Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File:                     yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier:          pIo8z4dUFk2x329DYUqfnykX6pu3FKI1kbLVaP80oR8=
Subject key identifier:   B6:6F:91:AD:CD:C8:07:9B:B4:6B:C4:04:B0:34:80:3D:AD:28:B8:A1
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer:       /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial:       01A13033B3064D6156ABEFDB748200659BE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number:          134D
Signing time:             Mon 12 Oct 2026 13:00:56 +0000
Manifest this update:     Mon 12 Oct 2026 13:00:56 +0000
Manifest next update:     Tue 13 Oct 2026 13:00:56 +0000
Files and hashes:         1: 7xGiL8nvCg3rhYFGjdJVxWh4Mrs.roa (hash: I4Ms+nG9clzzXqbRLMZBQnfcHaFzr4weXSHENGAJ3A8=)
                          2: F3ZQh3Km-xgsgyn52H_-qy-RVxQ.roa (hash: XUVN18kNWLgsaG15ieowKflypLvKZBFhAxnBSDNLYV0=)
                          3: VtjyHb4s274etwzVUjylBtzFrRA.roa (hash: oA1AsUwnVCSE3157ftEsjOoWA2vVqf1jyknmggbbv8s=)
                          4: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: sVTLH59BD9JgoRMsZ8ZfqPabQPwkDftM+yL52RBAIxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:30:33:b3:06:4d:61:56:ab:ef:db:74:82:00:65:9b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
        Validity
            Not Before: Oct 12 13:00:56 2026 GMT
            Not After : Oct 13 13:00:56 2026 GMT
        Subject: CN=b66f91adcdc8079bb46bc404b034803dad28b8a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c7:56:b5:84:aa:de:81:90:b5:23:ce:9c:32:
                    35:d5:23:b1:50:01:bb:b2:1a:3d:5a:67:32:65:b7:
                    f3:af:a5:bd:40:67:c0:f0:16:7c:c9:b4:93:6d:a8:
                    9e:50:66:6a:0a:a7:1a:13:47:b1:fb:a7:45:d9:32:
                    38:ba:c8:3b:3e:ac:1f:fd:7b:3a:d2:e8:c5:40:f1:
                    0f:1d:48:7a:c5:2d:d6:ca:7f:ee:f5:e1:ec:f2:b8:
                    dc:b7:69:49:ab:8f:48:63:86:a1:bf:21:bb:80:ce:
                    d5:ba:51:97:df:05:ac:1c:0d:10:fc:9e:aa:80:e5:
                    57:b7:b9:6c:e1:52:20:5d:df:7d:d1:64:d1:6c:ba:
                    10:b8:f7:1b:70:20:2f:3b:09:34:53:d0:ff:98:08:
                    b3:f9:86:e2:af:55:bb:1c:77:78:b0:71:5e:f5:ef:
                    9d:65:cd:4d:89:67:e4:d2:62:3c:12:bb:f0:74:a5:
                    6e:c5:68:7b:ee:1a:46:4f:9f:3e:a8:39:1c:29:5f:
                    b5:1a:cf:c5:3b:6d:4e:f8:60:fe:9a:14:98:9b:f7:
                    2a:05:c0:9c:9b:e1:74:2a:e2:f5:5e:bd:72:f2:c9:
                    13:bb:7e:10:4a:8a:23:7e:7a:fc:f0:6d:f1:78:14:
                    30:a3:4f:48:c9:eb:c0:ef:6d:3e:9b:d5:0c:9a:7b:
                    84:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6F:91:AD:CD:C8:07:9B:B4:6B:C4:04:B0:34:80:3D:AD:28:B8:A1
            X509v3 Authority Key Identifier:
                keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:aa:c1:3f:5c:c1:c5:c8:68:e2:34:c0:bd:d9:6e:4a:44:68:
         45:4a:10:20:62:ea:d9:86:c5:37:2a:09:44:5c:60:15:d6:68:
         c3:2a:63:50:a2:d5:99:76:de:3c:e4:99:0e:21:e3:c8:f9:7a:
         be:3c:75:41:8b:2e:0a:f2:e0:19:73:87:ed:93:e9:20:9f:24:
         04:12:e3:83:12:a7:12:2d:17:aa:6f:63:4c:be:14:ba:98:f6:
         39:e3:a5:47:14:9c:02:4b:c2:ed:10:2b:1b:d5:4d:6d:68:7a:
         cf:d9:d3:59:e0:41:5f:56:56:79:8f:c9:4a:56:95:0f:c4:ba:
         b7:5f:3a:2c:16:aa:c5:5e:05:0e:c1:aa:17:5e:12:83:07:fc:
         86:ed:f6:f2:03:bd:e3:ce:f0:a4:e7:27:77:eb:6f:ee:11:af:
         49:51:3c:cb:c4:33:74:cd:46:e2:0e:eb:87:1c:04:06:ba:b8:
         b4:b9:da:e1:02:f6:5a:29:9e:d4:8e:5d:04:93:c1:1f:e8:3d:
         e4:a2:7f:3b:9e:c3:fb:2f:a1:9d:80:54:41:58:3e:cd:c4:21:
         00:d3:5a:27:bf:85:b2:47:d8:1a:be:cd:d0:14:b1:8c:41:f0:
         ff:8f:e4:60:4e:64:ee:81:11:61:25:12:5d:62:77:68:23:1f:
         7b:67:e2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:04:21 2026 by rpki-client