Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
File:                     YzCxTOdPYKjqSrtuqmDuRHD0On8.mft (raw, json)
Hash identifier:          l2eoiYGUFw1NQW7tnLd/ItDcW77IAtB+xCrIc5vcX3o=
Subject key identifier:   A9:FE:E4:FF:50:D8:F0:6D:85:33:98:EC:74:F0:7A:36:3B:B6:2D:CB
Authority key identifier: 63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F
Certificate issuer:       /CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f
Certificate serial:       01A1781553D0C762453E30125B9498405452
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
Manifest number:          0423
Signing time:             Mon 26 Oct 2026 12:00:25 +0000
Manifest this update:     Mon 26 Oct 2026 12:00:25 +0000
Manifest next update:     Tue 27 Oct 2026 12:00:25 +0000
Files and hashes:         1: 30S6gV2oh78DXtrqvndtvSPPKd4.roa (hash: OcTAJVeDjRXR19iBC0Wj5Tjt34V2Iwuh2sKP2/1+Fgg=)
                          2: YzCxTOdPYKjqSrtuqmDuRHD0On8.crl (hash: 3HvdMKkfsVFhNMUL2WmKF4Q4uM6fj7c4UKKgHY7/q4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:78:15:53:d0:c7:62:45:3e:30:12:5b:94:98:40:54:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f
        Validity
            Not Before: Oct 26 12:00:25 2026 GMT
            Not After : Oct 27 12:00:25 2026 GMT
        Subject: CN=a9fee4ff50d8f06d853398ec74f07a363bb62dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2d:a0:92:87:15:ff:5e:e5:a2:8d:f2:a7:da:
                    6f:e0:a6:3c:82:41:54:82:e6:33:fa:8a:ab:3f:73:
                    b0:b8:0b:92:c7:e1:35:b5:85:5b:98:ae:a9:32:28:
                    a3:99:c0:b9:1c:aa:18:56:73:b9:f4:2e:8f:9a:67:
                    cf:f6:70:e7:8b:65:57:c3:f2:7d:ad:55:8d:39:e9:
                    ea:6f:6b:28:cc:c4:4e:93:4b:b9:34:19:29:7f:81:
                    72:26:9b:d1:19:f7:e7:c2:11:54:30:db:3a:d8:b5:
                    32:52:b1:8f:9f:70:db:4f:f0:7e:ae:21:68:2c:46:
                    dd:99:20:21:84:4d:e7:e0:d2:64:5f:14:c6:a1:cf:
                    a1:27:dd:e3:da:ad:07:f4:11:d9:91:e7:7f:31:c7:
                    62:17:61:be:2c:9b:22:47:36:72:55:e2:91:8f:5a:
                    35:d8:45:63:17:0d:a4:87:3e:d7:ae:ed:31:9a:c7:
                    87:98:a1:bf:da:4e:3d:e6:6e:b5:e5:e4:52:ea:8a:
                    85:e2:92:08:45:ed:05:68:6d:ae:9a:e4:76:8f:a6:
                    00:a7:ed:eb:e0:3d:31:ee:35:f4:ad:c0:6e:17:ce:
                    91:b9:75:56:96:52:fc:1e:8e:f5:b3:3f:b8:9f:d4:
                    a2:07:0f:88:d2:53:f7:07:5f:f8:07:30:0e:72:aa:
                    3f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FE:E4:FF:50:D8:F0:6D:85:33:98:EC:74:F0:7A:36:3B:B6:2D:CB
            X509v3 Authority Key Identifier:
                keyid:63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:22:46:7f:98:36:4f:06:5e:5f:c7:18:fb:f9:04:36:41:5a:
         6a:03:d3:79:19:dd:cb:76:0b:08:89:2d:0b:66:40:9b:47:78:
         ec:ef:c9:93:af:36:de:40:74:18:88:df:36:81:f1:7f:3e:2a:
         33:c1:62:d7:e8:c7:fe:4a:23:54:a3:02:22:c7:e2:88:da:24:
         dd:19:d6:34:43:79:47:f6:b6:6e:2d:e1:89:8c:00:d5:a5:b1:
         bf:d6:55:62:7f:47:97:d8:48:11:b1:f6:eb:d4:b7:95:e5:21:
         de:33:30:36:95:cb:03:ea:9c:5d:49:7d:23:68:e4:d5:b9:c3:
         4e:6c:fa:17:e4:c9:3b:71:57:31:ae:13:2b:1e:09:4e:37:13:
         94:8d:9e:61:6e:57:70:38:c0:f4:c5:48:b9:8d:cf:41:4a:2e:
         44:b1:b9:70:81:2e:7f:2b:0b:ea:c7:64:56:f4:b7:ff:34:7b:
         d5:69:9b:02:69:33:4a:7b:da:95:e3:4e:dc:78:3f:1e:04:33:
         8b:11:5e:e5:8a:19:af:6f:ea:ef:27:f2:93:dc:78:b1:5f:41:
         92:04:85:b6:6a:92:9e:84:80:17:f0:80:19:a9:91:2c:6a:52:
         50:71:32:0a:da:59:e3:34:f5:74:46:59:8e:02:13:42:9d:6a:
         a2:31:1d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:35:38 2026 by rpki-client