Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File:                     yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier:          b/FN2GyWMsqV/P9SymjpryK4a6rl/R0FO21Ja8KcpY8=
Subject key identifier:   3B:3C:82:F6:FE:A1:52:64:44:54:00:72:08:48:30:0B:9D:70:FD:1D
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer:       /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial:       01A1268BB75580FD3FB1465052F46E199E57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number:          1348
Signing time:             Sat 10 Oct 2026 16:00:52 +0000
Manifest this update:     Sat 10 Oct 2026 16:00:52 +0000
Manifest next update:     Sun 11 Oct 2026 16:00:52 +0000
Files and hashes:         1: 7xGiL8nvCg3rhYFGjdJVxWh4Mrs.roa (hash: I4Ms+nG9clzzXqbRLMZBQnfcHaFzr4weXSHENGAJ3A8=)
                          2: F3ZQh3Km-xgsgyn52H_-qy-RVxQ.roa (hash: XUVN18kNWLgsaG15ieowKflypLvKZBFhAxnBSDNLYV0=)
                          3: VtjyHb4s274etwzVUjylBtzFrRA.roa (hash: oA1AsUwnVCSE3157ftEsjOoWA2vVqf1jyknmggbbv8s=)
                          4: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: AnI6HvIu5msM2Uy+wxKNAWgnsGV64RvUoMXudw0oZuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 16:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:26:8b:b7:55:80:fd:3f:b1:46:50:52:f4:6e:19:9e:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
        Validity
            Not Before: Oct 10 16:00:52 2026 GMT
            Not After : Oct 11 16:00:52 2026 GMT
        Subject: CN=3b3c82f6fea15264445400720848300b9d70fd1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dd:78:c5:93:47:68:7c:b2:a4:c6:c6:65:99:
                    43:b2:84:a9:f5:90:76:89:20:8c:61:66:97:8a:a7:
                    69:41:d5:fc:20:00:81:6f:71:33:8c:fe:e8:20:0b:
                    f6:6e:50:99:95:a2:93:a8:80:e0:d1:dc:16:7a:e6:
                    9b:8b:86:59:b6:4b:49:ea:77:9a:49:35:e6:6a:04:
                    1c:08:c2:73:02:96:da:4f:21:a9:26:44:3c:ca:16:
                    cd:eb:d4:72:b8:38:51:f3:49:b2:89:d2:08:f6:e9:
                    c3:fb:2c:bb:a4:2e:90:5e:ac:c1:72:69:d8:88:dd:
                    db:9e:4c:51:c4:aa:4e:c5:02:07:c0:0c:7d:f2:85:
                    2b:7d:0e:84:99:bd:bd:16:53:5b:37:78:99:08:36:
                    7d:c4:57:15:a4:bb:91:4b:80:6f:ac:dc:5e:5e:2c:
                    48:8b:37:4b:5f:c4:ee:c2:f5:47:34:c6:a6:f5:7f:
                    15:8d:6c:b3:55:82:a5:f7:f7:09:de:ee:ee:28:ea:
                    6c:6b:a2:82:e5:92:61:d7:98:e7:f3:28:12:86:a1:
                    e0:63:9d:c2:1c:6a:da:a6:2c:fe:77:92:02:f8:73:
                    54:ee:45:4c:79:ef:76:c0:71:d5:78:bc:68:17:b0:
                    40:55:b4:9b:36:c6:37:42:8b:76:97:f3:44:7d:13:
                    46:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3C:82:F6:FE:A1:52:64:44:54:00:72:08:48:30:0B:9D:70:FD:1D
            X509v3 Authority Key Identifier:
                keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:4a:8e:73:a3:25:13:56:c1:ff:34:64:59:46:1a:65:38:7b:
         62:ca:4f:d8:63:a5:76:54:7e:46:2c:b6:51:0f:67:15:56:32:
         42:8a:9e:2e:fb:2e:3c:cc:de:98:6c:a4:cd:c8:ca:d3:ce:c8:
         e4:63:0a:d8:db:02:01:d1:00:0d:6f:53:e6:ae:74:ca:15:bc:
         87:f3:62:4e:c8:3e:be:d1:4c:35:f5:62:38:b6:94:63:d0:1f:
         a6:8b:c9:75:d1:0e:30:70:e4:f8:34:6e:9c:ed:67:03:14:54:
         b3:26:2f:91:5f:29:53:87:63:af:f9:94:94:e0:07:b6:76:80:
         96:71:6a:ec:89:a0:b1:3c:87:85:6b:30:50:aa:08:5d:5d:39:
         86:2a:a2:73:99:5f:56:6c:e8:ab:e3:a3:93:aa:39:ea:e2:5a:
         14:6b:42:98:36:ad:92:c1:a5:c6:a9:fd:7f:f9:1a:77:5c:86:
         f3:59:93:38:09:66:fb:0e:6e:e8:7b:f4:22:c9:10:32:1a:b4:
         8f:a4:bc:b7:f4:09:2a:81:5c:65:5b:58:0d:55:9a:24:4c:0e:
         3d:7d:d6:2f:b9:85:72:b5:a4:0f:4a:cc:bc:02:87:09:fb:99:
         f1:c4:95:10:fd:a6:f3:8e:44:01:50:cb:b8:d8:0c:db:91:fb:
         d2:29:c2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:36:06 2026 by rpki-client