Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
File:                     dYYhYjrGyrj2veVSbnopMdYm_ow.mft (raw, json)
Hash identifier:          hBzvUPM2vU60CmX8YmduayJUvjoZ12Ech39wLB4YmXM=
Subject key identifier:   15:F1:D8:DF:3F:A9:C5:F4:59:F4:F3:B4:D0:97:36:CD:BF:D1:D3:D7
Authority key identifier: 75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
Certificate issuer:       /CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Certificate serial:       01A174398DDAD8E251C2138D4A9D0921B68E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
Manifest number:          1A54
Signing time:             Sun 25 Oct 2026 18:01:31 +0000
Manifest this update:     Sun 25 Oct 2026 18:01:31 +0000
Manifest next update:     Mon 26 Oct 2026 18:01:31 +0000
Files and hashes:         1: EXopuR5ESiK7_JfMXbRvvwemOwM.roa (hash: /csuVRW3pPg52UWTPGC8VigLMZFh8XPz4sQJGV29ruU=)
                          2: dYYhYjrGyrj2veVSbnopMdYm_ow.crl (hash: NbJAuj9XnWln6y5Dl6+PYCiJCT+erXnyeHCNoQeM5l8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:74:39:8d:da:d8:e2:51:c2:13:8d:4a:9d:09:21:b6:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
        Validity
            Not Before: Oct 25 18:01:31 2026 GMT
            Not After : Oct 26 18:01:31 2026 GMT
        Subject: CN=15f1d8df3fa9c5f459f4f3b4d09736cdbfd1d3d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:08:21:0b:6d:f7:05:5e:d3:d2:22:d1:a0:17:
                    f3:0f:08:52:b4:66:17:04:cb:d7:5c:f8:57:e0:c0:
                    2a:1c:ac:2a:85:68:a5:9d:2b:53:63:70:1d:17:1e:
                    e7:2c:51:9b:42:95:3c:89:d8:e2:0e:a3:7c:91:f9:
                    a9:f4:8c:b0:cc:1c:e1:e2:4d:0d:39:2b:c7:a8:3b:
                    4a:8b:03:30:b1:7d:7b:52:b5:53:8c:e5:0d:b8:90:
                    74:5b:d0:42:8f:b0:58:17:b6:0f:5b:4e:35:e6:65:
                    82:71:47:ef:0f:d7:55:44:a3:35:11:b0:b7:e2:4a:
                    24:9a:45:2e:b6:70:fa:b8:e6:08:5b:36:56:55:64:
                    94:fb:d4:d3:7c:ba:d0:28:79:24:7e:99:87:c6:c6:
                    69:d7:35:19:47:a9:7c:ed:2b:7b:0b:c6:30:68:ba:
                    52:ab:62:0e:df:ba:dc:b8:96:3d:fb:43:3f:57:ad:
                    af:47:b0:83:ae:ac:a4:c6:20:bd:68:40:ea:a1:b5:
                    2b:e8:83:ff:9a:77:f5:19:16:c6:3a:e7:ed:34:bd:
                    e1:b5:5e:80:ef:56:2e:82:6c:9e:4d:6a:21:9e:ae:
                    c3:bb:e7:49:3c:6e:1a:a0:1f:5d:8e:73:67:e1:07:
                    5c:ef:46:9a:9d:c3:ef:7a:87:db:88:03:1d:f2:41:
                    87:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F1:D8:DF:3F:A9:C5:F4:59:F4:F3:B4:D0:97:36:CD:BF:D1:D3:D7
            X509v3 Authority Key Identifier:
                keyid:75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:13:ff:3c:20:8f:20:70:11:21:31:6a:06:6c:62:66:f7:aa:
         d1:c2:87:31:27:b1:b6:8f:6b:14:97:9e:18:96:15:3a:76:63:
         04:46:c4:34:d3:18:69:29:c4:4a:c7:b0:39:c5:a8:0a:50:b4:
         e3:7d:27:21:e7:20:fd:15:d4:29:b2:8d:a7:22:eb:e9:41:15:
         5a:05:85:95:4b:d7:94:b8:e5:74:59:e1:00:8f:84:82:fd:8d:
         9a:15:18:3d:d7:c3:0a:bb:e2:89:36:5a:11:ad:76:ac:9e:02:
         7b:94:24:e1:02:d5:cb:3d:fe:ce:ec:0a:cd:1a:14:5b:1a:a4:
         b5:7a:a1:00:c1:3b:3e:c4:1c:de:f1:3d:68:c6:99:e2:2c:e2:
         da:8d:8c:b4:7c:89:39:35:08:6a:7c:c1:18:38:95:7e:6e:f8:
         32:02:9b:35:b3:8b:ad:93:57:97:b4:94:96:21:4f:0a:be:8b:
         d9:2e:70:ed:49:47:1b:88:cb:db:6b:be:1e:d9:3d:23:00:90:
         a9:e3:d8:71:f8:69:94:5f:96:a2:29:e0:05:c0:22:6f:c2:f9:
         4a:96:3a:20:29:a7:14:6f:e9:c3:8a:29:9e:42:2e:b3:fc:bf:
         da:e3:46:f0:79:00:ba:3c:35:8e:64:6b:35:54:d2:5d:1e:b7:
         ea:14:a5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:59 2026 by rpki-client