Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.mft
File:                     YYYvsG8cKTBFdgzpj10gAuNd6zg.mft (raw, json)
Hash identifier:          yU8Toa/acqT+FQ/4dOcfhIyLA70+LXteytdAQMGwJmQ=
Subject key identifier:   73:3A:66:82:53:76:05:5B:08:E3:82:A7:05:A8:67:41:3C:E9:34:8F
Authority key identifier: 61:86:2F:B0:6F:1C:29:30:45:76:0C:E9:8F:5D:20:02:E3:5D:EB:38
Certificate issuer:       /CN=61862fb06f1c293045760ce98f5d2002e35deb38
Certificate serial:       01A17B4D819764018D5E7F3A18415F5A8399
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYYvsG8cKTBFdgzpj10gAuNd6zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.mft
Manifest number:          0183
Signing time:             Tue 27 Oct 2026 03:00:39 +0000
Manifest this update:     Tue 27 Oct 2026 03:00:39 +0000
Manifest next update:     Wed 28 Oct 2026 03:00:39 +0000
Files and hashes:         1: YYYvsG8cKTBFdgzpj10gAuNd6zg.crl (hash: s05ipdn6vbdgX9GQ3sBxqVBg9mfWG6htiIrDQ7LwY2o=)
                          2: qHCpijfdc8k5y0Zn9AxU7VJ5dr4.roa (hash: 7b7QR3OS+ILGRcJ7amN0EllvwZEFj+J1VkU+kfBrkF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYYvsG8cKTBFdgzpj10gAuNd6zg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 03:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:4d:81:97:64:01:8d:5e:7f:3a:18:41:5f:5a:83:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61862fb06f1c293045760ce98f5d2002e35deb38
        Validity
            Not Before: Oct 27 03:00:39 2026 GMT
            Not After : Oct 28 03:00:39 2026 GMT
        Subject: CN=733a66825376055b08e382a705a867413ce9348f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:44:78:08:4a:1a:34:59:52:0f:7c:57:d8:ae:
                    b3:bd:a6:7d:44:e6:f3:91:9d:eb:ee:a7:d0:5e:62:
                    fa:31:88:4c:3e:93:f5:b7:e2:b5:81:18:be:76:c0:
                    a1:d7:9b:39:07:a1:3a:99:7b:d8:d8:61:d1:82:56:
                    3e:48:0d:a8:c9:2a:e5:40:b6:99:5a:12:af:ae:21:
                    c1:47:e9:a6:5c:e0:0f:45:7e:3e:da:7b:45:60:5b:
                    88:85:a6:94:df:1f:02:e5:55:63:a8:22:b1:75:e4:
                    ef:a0:2f:f5:23:65:71:b3:3e:51:9d:85:c6:0d:3f:
                    97:29:fc:57:71:17:62:16:6d:c1:da:85:a2:79:ed:
                    f0:7a:cf:93:f0:06:a7:30:34:5d:59:10:6d:bf:ed:
                    44:27:e0:99:25:54:b0:07:38:7b:1c:b0:96:65:5b:
                    31:b3:fe:28:4d:03:1a:6b:1c:2a:69:d4:51:bc:9d:
                    7a:f9:c6:37:0d:77:90:47:de:25:b4:ed:1b:49:cd:
                    ea:c7:2c:27:03:4e:b3:b6:80:28:1e:7e:c4:c8:ed:
                    f2:6e:02:84:3c:df:b2:de:6b:80:36:b4:08:de:94:
                    c9:58:a0:38:dc:97:de:bb:49:d5:1f:a8:1c:34:9f:
                    e0:d7:f2:32:0a:1d:be:c6:53:74:43:94:9a:ba:56:
                    58:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3A:66:82:53:76:05:5B:08:E3:82:A7:05:A8:67:41:3C:E9:34:8F
            X509v3 Authority Key Identifier:
                keyid:61:86:2F:B0:6F:1C:29:30:45:76:0C:E9:8F:5D:20:02:E3:5D:EB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYYvsG8cKTBFdgzpj10gAuNd6zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d9:49:88:f2:04:ec:af:6c:0f:c0:9d:02:b7:36:76:77:b9:
         b9:57:8a:8b:68:b9:6e:1c:46:7a:b0:a3:79:14:77:33:7e:95:
         87:85:f2:ea:c4:42:a1:eb:a8:cd:d3:ab:34:81:4d:63:07:c6:
         52:ac:83:f3:82:19:4c:4e:bc:fe:cc:de:d7:e2:fd:88:e5:e7:
         30:23:7a:90:a4:58:84:05:cd:f0:7d:be:cd:05:7e:5d:a0:e8:
         4e:6e:a0:90:9c:04:0f:c9:18:ef:46:00:3b:bc:86:dd:7e:40:
         26:fc:81:64:39:b8:13:cf:32:30:d9:fa:65:04:d7:39:41:1f:
         c2:3b:50:df:84:f0:db:5e:b6:75:ea:23:a6:3d:4f:88:52:1b:
         ff:3b:84:7d:f0:0b:6e:26:2c:e3:a7:8c:37:ac:3a:37:8d:d8:
         df:ee:ce:9b:9e:9b:8e:a6:d6:f6:40:07:fb:eb:fc:e2:9b:55:
         ce:df:10:3d:6a:ec:07:79:ae:f0:10:a8:d3:9f:0f:d8:0c:36:
         24:bb:fa:e7:94:5f:68:13:51:f3:16:99:05:10:1d:58:07:7d:
         ee:c2:d4:0d:d7:38:0d:cd:c1:ac:3d:3e:f7:29:8b:83:df:a8:
         60:c1:67:5b:71:da:9e:4b:66:90:18:bc:51:7c:85:01:7d:4f:
         ef:46:5e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:20:25 2026 by rpki-client