Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
File:                     Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft (raw, json)
Hash identifier:          X/d6HCdML38nkbDsRbL4gFe8yK8FgF16lj7L7tgdVm8=
Subject key identifier:   C8:D7:9C:99:ED:35:3C:F6:7E:00:D5:4F:B1:36:27:EC:5A:34:41:FB
Authority key identifier: 61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8
Certificate issuer:       /CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
Certificate serial:       01A0B5AD090AE907600E489DE227563AB856
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
Manifest number:          0EEF
Signing time:             Fri 18 Sep 2026 18:00:11 +0000
Manifest this update:     Fri 18 Sep 2026 18:00:11 +0000
Manifest next update:     Sat 19 Sep 2026 18:00:11 +0000
Files and hashes:         1: Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl (hash: nO/vcC80JBUcFJt8hKU+ycaAn/D+2x8e+ydbDwFYASI=)
                          2: pgpahIBh1JVMRLJjJw7ASp6a1Cg.roa (hash: L10pq0OGKRh0sHJ3XX+pOGwbnH1MYXhkG9/kZOYZEMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 16:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b5:ad:09:0a:e9:07:60:0e:48:9d:e2:27:56:3a:b8:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
        Validity
            Not Before: Sep 18 18:00:11 2026 GMT
            Not After : Sep 19 18:00:11 2026 GMT
        Subject: CN=c8d79c99ed353cf67e00d54fb13627ec5a3441fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d4:e0:76:77:ed:17:5a:85:ee:1e:94:e3:37:
                    f5:94:b9:0f:25:9a:81:91:7c:c2:d8:f5:3e:b8:8c:
                    bb:09:3f:77:b1:b2:68:3b:cc:65:7d:f4:fc:df:b3:
                    0d:ae:f7:c0:a3:f0:27:b4:62:0e:ed:0e:4c:55:6b:
                    b1:0e:11:9e:af:85:f8:c8:55:4b:b2:0a:aa:eb:ad:
                    2b:81:f0:48:ec:69:26:7f:a4:68:39:3b:2d:c1:12:
                    82:f6:49:8e:9e:80:3e:f7:0f:74:f9:46:e8:bc:0e:
                    f6:fc:8f:6a:fe:23:92:41:88:3e:85:73:8f:ee:51:
                    30:36:8f:55:4d:15:b4:ce:4b:2a:c4:ea:14:02:04:
                    f6:c9:d2:3a:66:2e:47:71:80:d8:29:4c:85:40:45:
                    cb:96:3e:8a:97:a8:1d:5e:fc:2a:44:76:92:0d:9b:
                    de:cc:0e:e0:13:e6:9b:2b:cb:4d:b9:2f:d1:74:86:
                    53:87:7b:42:da:c7:04:d4:ed:1a:64:15:0e:5e:95:
                    16:b6:e5:61:37:2f:e0:5a:e0:3f:c9:d4:19:b4:92:
                    40:53:1e:23:05:31:30:3f:bf:c7:07:04:8c:69:87:
                    07:98:3f:c2:c7:d0:92:f1:b5:71:c9:60:d1:a1:ce:
                    70:d5:b4:1f:ee:49:60:ca:c7:e4:78:41:80:1e:30:
                    19:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D7:9C:99:ED:35:3C:F6:7E:00:D5:4F:B1:36:27:EC:5A:34:41:FB
            X509v3 Authority Key Identifier:
                keyid:61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:15:7f:ad:a8:a5:20:5e:0c:6a:5e:c6:b6:93:1e:dc:35:70:
         7f:b2:bc:38:58:f6:a3:67:a8:99:77:9d:bd:63:81:87:22:1c:
         33:51:8c:09:ea:29:09:ae:2b:80:f5:6b:f3:b9:db:cf:fa:16:
         89:a1:e7:ed:fa:20:52:ff:7a:3a:51:83:3e:88:a9:3e:90:c1:
         be:87:42:1d:35:57:84:1b:1b:47:6f:e4:93:a5:96:f1:77:8e:
         2c:90:a3:44:4a:67:da:c9:4f:e3:bb:1b:17:52:ef:06:2a:61:
         e3:7c:de:12:c5:b2:54:cc:04:3e:e6:9d:b9:4d:a6:98:aa:63:
         45:7a:0e:f5:a0:88:6f:b7:d9:5a:96:aa:e2:05:ae:9f:52:9b:
         86:73:75:69:e3:d5:29:5f:e3:e6:00:7b:3d:2f:9c:60:74:72:
         71:b2:6a:bd:64:54:c1:c1:ed:08:13:f4:82:6c:41:3b:a3:b2:
         c3:b7:6d:2e:92:54:47:6d:63:0e:cd:e8:61:81:b1:d9:0a:3e:
         61:a6:c1:7b:d2:b0:e5:90:58:4b:76:59:df:5e:8a:fe:7c:7e:
         8b:28:ab:34:fd:5f:b1:a4:c8:05:1b:52:d0:ae:0c:33:cc:c2:
         78:63:de:4a:ff:35:a5:1e:79:03:67:14:a9:8a:c3:5d:3c:67:
         f4:fe:c7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:59:18 2026 by rpki-client