Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
File:                     YdOLN5gKDfrpz5osW1at6X-vUC4.mft (raw, json)
Hash identifier:          o7EI7t6uLnb7SqA3tM+3C0rJILrR8NXDdfJTlUYHCGY=
Subject key identifier:   DB:98:5A:D6:FD:EE:E0:58:14:D4:41:FD:18:EA:7F:3D:EF:02:20:45
Authority key identifier: 61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
Certificate issuer:       /CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Certificate serial:       01A171A5B0B3BE6940B59288B73AC898FD57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
Manifest number:          0F4A
Signing time:             Sun 25 Oct 2026 06:00:46 +0000
Manifest this update:     Sun 25 Oct 2026 06:00:46 +0000
Manifest next update:     Mon 26 Oct 2026 06:00:46 +0000
Files and hashes:         1: YdOLN5gKDfrpz5osW1at6X-vUC4.crl (hash: fGmZ3pnHNX7CJpa7mqU5NqbOz5XUxUcJqvfluJTg/k8=)
                          2: kGLxA9onzrf8JLssDr-KbBw0Iso.roa (hash: iCYCJqbAYcmF46KnTkB1atw07n5B8BjwCirxzmxkzlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 06:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:71:a5:b0:b3:be:69:40:b5:92:88:b7:3a:c8:98:fd:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
        Validity
            Not Before: Oct 25 06:00:46 2026 GMT
            Not After : Oct 26 06:00:46 2026 GMT
        Subject: CN=db985ad6fdeee05814d441fd18ea7f3def022045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bd:17:df:47:ef:67:96:48:d7:58:c8:bd:51:
                    18:67:34:e4:6d:5e:82:2d:ea:d1:7b:45:97:6e:c0:
                    cb:d5:60:d7:03:f1:59:cf:c5:7e:57:c0:db:fd:06:
                    cf:90:85:85:91:85:91:d8:ed:7c:14:67:5b:1e:17:
                    f6:14:d1:a6:fe:c0:15:17:fc:dc:43:e5:0b:40:92:
                    e3:a7:bb:21:d7:de:59:c8:1f:82:48:fc:71:9d:0f:
                    6a:7e:57:4f:10:6c:bc:76:89:fa:91:bc:5b:af:0a:
                    74:55:f1:8d:d6:8b:04:2e:23:e0:18:fb:69:d0:e0:
                    d0:9d:29:d0:51:f3:42:f7:e3:13:67:45:6f:8d:1c:
                    1b:fb:15:e0:ed:e9:f6:da:4c:38:a7:88:56:d2:7a:
                    1b:d0:79:ae:8f:95:ff:7d:79:28:39:82:03:35:ff:
                    5e:03:bc:97:9f:2f:47:b0:b4:ba:6a:44:8a:47:46:
                    cc:9e:c7:ca:80:47:5b:81:e8:18:d8:7a:bd:61:a1:
                    19:0f:1e:b7:b1:ce:dd:45:11:17:59:19:05:01:4a:
                    d7:5f:14:5c:00:be:54:e2:3c:ac:56:eb:fa:a2:6d:
                    83:4a:12:95:84:bf:45:1c:85:a3:e3:84:ea:75:31:
                    8c:84:ac:a7:f1:e1:0f:6f:f8:ac:22:0d:f9:fd:1d:
                    b2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:98:5A:D6:FD:EE:E0:58:14:D4:41:FD:18:EA:7F:3D:EF:02:20:45
            X509v3 Authority Key Identifier:
                keyid:61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:1c:b9:43:ca:55:1a:a1:58:68:31:af:26:06:0b:82:49:69:
         f4:3c:8e:17:8a:35:c7:1d:9a:4c:41:95:1f:ad:72:b9:4c:0c:
         08:9f:7c:b7:ec:64:d5:bc:4c:da:d7:62:fa:e7:b4:57:eb:d4:
         37:05:5f:08:a8:fc:32:4f:f2:54:87:0c:71:41:44:02:ab:77:
         8f:27:4c:1b:eb:8e:db:b7:10:14:79:4b:2c:ac:a7:19:9b:3e:
         28:4f:09:5f:52:26:ba:28:9d:be:b2:a2:cd:cb:b0:48:a5:c9:
         b0:8e:de:68:ce:5b:23:aa:59:94:63:4e:5f:9e:b9:8b:9d:82:
         89:b1:6d:33:3d:d9:46:91:7a:cc:2a:f8:3a:2c:4e:47:d9:cb:
         59:dd:97:2a:1d:71:4f:ed:65:96:a1:88:3f:a9:97:94:15:3e:
         01:cf:24:95:48:2e:fa:48:8c:28:a7:1e:7c:26:67:38:7b:64:
         c9:33:32:02:ab:64:de:ef:d2:b2:23:e2:25:e4:d6:d3:89:e8:
         fc:34:f1:17:7e:1d:a3:6e:3f:b1:52:b2:ac:de:6f:3d:53:fa:
         6f:bc:15:ba:55:22:c4:5c:a7:fc:ca:72:96:2f:c9:db:55:60:
         d5:9f:60:61:bd:61:2e:cc:a2:2a:58:b7:ac:a0:6c:a7:76:47:
         dc:fc:a1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:52:03 2026 by rpki-client