Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
File:                     YcK0WmXBm2irsFFsnMr0VHpcwxI.mft (raw, json)
Hash identifier:          YxtTX/n/W50gbHUzMHBMHF/oHWgcIFFaLdpLp2a+MLM=
Subject key identifier:   BA:2F:A7:5F:F9:BA:D3:72:87:61:88:41:23:FD:90:F1:49:FF:00:11
Authority key identifier: 61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
Certificate issuer:       /CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Certificate serial:       01A14BAB6FE0B3C08DB8830593043DBF8D13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
Manifest number:          13D3
Signing time:             Sat 17 Oct 2026 21:01:28 +0000
Manifest this update:     Sat 17 Oct 2026 21:01:28 +0000
Manifest next update:     Sun 18 Oct 2026 21:01:28 +0000
Files and hashes:         1: TNfS4qjFMyp6FRl_4ldjm_Y_i3Q.roa (hash: V9e1y2xxqghsyNge3bSzEeJvbCQltZtzBhjXNsBZP/k=)
                          2: YcK0WmXBm2irsFFsnMr0VHpcwxI.crl (hash: 7LLMdULuyNkDD9gxReqbDJm63aDjuD2wE4QLM9agaes=)
                          3: aL2Fa93Pq0uyo59pgUgspQyUPKc.roa (hash: Bga4XDZkfRChSZnLWZqmel++JYpGqGLT7JPEKTaVvO0=)
                          4: rxVxvq80s018HousURd0ic36W10.roa (hash: 4vWzh852MFR+K32Ov40708je2OYVViB9fVjK6c0oRMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 21:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4b:ab:6f:e0:b3:c0:8d:b8:83:05:93:04:3d:bf:8d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
        Validity
            Not Before: Oct 17 21:01:28 2026 GMT
            Not After : Oct 18 21:01:28 2026 GMT
        Subject: CN=ba2fa75ff9bad3728761884123fd90f149ff0011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:98:6a:f5:3a:04:b1:6a:0e:6d:04:46:0e:97:
                    19:ac:e8:45:9a:bc:df:29:c9:d2:b4:07:40:71:ed:
                    35:95:2e:53:1d:b6:1e:11:d6:9a:c1:6b:eb:89:65:
                    5e:69:f4:0a:d7:76:e2:f6:b8:1d:23:8d:68:21:b1:
                    39:e8:8c:14:92:c0:58:c4:ce:5f:f2:1f:74:ef:2e:
                    ce:6d:03:f9:51:27:bb:60:67:25:61:c0:32:90:16:
                    d4:53:2e:c6:5a:d7:c1:ca:c5:6b:2e:7c:aa:b0:f3:
                    f5:1a:e4:4b:3d:4e:48:86:b8:95:3f:9f:7a:3d:f0:
                    81:e5:d6:ed:2c:4c:44:ef:08:df:21:f6:92:c1:fb:
                    ab:08:f0:ba:6d:4b:80:06:3f:de:44:c0:12:3e:71:
                    08:a3:65:82:62:e5:99:7d:6d:4f:87:5a:73:7a:bc:
                    3e:f2:0f:d1:88:60:1f:a5:1b:d8:5f:06:a9:f3:2b:
                    98:08:88:6f:31:37:89:40:19:72:19:e0:c9:d8:6a:
                    77:f8:14:26:36:bb:00:82:2d:76:00:c6:2e:d0:e8:
                    14:73:ed:c9:72:3a:fc:37:1b:9d:e3:b4:35:bc:08:
                    fe:ff:6a:ee:4b:1b:62:1f:36:94:74:ce:f2:b5:cf:
                    8c:2d:60:23:f1:1b:06:f3:df:1e:23:05:33:8d:46:
                    2b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2F:A7:5F:F9:BA:D3:72:87:61:88:41:23:FD:90:F1:49:FF:00:11
            X509v3 Authority Key Identifier:
                keyid:61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:97:78:b3:d1:e1:5f:c2:0a:21:58:f0:0d:c9:d0:df:54:65:
         40:d5:b9:cb:36:b9:43:d2:6b:c3:f4:52:09:23:ec:dc:a4:df:
         c4:e7:5c:f1:a6:a0:82:3f:6f:9a:39:54:01:f8:cd:ff:e1:9a:
         1b:30:22:f7:8a:41:79:99:52:d2:5b:13:e6:66:60:67:da:ad:
         14:6d:98:91:4c:08:c0:de:2d:2a:45:09:e9:04:47:e6:b3:1f:
         b2:92:bb:90:7c:3e:44:03:cb:eb:f0:81:3f:e1:3f:20:73:41:
         c5:92:21:d1:91:c4:3e:57:c0:8e:d7:f3:86:43:03:55:12:c2:
         0c:74:b9:45:1b:45:b5:f4:b6:36:8f:c7:e3:b4:bd:78:0f:2d:
         3f:7b:3b:fd:2c:1b:6b:e1:9e:f7:da:61:33:1e:ee:c5:2b:4b:
         ee:f4:53:33:bd:c6:f1:06:ca:b0:26:70:1a:ec:63:bd:d9:4d:
         6e:14:4a:d0:59:50:b0:7d:5f:4c:d6:47:b0:11:e4:8f:e0:15:
         a5:7e:80:a9:05:55:a0:30:9a:27:1c:29:0d:e9:15:ea:99:e9:
         65:7d:47:fb:29:ca:59:02:4b:4a:da:2a:bf:d9:fa:33:d0:3b:
         c6:7a:de:95:6c:5d:45:6b:af:e7:a4:8b:92:6c:9b:de:7a:1e:
         eb:ad:a6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:09:05 2026 by rpki-client