2026 GMT
            Not After : Aug 16 09:01:14 2026 GMT
        Subject: CN=a5621bf40d65aa3aacd8f17ea0687b52df0289b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:b7:08:b0:e7:1b:b8:85:75:87:3d:a1:5e:
                    91:31:f4:17:c0:ce:c6:a7:07:db:d3:cb:2c:5a:c6:
                    a6:33:91:15:c2:a2:7b:24:64:be:08:a1:0e:51:a4:
                    80:3b:41:43:27:e2:71:35:5c:e8:41:30:97:c8:c0:
                    39:e8:e5:a4:e9:91:83:81:0e:37:c6:28:79:6d:cc:
                    b4:f1:3c:75:76:a8:4a:c5:a1:69:f5:74:f6:07:48:
                    61:28:e6:62:8b:61:bb:ef:6a:89:32:f9:76:1b:53:
                    fd:db:06:4d:a9:a6:fa:bf:ac:b1:c0:a8:ab:fb:a1:
                    dc:9a:3c:90:65:54:8c:f8:7c:a6:fe:69:5b:d0:9e:
                    92:47:d9:2b:db:56:ae:e4:7e:44:46:66:fc:43:19:
                    9b:aa:17:50:4e:4a:6c:b2:3f:8e:86:49:a5:e9:65:
                    b0:65:09:21:b0:06:21:61:d7:3b:8b:b3:17:8d:7c:
                    8a:82:0d:84:ed:82:c1:06:d9:06:5a:54:ac:20:30:
                    ba:e1:a4:c0:ec:c3:07:c2:8c:6b:8f:de:74:2a:72:
                    59:d2:14:5d:8d:64:54:fc:91:0b:69:99:e0:69:62:
                    72:c7:88:e8:b6:95:11:b8:b9:e0:96:a6:09:98:47:
                    33:03:ee:42:bc:a1:d9:f1:a4:d6:99:5b:de:e2:3f:
                    d9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:62:1B:F4:0D:65:AA:3A:AC:D8:F1:7E:A0:68:7B:52:DF:02:89:B9
            X509v3 Authority Key Identifier:
                keyid:61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:e9:a2:92:55:98:48:dd:d4:95:af:cb:e4:5d:01:60:82:24:
         ed:04:9a:f1:1a:91:da:c4:dc:7d:cc:6d:eb:45:03:dc:41:35:
         bf:ee:50:4b:15:95:a6:a2:26:a8:06:23:b5:6b:4a:9d:98:b8:
         71:4d:6a:23:35:e2:e9:e3:11:25:2d:e8:26:68:3e:3c:3c:75:
         37:50:3c:36:f5:21:24:fc:87:59:b2:79:50:ed:1a:25:6e:8f:
         24:0e:fd:ef:10:f9:52:d3:a8:33:93:95:44:6b:29:df:6c:c7:
         0d:fb:7f:4e:8e:a1:7e:4a:19:8d:1f:29:c5:1f:25:f2:8a:da:
         f6:2b:6f:0a:c0:6b:63:f9:57:0e:53:2f:79:06:60:25:ec:e6:
         f3:f8:e6:ce:bd:5b:a2:7b:dd:82:22:58:0b:22:bd:66:b0:16:
         92:da:81:24:02:ee:9e:33:2a:95:5a:86:89:a2:a2:90:ca:69:
         f3:4e:bc:0a:c4:e4:3e:8f:d9:9c:c5:69:24:14:8f:4a:64:11:
         09:83:50:5e:a6:69:a4:bb:a2:f2:d6:92:b4:a4:f9:42:48:e8:
         5b:f7:45:ec:4d:3c:ce:7d:39:c0:a6:19:cf:d0:1b:22:e9:a2:
         aa:7f:52:61:84:bc:9f:ab:a7:2b:d1:1b:2f:80:8a:07:de:2c:
         ad:2e:e8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 12:52:53 2026 by rpki-client