Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
File:                     yQ7dEObZBiIVv9ZORbO_imuZY3k.mft (raw, json)
Hash identifier:          EU3qginua4S5CkZ2d4vzFckkJNqoY9Rst9/h5NppFMA=
Subject key identifier:   99:0D:0F:0D:0D:22:01:13:F9:A0:14:85:AE:EE:EA:76:C6:F4:0E:40
Authority key identifier: C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79
Certificate issuer:       /CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
Certificate serial:       01A116E160E54482849B24B5FE80941BB71D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
Manifest number:          08E4
Signing time:             Wed 07 Oct 2026 15:00:31 +0000
Manifest this update:     Wed 07 Oct 2026 15:00:31 +0000
Manifest next update:     Thu 08 Oct 2026 15:00:31 +0000
Files and hashes:         1: 97B8Hc4bCQZgRuJkPCMl4qPb1Ok.roa (hash: xJ7Id6kjvXsULsQ/zceu4XIQnNvHcYudEa21JYWOH88=)
                          2: yQ7dEObZBiIVv9ZORbO_imuZY3k.crl (hash: TVS8koJdkNc/0t034zxbjOD/BoaHV7pnr0mgR7dcb/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 13:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:16:e1:60:e5:44:82:84:9b:24:b5:fe:80:94:1b:b7:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
        Validity
            Not Before: Oct  7 15:00:31 2026 GMT
            Not After : Oct  8 15:00:31 2026 GMT
        Subject: CN=990d0f0d0d220113f9a01485aeeeea76c6f40e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:10:a6:ab:db:cd:cf:fa:dd:6c:63:43:1b:17:
                    e7:1e:d1:7a:2e:cc:0b:91:36:73:2d:a5:8a:a7:e4:
                    80:7a:cf:cf:68:ea:27:30:93:58:fc:9e:c3:2f:11:
                    78:ee:2e:fc:a5:0e:8e:20:c1:25:d3:53:7f:bc:44:
                    0a:6b:36:10:c0:8d:85:d9:a5:2f:85:7d:6e:c2:61:
                    b9:ff:98:f3:da:d6:66:f2:36:42:49:47:e0:d7:20:
                    48:a9:2d:98:d4:52:4b:38:51:dd:5d:10:5f:03:e1:
                    db:28:50:b0:5d:16:71:e0:96:4b:df:d2:6a:14:d6:
                    d2:d7:f6:5e:ce:cc:87:7d:7d:44:30:f0:9c:a5:2c:
                    d2:17:f3:9f:f0:33:64:66:fc:73:cb:a0:01:ff:a9:
                    08:ba:29:96:8f:6e:b2:ae:d9:9d:4d:56:37:04:5e:
                    00:5f:b0:90:a8:76:e5:62:4c:0f:af:0f:69:6b:97:
                    8d:5a:d5:e8:6a:63:51:25:0f:46:73:bb:dd:96:4e:
                    4a:e6:aa:95:3d:a4:42:9e:5d:2a:92:a3:48:b6:ee:
                    e7:19:ce:d4:e0:65:50:1f:64:9d:c3:a6:e5:79:0e:
                    1a:6b:ba:96:ad:a6:14:50:92:35:35:de:c1:18:f2:
                    ec:a6:4e:80:3d:e1:d6:0f:e8:40:a3:c1:53:7a:74:
                    37:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0D:0F:0D:0D:22:01:13:F9:A0:14:85:AE:EE:EA:76:C6:F4:0E:40
            X509v3 Authority Key Identifier:
                keyid:C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c2:29:40:03:80:16:6d:c0:70:0e:e2:22:76:77:a8:ba:17:
         25:4c:fe:97:70:aa:4b:96:85:6f:5d:3c:f8:fb:51:25:57:02:
         92:a3:53:e9:75:f2:e6:6a:a7:e2:a0:e5:63:22:72:d4:55:d5:
         0b:66:93:37:9b:e0:f8:a2:44:56:f9:02:c3:21:c1:20:01:e0:
         37:58:ba:e2:93:82:79:25:ba:a7:0b:97:94:d4:1d:90:c3:86:
         ec:29:e2:96:99:30:ee:d7:97:3e:23:77:48:42:47:35:8c:0e:
         91:c6:32:bd:b5:c5:aa:e4:01:0b:31:b6:2b:b5:6b:63:de:0d:
         9a:b3:98:a4:ac:8c:60:47:7c:20:4a:59:ca:5d:5f:23:24:df:
         b7:d1:6a:e7:b2:f0:1a:11:a2:9c:1a:19:73:12:9a:a3:97:b6:
         78:45:39:fd:23:43:07:b2:e5:ff:34:36:01:33:90:2d:61:c3:
         6f:62:5d:d3:32:ce:96:1d:dc:d0:95:82:71:69:d5:7d:d3:84:
         a5:09:39:5d:39:84:27:e4:fc:3a:05:db:f3:d2:75:1f:56:39:
         d2:9e:ba:8d:f8:ec:38:3a:79:85:1b:f6:e3:51:11:2c:92:c9:
         55:7a:7c:90:1c:20:19:e1:ec:8f:69:31:ec:d6:18:41:13:c3:
         a4:18:c1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:23:14 2026 by rpki-client