Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
File:                     Y11bZE4i-0iOTWwAErCqvyOOYeU.mft (raw, json)
Hash identifier:          4NWSHq3PfI9NlVK5L4fVrLtR6i7v3arg/OXgWSVUYII=
Subject key identifier:   E7:40:14:25:95:A5:24:BC:E9:BF:02:1F:1F:37:A2:98:26:8A:4B:AA
Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
Certificate issuer:       /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Certificate serial:       01A0B4D1C18078CB6A9FEE9D12AF948BCB65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
Manifest number:          0AD5
Signing time:             Fri 18 Sep 2026 14:00:40 +0000
Manifest this update:     Fri 18 Sep 2026 14:00:40 +0000
Manifest next update:     Sat 19 Sep 2026 14:00:40 +0000
Files and hashes:         1: EkKYDgf8CJwACnwhA9TYZvLXaUY.roa (hash: 3LinOjO9RICNC29hk77B/mFnJ3J5EkBogfoC9PhscGw=)
                          2: Qt9b8eH_026x-QvzB2v7OUwPKW0.roa (hash: giCqVfLyiuosSKyEoDq9V/ttZpO9E78wjOrOmrwG9Bk=)
                          3: Y11bZE4i-0iOTWwAErCqvyOOYeU.crl (hash: KypBK2DAGX7WAaMuKF+xDAOBCSFYjMP2+lBPruc6qcQ=)
                          4: ctKt52Vn_3gdSjgBKmq9nexMId8.roa (hash: pa3+uZW+zhlAA0AIlYODpGm1QI32hEM/nvyibDrAp2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 14:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b4:d1:c1:80:78:cb:6a:9f:ee:9d:12:af:94:8b:cb:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
        Validity
            Not Before: Sep 18 14:00:40 2026 GMT
            Not After : Sep 19 14:00:40 2026 GMT
        Subject: CN=e740142595a524bce9bf021f1f37a298268a4baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a6:d2:a8:92:9d:9f:21:b4:51:0b:3e:87:21:
                    3b:8f:32:04:2f:91:9f:74:bd:88:f3:0f:a9:ba:a4:
                    aa:55:ea:c6:c1:72:c9:ab:c1:79:31:25:75:5d:82:
                    4f:ca:d1:d4:49:55:fd:a6:b9:4e:7e:de:ee:c4:df:
                    82:fc:44:11:a5:8a:e5:a1:a9:26:35:ce:73:a8:e8:
                    4a:55:de:e9:0c:9e:db:3b:24:53:ab:76:b6:24:cb:
                    5c:d4:25:b2:8d:13:01:81:3f:4e:34:6c:d6:3b:87:
                    d7:2d:ef:70:5a:42:ad:8e:8c:9d:43:2d:88:d7:70:
                    c3:c2:80:f0:b8:d2:61:ba:19:2e:1b:2e:7e:c7:ca:
                    19:bb:50:48:53:87:7f:1c:ab:bd:67:20:d6:fa:66:
                    e2:ec:63:7f:9f:73:2b:14:d4:92:1f:c5:81:1d:d9:
                    29:a9:20:bd:92:6c:90:a6:32:db:d0:3e:f3:90:65:
                    e5:fe:69:63:55:b0:48:a7:6d:4d:bc:76:87:12:57:
                    ea:4f:32:2d:a1:c7:1b:f3:3a:1f:26:92:33:b6:4f:
                    32:12:3a:53:a0:b5:c2:a7:05:5e:0c:68:7d:8c:f5:
                    d3:54:7b:7a:05:81:37:60:46:e9:43:88:70:92:7c:
                    5a:e7:9f:3e:cb:6e:62:92:49:90:3b:67:85:10:59:
                    5e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:40:14:25:95:A5:24:BC:E9:BF:02:1F:1F:37:A2:98:26:8A:4B:AA
            X509v3 Authority Key Identifier:
                keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:86:7e:c4:2e:a8:5c:d9:c5:b5:c9:ce:0c:01:1d:d8:00:24:
         3e:a9:10:e1:e5:3e:a2:c6:fb:83:f6:57:c6:da:78:71:77:ba:
         68:8c:12:99:01:9d:11:1f:f7:bd:41:81:9a:aa:47:f2:a5:93:
         e6:5e:69:d2:3f:13:7e:39:74:f2:c6:4a:2f:1d:61:ef:42:5e:
         82:4e:b3:26:48:c4:02:26:7d:b4:3c:e7:16:00:06:dc:d1:66:
         3f:d7:a6:a7:f1:c8:99:9a:58:79:1c:77:04:45:80:ab:dd:7c:
         45:6b:7e:c0:05:94:8f:a3:49:26:a5:92:32:fb:3e:9f:e0:fe:
         7e:8a:9e:df:de:42:ec:ce:59:0c:04:b0:71:21:58:75:df:5f:
         77:59:0c:33:6b:1f:e3:c1:8c:bd:39:cf:16:f2:7d:01:99:7f:
         78:e2:6d:0b:72:3f:35:8b:12:b1:56:94:b2:2a:62:7d:33:96:
         ab:2a:ce:9a:76:5a:7b:ed:d3:3f:f7:63:a2:30:90:7b:ed:9d:
         1b:bb:aa:42:21:4e:f8:96:6a:b3:07:12:6b:ea:01:ef:84:26:
         23:cb:b4:d5:af:7f:24:d5:6f:13:4a:3d:0e:f2:70:58:b7:e5:
         01:30:6f:fb:db:3f:5c:97:9a:99:29:2d:cc:b3:09:b1:af:fd:
         83:fc:5c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:51:32 2026 by rpki-client