Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
File:                     YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft (raw, json)
Hash identifier:          fmnDiOfKsNqc4+uqGGbqXYOOyDlfG6b7vqjnz10CNCE=
Subject key identifier:   DF:97:8B:D9:68:6D:77:F5:04:95:06:9D:72:0E:BC:D5:65:F0:09:19
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Certificate issuer:       /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial:       01A17C97D7C007D75AE01CCB939FFA070D74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
Manifest number:          169A
Signing time:             Tue 27 Oct 2026 09:01:28 +0000
Manifest this update:     Tue 27 Oct 2026 09:01:28 +0000
Manifest next update:     Wed 28 Oct 2026 09:01:28 +0000
Files and hashes:         1: 7r9SX9HuGtf2H3oy1bdYUxs6ERM.roa (hash: gZE5Lnpr7kALC+H2K1SiEYZZcM/wPDOptHC62z3JpZM=)
                          2: RaOgAx7z_BoGsJCyVvWXc3WyVrw.roa (hash: H3mZYu57zkJacQjG3m40A6yiDRjQz42LgSYFK6KQrLI=)
                          3: TJ2UCD3Urxqqt9VYyEf23Fmmaqc.roa (hash: ofKvq3GVg7zKLaiA8CE5CKSDJCDWtrOUHXHufuUJ1ug=)
                          4: Xrue8_3iZIf-q2iZjaX1I5eh5v4.roa (hash: GCW1dLjeWZhLx2VOYd6Yk9RjDyKldIOTznHcOf+v7tI=)
                          5: XzpLOyyVemQ6RelT4l5NRJSoZY8.roa (hash: 7T31BDFOxFp2/Pv8ShUq1oXNZxQJBzRZFs2H/DMrRxs=)
                          6: YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl (hash: Cqhq77RJUsyXuZsjec5DTNq+TU5ePMNaIujqGLmlNsM=)
                          7: i900lZucCqA9DZUrSkDMsObY6hA.roa (hash: BwcsBww5LOQDT5JOaN5lMmUCh3Hs0MQx3s5Tm8CrQME=)
                          8: uTIQo1iOi6huXk_fCeCJe7xarCY.roa (hash: ivcVjW4Q8NkzPjE4iMw0GCYLeKdEXAuPpRYl7NOH1pY=)
                          9: zaFkNKXL7XugoMho6gsyI_tFULk.roa (hash: N8aOmUkSfhnOWq2kc5KVJ3lVeRhazZVqeZC0mkdlrjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:97:d7:c0:07:d7:5a:e0:1c:cb:93:9f:fa:07:0d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
        Validity
            Not Before: Oct 27 09:01:28 2026 GMT
            Not After : Oct 28 09:01:28 2026 GMT
        Subject: CN=df978bd9686d77f50495069d720ebcd565f00919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5d:ca:b3:68:01:cf:e0:92:9b:cb:78:4d:b1:
                    ed:88:c0:55:04:13:a2:e8:c0:04:1a:4f:e9:1a:22:
                    55:27:70:3b:97:c8:82:15:18:cd:b6:92:f0:d2:7b:
                    7f:a5:14:cf:26:65:d1:04:c4:ad:5d:2f:d7:8c:04:
                    4e:42:25:cd:dd:bf:0c:84:1b:da:0c:8c:4c:2f:75:
                    42:a2:00:54:bf:7f:ae:df:d1:af:35:0b:88:3b:3a:
                    47:69:82:2d:be:79:ee:32:73:f8:1d:33:36:76:59:
                    80:49:e2:d5:b1:0e:f7:57:6f:96:1d:19:b5:8b:29:
                    1d:70:43:c6:98:54:38:51:22:29:ba:a0:1d:8c:21:
                    03:0f:9e:1f:af:91:00:6b:2b:0f:53:8a:17:ad:8a:
                    4b:77:b3:98:61:6d:d1:a8:9a:80:8b:b2:fc:7c:87:
                    3d:f2:16:b8:1e:5c:68:72:9d:f8:cf:fe:88:df:d4:
                    12:ef:c5:be:78:03:02:49:e6:f3:95:42:fc:51:5c:
                    df:a3:2d:2a:5c:09:88:8b:2d:fa:f1:93:55:86:fa:
                    47:4a:d5:29:ce:e9:22:bc:bc:76:95:2d:19:f0:bf:
                    0c:54:3c:e3:83:a4:97:75:65:63:25:b9:49:54:f6:
                    76:5d:73:fe:45:01:2a:01:93:8a:2b:2d:d7:69:94:
                    6f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:97:8B:D9:68:6D:77:F5:04:95:06:9D:72:0E:BC:D5:65:F0:09:19
            X509v3 Authority Key Identifier:
                keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:9e:14:fe:c3:90:a1:be:28:48:4b:62:f3:c8:e3:5a:19:11:
         79:3c:c0:e8:33:b0:41:93:69:41:09:f2:27:1f:7f:1d:65:45:
         f6:ac:d7:43:cd:46:2e:9a:a8:15:72:cc:c4:b6:c9:b2:40:14:
         86:aa:7d:44:22:64:4c:5d:d0:93:9d:01:a3:27:16:f5:2d:85:
         a8:df:db:b8:9c:90:39:32:e3:e6:67:36:72:44:69:3e:04:c3:
         48:38:74:da:5b:30:cf:20:94:08:0d:71:4f:55:ce:f1:3c:17:
         e8:3a:9b:f3:ae:f2:3f:ae:bd:ca:cf:c7:4d:88:85:8d:59:3d:
         56:f0:ed:15:19:3c:c4:fd:3b:ef:43:a9:1b:ed:70:71:4e:96:
         06:f7:1c:28:67:b5:90:56:17:41:25:c3:81:b5:4c:75:34:70:
         34:9b:76:76:d4:de:b6:0d:25:13:52:ff:60:75:17:2b:d1:7c:
         75:2f:f1:a5:22:71:1f:2d:40:70:59:2d:fa:74:52:f1:1c:c6:
         f2:e5:f3:d0:a6:3a:21:c8:53:b7:ad:e2:14:a7:90:0d:6f:ab:
         0a:43:03:cf:4d:2f:75:9e:91:d6:54:b1:c4:5f:2b:2b:61:74:
         6d:15:52:da:50:1f:6e:34:5e:ef:c3:0b:3f:4a:f9:8e:ff:f3:
         e3:af:42:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:37:32 2026 by rpki-client