Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File:                     YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier:          lXcmzmrDgfniQN+DnAdTfFqX7HZNuqyCawGEV53OMYU=
Subject key identifier:   01:4F:3C:57:45:8B:E3:F7:7E:E9:63:81:B5:04:4D:BC:A2:61:CF:69
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer:       /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial:       01A089B0A9217EE964DAC99A3D0B1DD1AE24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number:          1772
Signing time:             Thu 10 Sep 2026 05:00:51 +0000
Manifest this update:     Thu 10 Sep 2026 05:00:51 +0000
Manifest next update:     Fri 11 Sep 2026 05:00:51 +0000
Files and hashes:         1: C3nc48r2b2USpSkgOVzgsEQF2h0.roa (hash: kvFI72ZsGMqBnEvEAYRTWIp6gxPL8rac8rSJwcsVy0w=)
                          2: XaIcpqpb27hhGRIZ8h_xuzKRev4.roa (hash: pQLbKPAj3ndWd5qjjlikkIwvz29S32Fkmehgv5Ouuf0=)
                          3: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: HRE3PVBqcLkkLrjpAy27nE6FLOjJjuQUlj6OgRDn25Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 05:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:b0:a9:21:7e:e9:64:da:c9:9a:3d:0b:1d:d1:ae:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
        Validity
            Not Before: Sep 10 05:00:51 2026 GMT
            Not After : Sep 11 05:00:51 2026 GMT
        Subject: CN=014f3c57458be3f77ee96381b5044dbca261cf69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4a:62:1b:db:42:0b:b6:84:7a:db:b0:5f:66:
                    69:2d:a5:3e:3a:49:fb:89:39:5e:ea:1e:c2:59:86:
                    b6:a6:f8:60:8d:09:ae:42:68:5b:7c:96:41:f7:83:
                    98:c3:81:08:f1:0b:e0:05:fb:14:9c:11:1c:c0:af:
                    4c:60:e0:f2:31:b6:1e:58:0c:f8:9b:26:61:ee:97:
                    ab:28:fb:6e:23:40:0f:dd:68:fd:60:9f:9e:1b:31:
                    c8:01:24:4e:2b:77:84:cd:29:9e:f0:4b:ee:43:4a:
                    2a:99:04:f9:69:eb:0c:df:07:42:44:f2:6b:33:ce:
                    0d:e8:2d:c2:5c:95:cb:a0:d7:41:a9:35:c4:81:0a:
                    1c:13:01:dd:93:d1:a3:68:b7:ed:e4:e2:99:2a:f9:
                    2b:e4:32:9f:d0:20:f2:b2:71:af:65:f3:13:c4:16:
                    0f:ba:3e:32:d6:68:1a:69:b7:00:6e:ea:1c:26:37:
                    2a:b5:8c:58:89:89:7e:31:56:e0:8e:d2:7c:4a:e5:
                    1a:51:c4:e9:df:df:25:25:0e:11:4a:e1:58:86:57:
                    3b:3a:59:4b:ba:5f:fd:48:37:59:41:9e:ad:85:51:
                    cf:83:44:54:a0:6b:65:bd:8b:55:10:c7:31:51:46:
                    05:de:e7:25:ba:fa:ab:9a:ac:0f:d1:fe:05:f6:07:
                    ae:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4F:3C:57:45:8B:E3:F7:7E:E9:63:81:B5:04:4D:BC:A2:61:CF:69
            X509v3 Authority Key Identifier:
                keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d3:66:91:4d:c0:50:6d:af:4c:ec:cc:2d:6a:39:b3:b1:9d:
         09:55:08:0b:17:1d:86:8e:66:4e:f2:df:cf:4b:13:b9:59:54:
         26:e9:e7:a1:65:1b:4c:20:aa:af:84:f0:c7:ee:6e:b1:dd:06:
         9e:ff:f4:86:64:04:36:35:dd:e2:6f:14:61:85:9f:cc:b8:53:
         3b:b5:45:66:35:56:fa:49:2c:78:18:d9:53:2a:65:13:9a:40:
         c9:0d:90:9c:c8:29:0e:64:d2:cc:66:ba:76:b1:0e:1f:8d:20:
         b6:30:33:67:e7:a9:4c:f2:51:89:45:23:c5:5a:de:e2:3f:9e:
         ef:3e:b4:1e:fd:39:c9:a0:86:91:b4:a2:20:c3:6b:fc:65:08:
         19:17:f2:3d:dd:c8:4f:24:c3:32:a2:f7:d8:b6:f0:ae:1c:a9:
         89:c5:96:6a:14:ee:f4:32:e8:16:5e:d3:d4:28:e5:d2:4a:b0:
         3a:72:94:07:77:c9:29:0c:48:a1:b8:01:15:be:fd:4f:85:dc:
         4f:50:e5:f9:b4:2d:2f:71:34:10:9d:65:57:eb:f3:a5:78:11:
         f7:fd:72:ad:cb:4e:85:d4:68:be:2a:6b:32:e0:e8:06:46:71:
         45:ba:d6:c6:3f:1c:07:f2:6f:b1:71:0f:16:c1:f0:1e:3b:b2:
         9a:87:98:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:19:21 2026 by rpki-client