Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
File:                     ytx04QgwQh1O7qmCRM_RtBGQN_8.mft (raw, json)
Hash identifier:          Bbj2tIF6BOeBB2IrBA45/Szv4IaVJZtFRm99m9wzqE0=
Subject key identifier:   AB:E6:AE:4A:07:F2:AD:86:94:C0:D6:4C:95:ED:74:2A:E8:A7:08:AE
Authority key identifier: CA:DC:74:E1:08:30:42:1D:4E:EE:A9:82:44:CF:D1:B4:11:90:37:FF
Certificate issuer:       /CN=cadc74e10830421d4eeea98244cfd1b4119037ff
Certificate serial:       01A08A8CAD0C84C4283EB651FC6B2BA108B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
Manifest number:          1A48
Signing time:             Thu 10 Sep 2026 09:01:10 +0000
Manifest this update:     Thu 10 Sep 2026 09:01:10 +0000
Manifest next update:     Fri 11 Sep 2026 09:01:10 +0000
Files and hashes:         1: DDllGy-0gN7gn7wR05GXGFPsqY0.roa (hash: 56XqjX/8wAHrfEweKci5I2st8Uu/z5VPWpGUoclsXrc=)
                          2: ytx04QgwQh1O7qmCRM_RtBGQN_8.crl (hash: GHyq5Fi0Txi8bLhnJCiVNafOB1QjC6EeFPn4Ep+SSrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8c:ad:0c:84:c4:28:3e:b6:51:fc:6b:2b:a1:08:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cadc74e10830421d4eeea98244cfd1b4119037ff
        Validity
            Not Before: Sep 10 09:01:10 2026 GMT
            Not After : Sep 11 09:01:10 2026 GMT
        Subject: CN=abe6ae4a07f2ad8694c0d64c95ed742ae8a708ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a9:f0:77:7f:d0:32:b5:9c:a3:7d:6f:43:f3:
                    6a:b8:ba:0c:8e:27:e6:26:50:37:9b:1d:33:4c:1d:
                    95:12:92:37:ff:d3:f7:d4:79:5e:c7:d9:e3:39:36:
                    16:8a:5c:ca:17:1f:58:2a:1e:ad:ef:39:34:a5:d5:
                    cb:9c:32:26:7a:ef:ed:e9:e2:78:42:4b:d2:ab:74:
                    f0:71:6e:00:65:39:e3:7a:d3:9a:4b:70:9b:ef:eb:
                    b9:89:e8:6d:f3:76:42:7e:64:d0:2f:bc:cf:47:93:
                    3f:97:9d:6a:3c:06:bc:b7:91:c9:af:33:df:ff:bd:
                    97:0f:b3:f9:b0:5e:cb:c3:16:e7:af:60:2e:96:10:
                    5d:86:1a:92:4c:c2:87:c2:1b:2d:f9:f2:4f:fa:97:
                    53:6b:e2:b7:78:0f:1d:23:e5:5d:c5:91:50:9a:32:
                    b5:a0:97:1a:e1:55:42:03:1e:0d:a2:6f:31:7c:13:
                    cc:44:69:0f:4d:1c:1a:c2:cf:07:80:e0:09:04:6f:
                    1f:af:3c:09:d2:87:cf:c4:18:7a:07:24:df:34:0b:
                    97:8e:58:1a:6f:c0:61:d8:a4:58:4f:01:25:92:97:
                    4c:97:79:47:60:a6:9d:a9:cd:e1:41:6f:3b:74:ff:
                    bc:cc:fd:8a:bd:9f:4b:3f:b3:ec:9a:16:d6:2e:f6:
                    c2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E6:AE:4A:07:F2:AD:86:94:C0:D6:4C:95:ED:74:2A:E8:A7:08:AE
            X509v3 Authority Key Identifier:
                keyid:CA:DC:74:E1:08:30:42:1D:4E:EE:A9:82:44:CF:D1:B4:11:90:37:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:04:33:1f:f0:eb:62:b1:81:91:7c:80:5c:1a:e6:00:77:59:
         4c:d3:3c:05:c8:4d:5e:50:28:b1:65:77:3f:54:af:03:81:3d:
         ba:7a:8f:98:e3:f3:bb:7f:1a:20:65:8e:42:7b:a4:01:3b:c3:
         c8:07:14:72:33:91:fc:a3:c6:49:3b:89:35:7a:80:ac:62:f7:
         8d:fe:70:0b:61:e0:4b:34:1d:bd:60:c6:05:08:ed:f0:bc:56:
         2e:59:76:1a:ae:ec:d2:86:9e:d2:84:9d:99:eb:15:96:c6:e8:
         62:71:98:16:73:27:2e:05:d7:df:5d:bd:9f:99:1d:8e:32:99:
         d5:a1:1a:6e:92:8d:f2:b8:21:14:a2:cc:4d:d2:2e:f5:74:15:
         78:35:bf:91:79:8a:77:87:4d:66:57:0e:66:69:5a:39:ae:fd:
         2b:68:c7:97:8d:0b:7f:a0:cb:56:41:21:f9:79:a0:d6:a3:bd:
         95:f2:6a:86:1e:9c:29:2a:a6:3d:ea:b6:36:66:85:7d:1b:67:
         7e:09:08:b1:6f:3d:83:a9:75:2c:2e:83:12:52:26:57:1c:9b:
         78:01:b2:9a:f0:0f:24:5b:9c:b1:fc:f4:c4:3a:33:17:01:32:
         f4:ee:68:d1:62:a6:a9:d2:c7:9f:e5:17:6c:7f:ce:6c:f3:8a:
         13:0f:20:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjK0MhMQoPrZR/GsroQiwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZGM3NGUxMDgzMDQyMWQ0ZWVlYTk4MjQ0Y2ZkMWI0MTE5
MDM3ZmYwHhcNMjYwOTEwMDkwMTEwWhcNMjYwOTExMDkwMTEwWjAzMTEwLwYDVQQD
EyhhYmU2YWU0YTA3ZjJhZDg2OTRjMGQ2NGM5NWVkNzQyYWU4YTcwOGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKnwd3/QMrWco31vQ/NquLoMjifm
JlA3mx0zTB2VEpI3/9P31Hlex9njOTYWilzKFx9YKh6t7zk0pdXLnDImeu/t6eJ4
QkvSq3TwcW4AZTnjetOaS3Cb7+u5ieht83ZCfmTQL7zPR5M/l51qPAa8t5HJrzPf
/72XD7P5sF7Lwxbnr2AulhBdhhqSTMKHwhst+fJP+pdTa+K3eA8dI+VdxZFQmjK1
oJca4VVCAx4Nom8xfBPMRGkPTRwaws8HgOAJBG8frzwJ0ofPxBh6ByTfNAuXjlga
b8Bh2KRYTwElkpdMl3lHYKadqc3hQW87dP+8zP2KvZ9LP7PsmhbWLvbC5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvmrkoH8q2GlMDWTJXtdCropwiuMB8GA1UdIwQY
MBaAFMrcdOEIMEIdTu6pgkTP0bQRkDf/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXR4MDRRZ3dRaDFPN3FtQ1JNX1J0QkdRTl84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84YmZmNzItNWMxNi00NDg0LWFjYzIt
N2ViNGMwODg1OTBmLzEveXR4MDRRZ3dRaDFPN3FtQ1JNX1J0QkdRTl84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84YmZmNzItNWMxNi00NDg0LWFjYzItN2ViNGMwODg1OTBm
LzEveXR4MDRRZ3dRaDFPN3FtQ1JNX1J0QkdRTl84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfwQzH/Dr
YrGBkXyAXBrmAHdZTNM8BchNXlAosWV3P1SvA4E9unqPmOPzu38aIGWOQnukATvD
yAcUcjOR/KPGSTuJNXqArGL3jf5wC2HgSzQdvWDGBQjt8LxWLll2Gq7s0oae0oSd
mesVlsboYnGYFnMnLgXX3129n5kdjjKZ1aEabpKN8rghFKLMTdIu9XQVeDW/kXmK
d4dNZlcOZmlaOa79K2jHl40Lf6DLVkEh+Xmg1qO9lfJqhh6cKSqmPeq2NmaFfRtn
fgkIsW89g6l1LC6DElImVxybeAGymvAPJFucsfz0xDozFwEy9O5o0WKmqdLHn+UX
bH/ObPOKEw8gvg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:53:34 2026 by rpki-client