Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
File:                     YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft (raw, json)
Hash identifier:          kah0p2QQac4j2BbRLXpKQLppTpYj2+8CNtiAqtBzsxc=
Subject key identifier:   48:C7:26:CB:65:5B:56:21:5D:BF:E6:6A:5F:A0:43:7F:B5:41:1E:52
Authority key identifier: 62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
Certificate issuer:       /CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Certificate serial:       01A19C904729F9FDF47BF89290A5ACFBC122
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
Manifest number:          1AF4
Signing time:             Mon 02 Nov 2026 14:01:03 +0000
Manifest this update:     Mon 02 Nov 2026 14:01:03 +0000
Manifest next update:     Tue 03 Nov 2026 14:01:03 +0000
Files and hashes:         1: YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl (hash: RqbFZV61wVWMA198Gr/F1KkURfn/wRQWJFgSam9clTc=)
                          2: rbSihGXODQuXmGdRnxTGjpysN_E.roa (hash: kNylbr0jppPNSO+4QDcJI79pqrUPxp86qMzkIb3LnQY=)
                          3: xSLEYc0lt1omC0_5S_IEJQG-sFo.asa (hash: XvuqcAAROcucGiTTqNKqYAdleeXb8tap+MKCtPl4Y5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Nov 2026 14:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:9c:90:47:29:f9:fd:f4:7b:f8:92:90:a5:ac:fb:c1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6264318c1aaa7ca0603155a883d43926ef97e87c
        Validity
            Not Before: Nov  2 14:01:03 2026 GMT
            Not After : Nov  3 14:01:03 2026 GMT
        Subject: CN=48c726cb655b56215dbfe66a5fa0437fb5411e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9d:a7:eb:5e:38:00:a2:e9:ab:c0:dd:5d:08:
                    1e:fe:7b:dd:7e:e3:93:5b:3b:c1:a8:e6:21:67:a8:
                    1e:bd:1d:7d:62:56:f5:19:57:a1:8a:4a:51:7f:b0:
                    32:ef:c0:9f:db:23:18:b4:e1:6c:85:83:fd:bc:5b:
                    e7:7d:27:ba:56:79:58:83:5a:36:db:a6:fb:7d:f8:
                    b1:eb:40:47:bc:23:0b:92:26:79:7d:bc:85:55:5a:
                    8c:d8:df:ee:2f:a7:c7:42:2d:fb:dc:64:e6:07:58:
                    82:23:eb:fb:59:50:76:da:7a:15:89:96:f9:c1:d3:
                    0d:cb:2e:8e:7b:74:b0:12:a3:f1:c5:b8:3f:81:b3:
                    64:9c:06:05:6e:ac:63:60:e0:55:f5:52:55:24:db:
                    ec:1f:04:cf:bb:36:9d:b1:45:f8:04:df:8c:c7:b4:
                    7b:4a:3e:c2:4e:dc:93:14:fa:e4:45:1c:91:1d:85:
                    7a:28:5b:e3:f2:5e:c5:09:8b:bf:22:4b:b0:bc:db:
                    68:a7:95:3c:83:46:bc:14:7d:0a:c9:f0:0c:da:96:
                    5f:83:4c:d5:92:fc:d2:82:b6:17:e0:13:01:96:d7:
                    50:a5:98:29:9b:e9:52:9d:ab:92:17:fd:0e:b2:ab:
                    c0:b4:22:34:c4:ba:fd:b5:23:10:02:02:3a:44:47:
                    c0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C7:26:CB:65:5B:56:21:5D:BF:E6:6A:5F:A0:43:7F:B5:41:1E:52
            X509v3 Authority Key Identifier:
                keyid:62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:6b:16:f8:75:c9:98:a9:6c:54:87:62:26:f5:0e:36:c2:d3:
         6b:f2:81:68:d1:95:a9:49:ec:90:cf:32:7e:bf:78:28:d1:a1:
         a6:cb:90:f6:13:5d:69:f0:69:f4:8b:d2:9c:e5:1a:79:33:c9:
         c8:a4:6b:7c:71:e3:89:73:12:0f:4c:fb:12:7c:24:10:db:47:
         75:be:93:d4:0c:b5:0f:ff:84:74:c4:86:95:8b:dc:67:70:8c:
         ce:05:26:b2:b0:16:e9:4e:b1:6f:3d:7d:b5:18:e3:8f:08:8a:
         99:34:17:7b:51:08:97:40:78:a5:0b:25:51:02:07:c7:24:2f:
         ec:74:b9:cd:ce:bf:3f:a1:63:f5:1d:d9:7a:03:d8:77:2f:06:
         8b:dc:d0:ef:9d:21:12:74:47:b0:77:b3:18:b8:0e:2f:5f:03:
         cc:10:50:26:0f:e1:4c:01:e2:c9:83:a4:51:d6:f4:f9:2d:fc:
         8b:cd:2f:c9:29:7a:54:7b:1d:52:54:68:53:78:db:5d:f7:cf:
         8f:b3:ca:9d:21:43:80:41:9a:58:37:c9:95:79:d1:a2:a4:4d:
         c9:84:f1:68:0c:07:f6:12:c8:6e:d2:84:40:10:be:82:d4:6a:
         00:64:8d:79:cc:4e:70:36:0d:80:60:66:4c:39:3c:f8:62:ad:
         63:9c:76:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 01:31:47 2026 by rpki-client