Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
File:                     0YIiY6hwfHbz2ztr5xIiacgnrlU.mft (raw, json)
Hash identifier:          FzBtr+KdTsxbCFc7iK3Jve2he9gcoZP/nLwvwbaph4M=
Subject key identifier:   2D:44:18:BF:3F:82:53:61:F3:B7:FF:21:A9:B5:93:D6:07:56:E4:E3
Authority key identifier: D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
Certificate issuer:       /CN=d1822263a8707c76f3db3b6be7122269c827ae55
Certificate serial:       01A1494EA3A378386774622BD8CA2ADA579C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
Manifest number:          102E
Signing time:             Sat 17 Oct 2026 10:00:52 +0000
Manifest this update:     Sat 17 Oct 2026 10:00:52 +0000
Manifest next update:     Sun 18 Oct 2026 10:00:52 +0000
Files and hashes:         1: 0YIiY6hwfHbz2ztr5xIiacgnrlU.crl (hash: ZNS3Wors4yftuZo9tbVm5Etysmgu11mONxOiPU4AVqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 10:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:49:4e:a3:a3:78:38:67:74:62:2b:d8:ca:2a:da:57:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1822263a8707c76f3db3b6be7122269c827ae55
        Validity
            Not Before: Oct 17 10:00:52 2026 GMT
            Not After : Oct 18 10:00:52 2026 GMT
        Subject: CN=2d4418bf3f825361f3b7ff21a9b593d60756e4e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ee:92:f0:fe:87:b7:54:97:9d:47:48:2f:54:
                    26:9c:b2:aa:a1:51:8d:9c:7e:fb:ae:b7:9c:b2:d2:
                    55:9d:1f:16:a7:70:57:04:b2:67:e1:5c:dc:80:6c:
                    08:36:d3:b3:7b:5d:88:d6:20:41:6b:cf:8f:22:11:
                    89:b0:bd:33:0f:42:0b:fe:46:da:d4:8e:38:ea:85:
                    df:57:73:25:d4:92:92:ae:86:de:96:f3:23:3b:cf:
                    89:9a:b8:98:55:80:d8:db:50:8f:7a:79:ce:d0:5e:
                    4b:25:c4:48:0f:fb:bd:a4:60:37:39:46:67:ef:b0:
                    9e:93:8d:a7:a9:38:ec:50:1f:5b:d3:6f:11:29:24:
                    58:9a:32:dc:6c:7b:ba:51:3b:09:01:d8:4c:6a:6a:
                    13:8d:d2:aa:79:66:5d:56:0a:1d:dc:a5:25:21:0e:
                    d7:ce:6f:0e:db:99:17:87:b4:ce:37:76:78:48:fc:
                    48:9c:6b:5f:d8:bb:96:31:a4:2e:9f:1e:0a:19:de:
                    5b:bb:98:7e:35:eb:48:45:3b:ad:63:ed:f9:65:6f:
                    53:4a:e8:a4:2c:4c:0a:ae:79:e0:9f:1b:5d:82:99:
                    39:20:74:d5:07:c6:6b:1f:54:74:1e:55:a3:f6:a2:
                    2e:78:bc:9e:36:06:42:bb:f5:92:b9:a1:41:75:d8:
                    ce:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:44:18:BF:3F:82:53:61:F3:B7:FF:21:A9:B5:93:D6:07:56:E4:E3
            X509v3 Authority Key Identifier:
                keyid:D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:eb:21:1a:30:bc:ae:1e:9c:78:cd:26:58:12:e5:84:0b:b5:
         60:03:d4:e1:13:c3:1f:ff:11:18:b4:37:a3:ff:a5:78:2c:e6:
         a1:53:51:4c:0c:6a:9b:ea:17:07:66:fc:dd:d3:ef:b3:76:1e:
         e3:54:96:37:b0:02:f5:bc:ae:92:d9:f8:42:da:47:36:9d:58:
         d5:23:da:39:68:f0:31:35:39:de:9b:fa:d1:ea:90:ba:39:7b:
         08:b5:db:ad:6e:39:8d:ea:07:b0:07:40:3b:92:86:1a:36:5b:
         1d:2b:b6:33:19:3f:8a:56:f1:c1:5f:68:a5:97:ee:b4:ae:b5:
         0a:7b:0e:ef:c3:fa:e1:6f:c8:22:71:40:86:d5:8d:cb:60:1b:
         c7:ea:cb:b0:c0:aa:c5:9e:9b:a0:35:9f:38:8d:5e:d0:43:65:
         1b:e8:47:3d:1c:19:a4:26:69:f3:4e:ef:4b:6c:9c:56:fd:7d:
         7e:5c:cf:a5:1f:98:66:43:99:34:d3:e8:98:18:7d:24:f5:cd:
         1e:5f:15:9c:39:10:5c:ee:2b:9b:95:31:0d:e8:f4:b4:6b:a6:
         81:58:02:f1:96:d1:65:ef:1e:d0:bd:c7:5e:75:0c:d8:c6:e9:
         bc:20:d5:15:18:fa:c1:69:42:f3:a0:cc:2a:aa:e5:9a:87:1b:
         4f:04:9e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 18:32:35 2026 by rpki-client