Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
File:                     yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft (raw, json)
Hash identifier:          X7DgNcBTlh0v/u/8w372J0pDdoGHS48YR5iMoQVGFIw=
Subject key identifier:   36:54:6C:E4:8F:F3:8E:F3:67:71:79:11:47:2A:C4:DC:DA:C6:4D:44
Authority key identifier: C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7
Certificate issuer:       /CN=c9392c3276b243aff740a082c588fb73941ebbf7
Certificate serial:       01A162A0D2D67DFA49582731476EA12F8352
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
Manifest number:          0A2A
Signing time:             Thu 22 Oct 2026 08:01:09 +0000
Manifest this update:     Thu 22 Oct 2026 08:01:09 +0000
Manifest next update:     Fri 23 Oct 2026 08:01:09 +0000
Files and hashes:         1: CDYJ5duT-YiN5vn4ue9hcM_s3OA.roa (hash: ZtL4bRFnSWFbHHuzOCLv1emqHa4TMbYiRtAD7J2vEiI=)
                          2: yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl (hash: DWuaVGUaVhx08Gdzj9DwqS7TOCdm85cuk+zACqiuoAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 08:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:62:a0:d2:d6:7d:fa:49:58:27:31:47:6e:a1:2f:83:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9392c3276b243aff740a082c588fb73941ebbf7
        Validity
            Not Before: Oct 22 08:01:09 2026 GMT
            Not After : Oct 23 08:01:09 2026 GMT
        Subject: CN=36546ce48ff38ef367717911472ac4dcdac64d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0d:0b:48:b2:ee:9f:88:7a:7c:b8:0b:fc:c3:
                    de:8c:ac:03:c1:de:e4:ab:49:88:4a:5c:6c:c2:2f:
                    50:8d:65:0d:e0:cb:ff:fd:6f:04:ae:12:3a:40:2b:
                    f6:53:41:ce:6b:63:f1:70:9f:9f:f4:1d:af:7a:20:
                    0e:9a:1a:eb:9d:73:15:f2:54:79:9d:74:b7:de:25:
                    42:3f:73:40:d4:db:bd:31:76:bf:5b:8d:ab:58:2c:
                    0b:a5:3c:f2:01:e9:54:04:c7:31:f0:e7:5d:74:ae:
                    3f:74:3c:65:0c:af:bf:88:94:fb:0b:72:df:93:1f:
                    c5:b0:e6:47:6f:5d:e6:f9:7e:52:4a:d5:a2:c7:1e:
                    73:13:96:3d:02:77:75:71:d8:a6:34:f3:c7:73:76:
                    4a:01:57:24:d3:2a:21:97:33:07:42:1f:08:f6:9a:
                    9d:e4:15:84:08:78:1c:32:6f:8a:07:41:0a:40:5c:
                    21:67:74:c6:61:79:84:64:e9:b0:41:0d:3a:05:0b:
                    29:34:58:b9:22:ab:f6:51:0c:0c:12:ab:60:55:55:
                    53:a0:bf:bb:63:a4:ff:d5:6a:89:9b:2c:07:ca:7f:
                    fa:07:0a:aa:3e:23:81:ee:07:cc:54:d2:3a:cd:81:
                    03:61:13:13:97:cb:54:b9:e1:97:22:fe:1f:b1:b7:
                    ac:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:54:6C:E4:8F:F3:8E:F3:67:71:79:11:47:2A:C4:DC:DA:C6:4D:44
            X509v3 Authority Key Identifier:
                keyid:C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:34:93:09:6e:9d:1f:ad:75:69:f0:e6:74:05:d6:95:4f:f8:
         3c:f8:53:b3:20:21:9c:fe:4c:c4:0c:e0:cc:d3:f4:30:23:b8:
         52:dc:d2:e7:e1:2a:2b:00:49:9a:fd:c1:df:51:f5:e2:0c:96:
         ec:54:57:b7:7b:50:aa:2e:3a:f2:6b:dc:a6:fd:dc:c2:ed:52:
         82:f8:18:35:0e:8e:25:dc:57:6d:c3:d0:10:cb:d3:7c:1a:5e:
         7c:18:6c:dd:42:8a:58:98:0b:9b:76:4b:a7:96:b7:3e:c4:b2:
         7d:0e:87:3e:39:03:bd:e9:58:12:86:7f:59:99:72:95:7c:7d:
         b9:2a:4c:5d:9e:96:0f:7f:84:3b:42:f2:34:7a:e2:72:7b:8c:
         c9:3b:fc:87:e6:6b:b0:f1:3f:58:47:f8:6f:e8:52:9e:2b:39:
         56:74:96:1d:91:6c:77:8c:6b:99:a2:9f:1d:65:94:43:30:61:
         43:92:10:dc:b5:42:b1:49:87:a7:a5:bf:ea:40:91:e8:34:2e:
         cc:b6:91:5b:30:30:7d:f3:ac:9f:d9:8b:9c:c7:70:47:7e:45:
         e3:24:6f:62:5a:9e:55:89:a9:32:09:e1:c4:11:93:b1:97:3f:
         cb:94:bf:84:22:10:a9:18:e0:2c:97:6e:46:dd:6c:64:85:49:
         61:a7:84:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFioNLWffpJWCcxR26hL4NSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MzkyYzMyNzZiMjQzYWZmNzQwYTA4MmM1ODhmYjczOTQx
ZWJiZjcwHhcNMjYxMDIyMDgwMTA5WhcNMjYxMDIzMDgwMTA5WjAzMTEwLwYDVQQD
EygzNjU0NmNlNDhmZjM4ZWYzNjc3MTc5MTE0NzJhYzRkY2RhYzY0ZDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5g0LSLLun4h6fLgL/MPejKwDwd7k
q0mISlxswi9QjWUN4Mv//W8ErhI6QCv2U0HOa2PxcJ+f9B2veiAOmhrrnXMV8lR5
nXS33iVCP3NA1Nu9MXa/W42rWCwLpTzyAelUBMcx8OdddK4/dDxlDK+/iJT7C3Lf
kx/FsOZHb13m+X5SStWixx5zE5Y9And1cdimNPPHc3ZKAVck0yohlzMHQh8I9pqd
5BWECHgcMm+KB0EKQFwhZ3TGYXmEZOmwQQ06BQspNFi5Iqv2UQwMEqtgVVVToL+7
Y6T/1WqJmywHyn/6BwqqPiOB7gfMVNI6zYEDYRMTl8tUueGXIv4fsbesiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZUbOSP847zZ3F5EUcqxNzaxk1EMB8GA1UdIwQY
MBaAFMk5LDJ2skOv90CggsWI+3OUHrv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVRrc01uYXlRNl8zUUtDQ3hZajdjNVFldV9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yNTZjYjYtZGM0Mi00MWE1LWI5MjAt
MjRjYmExYzAzYzk5LzEveVRrc01uYXlRNl8zUUtDQ3hZajdjNVFldV9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yNTZjYjYtZGM0Mi00MWE1LWI5MjAtMjRjYmExYzAzYzk5
LzEveVRrc01uYXlRNl8zUUtDQ3hZajdjNVFldV9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzSTCW6d
H611afDmdAXWlU/4PPhTsyAhnP5MxAzgzNP0MCO4UtzS5+EqKwBJmv3B31H14gyW
7FRXt3tQqi468mvcpv3cwu1SgvgYNQ6OJdxXbcPQEMvTfBpefBhs3UKKWJgLm3ZL
p5a3PsSyfQ6HPjkDvelYEoZ/WZlylXx9uSpMXZ6WD3+EO0LyNHricnuMyTv8h+Zr
sPE/WEf4b+hSnis5VnSWHZFsd4xrmaKfHWWUQzBhQ5IQ3LVCsUmHp6W/6kCR6DQu
zLaRWzAwffOsn9mLnMdwR35F4yRvYlqeVYmpMgnhxBGTsZc/y5S/hCIQqRjgLJdu
Rt1sZIVJYaeE/A==
-----END CERTIFICATE-----
Generated at Thu Oct 22 18:15:26 2026 by rpki-client