Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File:                     Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier:          3C6Dbgdbi9a5ewmAsHRyHaX05Na+ObagRQdSpWU+0N0=
Subject key identifier:   98:3D:EF:A6:24:EF:27:58:21:2B:DF:B6:B4:48:BC:F5:A6:72:4E:5C
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer:       /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial:       01A001DDA589A46AEA987AF88E2619D39496
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number:          0B5E
Signing time:             Fri 14 Aug 2026 20:01:38 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:38 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:38 +0000
Files and hashes:         1: AE7tKoXDyuuPCaDaUfMyBa4xWdM.roa (hash: xVpRKPTRXjz76O68/XRyRJECKQ9lTBxMBzIgyh25rxU=)
                          2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: ssLyvLRSS+aCmL3NGhA5jEvtI9EisCXKlsBuG9NylKo=)
                          3: rNinx4CuZpXEUOOVr_5qkOxUOro.roa (hash: c7dKHMaq9EPZZdDOaPAKKGKEDbpiSPHR+ZX8mfzSM64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 20:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:a5:89:a4:6a:ea:98:7a:f8:8e:26:19:d3:94:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
        Validity
            Not Before: Aug 14 20:01:38 2026 GMT
            Not After : Aug 15 20:01:38 2026 GMT
        Subject: CN=983defa624ef2758212bdfb6b448bcf5a6724e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c3:19:18:77:2a:ca:2c:07:e1:b3:02:ba:84:
                    d5:71:8d:fb:7d:a5:63:bc:70:e3:17:c5:7d:ce:7c:
                    ca:8a:00:9e:34:c5:f3:03:4b:fa:4f:e9:27:db:f5:
                    48:5a:21:23:e2:16:c0:ce:e2:2e:34:0e:ed:bd:f0:
                    6b:ca:9b:e6:4f:b5:63:32:ec:2c:bb:4e:dc:3c:54:
                    c0:09:17:69:58:ec:91:aa:0b:d8:5a:51:b3:77:66:
                    52:d4:76:45:c8:d6:1c:85:c0:51:70:92:44:7a:4a:
                    59:12:06:08:e6:21:e7:10:82:1f:97:18:8c:34:f8:
                    dc:ab:a3:fb:16:b0:e9:26:50:32:37:14:be:3b:09:
                    09:b9:d4:9d:53:4e:83:ef:cc:5a:ea:3f:2a:0c:fa:
                    8c:2a:4b:0d:a9:90:1c:f2:e3:a6:c8:fc:3a:b5:2f:
                    9c:6d:8e:86:f6:a8:2a:ec:0c:9a:1c:be:86:88:f9:
                    6c:0f:d8:a1:e8:9f:cf:35:e6:3c:a2:c6:77:2f:61:
                    09:5b:86:14:23:b2:41:7e:38:d2:a8:30:2c:de:e4:
                    51:93:ab:c0:be:92:40:81:48:fc:fc:9a:89:c5:f0:
                    e9:6f:2b:41:48:95:5b:0b:52:9b:33:cc:4b:c5:24:
                    2e:7e:e2:f5:f6:24:ac:80:e0:2e:95:be:d2:c8:a3:
                    74:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3D:EF:A6:24:EF:27:58:21:2B:DF:B6:B4:48:BC:F5:A6:72:4E:5C
            X509v3 Authority Key Identifier:
                keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:60:27:fd:cb:c8:c1:bb:c1:14:a4:36:17:eb:50:6c:70:81:
         e7:0d:89:71:ba:4d:53:19:bd:9a:57:2f:c6:6d:f3:e7:ce:bb:
         59:df:d5:60:f2:9b:ae:d6:6d:8a:65:43:b5:dc:ca:00:ed:ac:
         51:58:34:c9:5e:80:7f:d8:a5:e0:4f:91:35:22:60:67:8e:41:
         af:65:37:a5:0a:d3:fa:bd:66:f8:76:1e:d8:9f:36:55:f8:ff:
         7f:95:f5:e2:f2:e6:b0:80:4d:ac:d1:0c:f0:bb:56:06:3a:7c:
         22:f4:46:37:9d:3c:c3:78:46:fd:ec:89:73:f1:29:e4:c3:12:
         a2:78:61:65:55:6d:15:82:51:ab:06:27:7f:98:8b:83:bf:dd:
         cf:b4:e5:6b:53:52:85:4c:d1:41:73:dd:59:3b:b3:d5:19:f2:
         fa:26:c9:b4:fd:2c:fc:42:72:c1:22:a7:eb:54:d4:97:d5:b2:
         09:d7:5a:5c:1e:d8:18:43:03:b3:af:66:e2:15:09:b0:47:5e:
         01:5b:c0:8e:69:b4:e6:d0:45:3f:22:df:93:20:16:96:45:59:
         9e:9e:bb:6b:65:48:d3:5e:55:d9:3d:3e:ea:f7:7d:c5:bf:ae:
         76:fa:90:4d:02:97:56:26:4a:c5:01:ab:59:bc:bb:c9:be:6f:
         23:98:68:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:23:00 2026 by rpki-client