Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
File:                     bYAjo4F9UCFR-9BIRKfDw17pm0M.mft (raw, json)
Hash identifier:          bCIX++Cpm2zZdAgFl5wXcjwq+nX/ijauzENXM0snjGI=
Subject key identifier:   4F:BF:D2:C3:D7:F1:7B:D1:47:B5:66:73:EB:1B:9A:0A:EA:62:12:76
Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
Certificate issuer:       /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Certificate serial:       01A16D23DFEE45D5C3F7B8DB498C94BEDBE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
Manifest number:          1620
Signing time:             Sat 24 Oct 2026 09:00:29 +0000
Manifest this update:     Sat 24 Oct 2026 09:00:29 +0000
Manifest next update:     Sun 25 Oct 2026 09:00:29 +0000
Files and hashes:         1: BihTx85T_ESHb2zFBIoBZsH3gQg.roa (hash: /c4yJ2wjcspqKTfyrW9dw2FpqsUdzBSrrjQh7X8q2sc=)
                          2: WY-lTtSR4lgUnNhXebRStC-pRhw.roa (hash: /NGhP1km+JC9FCjg02M4Qh5LmgoXvpkQB9VUdDyzAsA=)
                          3: bYAjo4F9UCFR-9BIRKfDw17pm0M.crl (hash: vV/uLXwIsFWW/7mrcyliBCifnqF0agadvpIYW581GMk=)
                          4: hwijRhZ95zu2fzBu0boOesOms6U.roa (hash: HDiWzBkayEcGgyJWBbNXaqDrPFIhI/bMMXg8al08Sh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 05:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6d:23:df:ee:45:d5:c3:f7:b8:db:49:8c:94:be:db:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
        Validity
            Not Before: Oct 24 09:00:29 2026 GMT
            Not After : Oct 25 09:00:29 2026 GMT
        Subject: CN=4fbfd2c3d7f17bd147b56673eb1b9a0aea621276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bf:5f:3e:5e:91:37:26:c6:9a:b3:e5:81:22:
                    c9:6e:99:25:80:cb:de:fb:80:0d:80:a1:9c:86:9c:
                    9f:36:ec:2d:ab:34:90:43:ce:bf:a7:d2:47:4e:b2:
                    30:13:1a:ca:33:15:c4:da:0a:cc:a4:33:b6:0d:2a:
                    c1:95:43:01:52:b8:10:f3:bb:03:1a:df:53:df:5c:
                    ed:45:f2:37:df:da:e3:1b:24:30:94:47:07:0f:98:
                    d6:af:74:55:25:0f:55:4a:66:74:ec:33:76:67:fc:
                    58:cd:80:07:4c:dd:2d:ca:eb:75:8e:7f:8d:74:e1:
                    19:48:0f:77:60:d2:55:86:86:8b:a0:e9:76:3f:1c:
                    b4:1f:9a:38:7e:48:62:f0:2d:b6:07:b5:87:ef:cf:
                    d8:68:98:78:35:db:eb:12:83:4b:44:37:75:c7:03:
                    2b:56:39:70:dd:45:53:bb:54:e9:1e:ac:67:cc:6d:
                    b1:04:aa:54:6e:bc:cc:a6:72:3e:17:9e:ef:46:72:
                    eb:bf:a7:78:d3:06:a9:f0:8c:e0:b8:32:36:23:e9:
                    b3:50:47:a1:9b:19:40:dd:a1:2a:c1:47:8f:4b:05:
                    83:71:9c:28:a3:88:b8:43:7a:2f:8d:35:e3:b0:19:
                    0f:3a:42:d3:2f:b3:6f:eb:0e:60:9a:0c:f0:8f:04:
                    8e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BF:D2:C3:D7:F1:7B:D1:47:B5:66:73:EB:1B:9A:0A:EA:62:12:76
            X509v3 Authority Key Identifier:
                keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ec:0b:3a:80:ea:c1:8d:52:49:68:ac:02:1b:9b:80:93:cd:
         4e:38:9d:9d:34:23:dc:f4:df:a8:37:49:20:5b:e2:96:ff:b7:
         55:69:07:75:b1:72:5b:89:df:8f:96:79:40:0b:ea:ac:62:48:
         65:a4:dc:ae:e2:b3:15:e7:eb:ea:b9:86:d8:26:b4:bc:44:99:
         08:79:94:e3:dc:a9:03:5b:00:2c:da:89:b1:83:34:b9:03:c5:
         a1:65:a4:00:e2:28:03:1f:cb:64:45:42:82:22:51:f3:4c:16:
         a4:42:c7:6a:cb:b2:ba:3f:9a:30:85:c5:65:ab:f7:8f:29:70:
         1f:c6:0e:c7:82:86:b1:8b:54:25:99:09:a2:5f:76:6b:85:97:
         39:2c:56:40:78:ae:17:3c:d2:4d:cf:f6:d2:e9:4a:48:cd:37:
         5c:7d:ef:3e:54:c7:54:5c:2e:c5:4d:2d:a1:4f:f3:ad:86:48:
         9b:7f:d3:98:57:d8:5a:a3:50:fe:eb:88:63:15:f5:47:a8:06:
         28:d5:e3:4e:b8:b9:92:09:32:34:7a:6a:7a:47:26:bc:19:3d:
         45:f1:73:23:09:55:31:4e:32:5f:40:06:62:67:5c:9d:d9:36:
         93:82:4b:b9:f0:0e:71:20:0b:76:a6:b9:82:99:91:be:f6:7c:
         b9:5a:06:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 13:32:20 2026 by rpki-client