Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
File:                     Y0JgC_HMkhaub-FpoenVQYrZOiI.mft (raw, json)
Hash identifier:          LxoS/V45J6LiNylVr9N0A/dL3d+kLVvkiGfcwPcZHkM=
Subject key identifier:   6A:52:8D:D0:C9:49:15:9D:3F:83:15:B7:77:D3:20:8E:50:CE:31:53
Authority key identifier: 63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
Certificate issuer:       /CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Certificate serial:       01A0890BA52E1FF9A57EBBFC99FBC5514804
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
Manifest number:          1077
Signing time:             Thu 10 Sep 2026 02:00:36 +0000
Manifest this update:     Thu 10 Sep 2026 02:00:36 +0000
Manifest next update:     Fri 11 Sep 2026 02:00:36 +0000
Files and hashes:         1: 51U34o8JYb8CQVhcBv2qFWgAPgs.roa (hash: xu3fMRX2q3+Mv4t+1E/L+4OKYLdaxsUvme7/Xi7jOeA=)
                          2: Naj_hbjSCfJxAXzUztYdICw-HJU.roa (hash: oHxNo2orkmmjEzObI45+SgF12BlHV9OAFLzlNY9SiB0=)
                          3: Y0JgC_HMkhaub-FpoenVQYrZOiI.crl (hash: XJyYwQKEWjYxXjbDxzC8eiU8oetVmw7FwpPA1QOMBF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:0b:a5:2e:1f:f9:a5:7e:bb:fc:99:fb:c5:51:48:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
        Validity
            Not Before: Sep 10 02:00:36 2026 GMT
            Not After : Sep 11 02:00:36 2026 GMT
        Subject: CN=6a528dd0c949159d3f8315b777d3208e50ce3153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:50:04:b6:98:9a:2c:32:84:16:e5:1f:06:3b:
                    59:9e:3d:f5:f5:7b:68:3a:80:c0:d8:f7:aa:6b:e2:
                    ee:05:89:21:77:1a:60:4a:42:5f:a2:ca:e2:d6:fc:
                    17:1c:cc:35:bc:24:57:89:d9:e3:76:e8:30:6a:12:
                    37:56:04:1a:34:d7:08:cf:08:8e:42:06:6e:13:f5:
                    07:95:bc:c6:ba:9a:9d:e7:02:7a:50:58:e5:90:71:
                    70:fb:11:12:29:b5:e4:43:2b:7c:d6:19:6a:be:14:
                    b3:15:f2:f5:69:8a:66:a9:2b:26:15:b4:59:4a:63:
                    57:af:78:8a:58:4e:e6:26:d3:cb:c3:25:4c:7f:f4:
                    22:36:64:49:b9:5b:ac:35:c2:f5:4c:fa:62:d4:39:
                    a3:90:b2:3c:e0:09:d8:f8:4c:81:ad:bc:63:de:bd:
                    ff:d1:ec:02:18:49:03:f5:7e:8a:53:18:41:c3:80:
                    fd:ef:f4:84:4f:5e:12:33:86:70:55:8b:2e:64:a7:
                    db:5a:35:0c:90:c8:07:6a:45:61:02:24:f2:47:16:
                    83:d6:c2:5e:02:0a:61:a9:17:39:b2:d9:04:33:7a:
                    b7:d5:0c:ce:e2:48:66:eb:ab:55:0b:ff:86:ee:35:
                    5a:f4:c4:ba:eb:eb:ed:7a:cf:2d:63:a0:9e:4c:5b:
                    56:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:52:8D:D0:C9:49:15:9D:3F:83:15:B7:77:D3:20:8E:50:CE:31:53
            X509v3 Authority Key Identifier:
                keyid:63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:bd:28:13:83:6a:cb:df:7f:1f:3b:e5:8e:e2:1c:c5:af:d5:
         82:4e:85:31:a1:00:41:86:4b:8b:e1:d9:c2:5a:80:a8:3e:42:
         df:fa:f7:29:26:3c:45:54:44:df:51:e6:29:70:ab:1c:d7:96:
         09:ac:f1:68:8c:d7:75:be:cd:b9:39:8b:8a:ad:9f:17:98:e6:
         05:d1:f5:58:6d:fc:0a:4e:98:42:12:78:d3:0f:7a:88:e5:22:
         67:8c:18:a2:20:f5:5a:e5:a4:f8:1c:67:e5:17:71:a7:19:cc:
         22:2a:8b:64:94:03:34:eb:64:11:6f:8e:1b:bc:54:7e:99:48:
         df:b8:f3:e3:41:ba:d5:27:b0:fa:fe:1e:5f:87:10:f6:9e:09:
         0b:6e:ff:e1:01:b5:11:f3:68:24:a0:84:81:03:1f:cf:f7:25:
         e4:85:a2:ba:c3:0e:48:30:fd:3f:7a:f6:e7:33:4e:20:81:f1:
         0e:fd:d7:9c:f5:cc:7e:fd:29:02:36:f2:3a:b5:0c:59:bc:12:
         57:3e:f6:82:f0:84:db:99:f3:f0:6e:16:ce:71:0b:0d:d8:66:
         1c:74:98:e2:d7:c2:26:df:06:04:78:7f:b6:5d:de:9a:83:3e:
         30:ae:c8:b2:55:3b:c3:74:80:14:6e:cb:7e:0c:eb:5d:61:66:
         c5:6e:79:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJC6UuH/mlfrv8mfvFUUgEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDI2MDBiZjFjYzkyMTZhZTZmZTE2OWExZTlkNTQxOGFk
OTNhMjIwHhcNMjYwOTEwMDIwMDM2WhcNMjYwOTExMDIwMDM2WjAzMTEwLwYDVQQD
Eyg2YTUyOGRkMGM5NDkxNTlkM2Y4MzE1Yjc3N2QzMjA4ZTUwY2UzMTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVAEtpiaLDKEFuUfBjtZnj319Xto
OoDA2Peqa+LuBYkhdxpgSkJfosri1vwXHMw1vCRXidnjdugwahI3VgQaNNcIzwiO
QgZuE/UHlbzGupqd5wJ6UFjlkHFw+xESKbXkQyt81hlqvhSzFfL1aYpmqSsmFbRZ
SmNXr3iKWE7mJtPLwyVMf/QiNmRJuVusNcL1TPpi1DmjkLI84AnY+EyBrbxj3r3/
0ewCGEkD9X6KUxhBw4D97/SET14SM4ZwVYsuZKfbWjUMkMgHakVhAiTyRxaD1sJe
AgphqRc5stkEM3q31QzO4khm66tVC/+G7jVa9MS66+vtes8tY6CeTFtWVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpSjdDJSRWdP4MVt3fTII5QzjFTMB8GA1UdIwQY
MBaAFGNCYAvxzJIWrm/haaHp1UGK2ToiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBKZ0NfSE1raGF1Yi1GcG9lblZRWXJaT2lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZjA3NmQtZjBlOS00MmI0LWFkNWYt
NzMxMjA2M2ZmYTdmLzEvWTBKZ0NfSE1raGF1Yi1GcG9lblZRWXJaT2lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84ZjA3NmQtZjBlOS00MmI0LWFkNWYtNzMxMjA2M2ZmYTdm
LzEvWTBKZ0NfSE1raGF1Yi1GcG9lblZRWXJaT2lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHb0oE4Nq
y99/HzvljuIcxa/Vgk6FMaEAQYZLi+HZwlqAqD5C3/r3KSY8RVRE31HmKXCrHNeW
CazxaIzXdb7NuTmLiq2fF5jmBdH1WG38Ck6YQhJ40w96iOUiZ4wYoiD1WuWk+Bxn
5RdxpxnMIiqLZJQDNOtkEW+OG7xUfplI37jz40G61Sew+v4eX4cQ9p4JC27/4QG1
EfNoJKCEgQMfz/cl5IWiusMOSDD9P3r25zNOIIHxDv3XnPXMfv0pAjbyOrUMWbwS
Vz72gvCE25nz8G4WznELDdhmHHSY4tfCJt8GBHh/tl3emoM+MK7IslU7w3SAFG7L
fgzrXWFmxW554A==
-----END CERTIFICATE-----
Generated at Thu Sep 10 13:33:25 2026 by rpki-client