Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
File:                     yjevCVET2t1bxRveu_CtNNbu22Q.mft (raw, json)
Hash identifier:          LFc1cHFjFmi2XTr81KIGFg8FCFE3gBd4ppzPZ0iOOX4=
Subject key identifier:   5F:77:0A:87:D9:B6:56:3A:37:4A:F7:78:EC:87:E1:34:73:9C:6E:81
Authority key identifier: CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64
Certificate issuer:       /CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
Certificate serial:       01A107DCEAEBB350E8118C05E78ECB5EFEA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
Manifest number:          1699
Signing time:             Sun 04 Oct 2026 17:01:20 +0000
Manifest this update:     Sun 04 Oct 2026 17:01:20 +0000
Manifest next update:     Mon 05 Oct 2026 17:01:20 +0000
Files and hashes:         1: F44bKH9OXVnCIoILdhGNkCfhXGk.roa (hash: tP7jtATuTlTRwvEpnqA6Mbeq855NS1jjX+L/+eC+Juk=)
                          2: yjevCVET2t1bxRveu_CtNNbu22Q.crl (hash: a01cjjAzY1PZ3yaQGZjVW045TO+Ei52JDphNzERIdKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:dc:ea:eb:b3:50:e8:11:8c:05:e7:8e:cb:5e:fe:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
        Validity
            Not Before: Oct  4 17:01:20 2026 GMT
            Not After : Oct  5 17:01:20 2026 GMT
        Subject: CN=5f770a87d9b6563a374af778ec87e134739c6e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ce:3a:e2:56:f8:46:29:36:93:5d:8a:1a:f5:
                    3f:91:78:64:85:a7:61:60:57:25:31:a3:8f:27:27:
                    c1:7f:54:1f:ff:b0:84:f9:65:bc:d7:c2:1c:07:fa:
                    0c:61:02:c0:66:79:3f:6b:06:68:cd:c6:6f:0a:f9:
                    e3:35:c0:ce:9f:44:fc:22:d1:14:a6:89:1e:93:58:
                    36:81:cc:39:6c:bc:93:c9:dd:20:67:d0:98:2b:b6:
                    5e:e7:ef:41:7c:0f:90:ce:53:e8:67:99:1b:1c:b8:
                    f6:bc:64:fb:0f:8a:7e:8e:6c:92:7c:db:15:bd:70:
                    7a:8d:60:2d:93:27:54:d1:7f:00:24:72:81:43:04:
                    c8:66:b1:7c:58:41:9b:5d:42:6b:dd:3a:38:c8:32:
                    45:6c:5f:49:6b:f9:05:75:84:17:e3:b6:10:e1:8c:
                    e5:61:4a:b4:d5:32:f6:c9:ec:1b:86:af:28:02:0a:
                    d9:a2:66:26:b4:04:bf:d2:de:cf:80:99:dd:5f:e9:
                    a9:05:cd:6c:fb:2a:e0:a0:a8:a4:ea:e6:f8:20:89:
                    8c:bd:c0:be:68:15:6c:98:66:f8:bb:dc:69:90:ea:
                    5f:fe:37:0c:51:bf:28:79:e7:fa:63:15:ca:9b:5a:
                    d5:a9:91:93:a4:6b:87:d9:86:4e:1e:62:4c:64:34:
                    ca:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:77:0A:87:D9:B6:56:3A:37:4A:F7:78:EC:87:E1:34:73:9C:6E:81
            X509v3 Authority Key Identifier:
                keyid:CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:a9:fa:1e:21:f9:55:0c:88:e6:9c:2b:bd:44:f9:0d:d8:bb:
         9a:e9:6b:aa:82:34:4d:45:a2:56:22:42:49:0a:ce:a3:a4:8d:
         cc:e0:98:79:70:c1:32:29:19:a4:25:cb:ad:40:75:d1:63:31:
         d7:ef:f4:32:e6:91:3d:c4:87:39:52:e5:e4:da:dd:e9:8c:cf:
         80:bc:ca:ee:0d:70:97:c7:6e:bd:50:ed:ec:51:f8:c0:b9:c4:
         10:01:bb:4b:11:b2:de:09:dd:2d:ae:b7:95:80:e3:a3:4c:14:
         79:97:e2:c5:91:04:1a:d3:b3:b3:65:f2:43:e5:cb:83:ef:08:
         3f:56:d2:d3:d0:c4:8a:5f:74:1d:1d:2e:75:99:d5:cc:02:da:
         57:15:e1:f9:4f:4c:db:f5:a8:27:9a:d8:5b:b2:70:82:7d:32:
         e6:65:a9:16:ca:36:d6:6c:2e:15:28:b1:42:c6:d2:76:f4:9b:
         38:08:05:cc:e3:cd:99:76:fe:c8:c4:c7:5a:98:e5:47:a6:71:
         61:aa:0f:9b:6b:be:13:f3:7b:d4:b8:82:a9:18:92:da:a7:87:
         68:41:96:b5:17:89:58:b9:31:83:05:38:0e:26:d7:3c:03:e1:
         0e:96:f1:78:46:fb:a9:ec:f0:72:58:c1:72:d4:93:81:3e:82:
         c5:7b:80:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:53:50 2026 by rpki-client