Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
File:                     ynSM0AzX_mohdVr2QtiBuN2aOfc.mft (raw, json)
Hash identifier:          dm5QJ4MWfZfLxwfV5GatudIHkU4jHRcPs5b1mpozNIY=
Subject key identifier:   A9:37:0F:FC:10:6E:33:06:EF:C2:61:42:FA:0F:87:D0:36:14:7F:53
Authority key identifier: CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7
Certificate issuer:       /CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7
Certificate serial:       01A189E49754B9DCFBB51F4FD20D0A873362
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
Manifest number:          1ACD
Signing time:             Thu 29 Oct 2026 23:00:21 +0000
Manifest this update:     Thu 29 Oct 2026 23:00:21 +0000
Manifest next update:     Fri 30 Oct 2026 23:00:21 +0000
Files and hashes:         1: gVEq3NnVdt_2WnJ5HkFKQbFF6gI.roa (hash: PhtT91kBJsBi6v+NJo/OC9S74yakm+F5W9I39PDYLyk=)
                          2: ynSM0AzX_mohdVr2QtiBuN2aOfc.crl (hash: vQxnDwhtMT3bpMzKam50M7hYzjDLiUzJQGl1O4EpBLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:89:e4:97:54:b9:dc:fb:b5:1f:4f:d2:0d:0a:87:33:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7
        Validity
            Not Before: Oct 29 23:00:21 2026 GMT
            Not After : Oct 30 23:00:21 2026 GMT
        Subject: CN=a9370ffc106e3306efc26142fa0f87d036147f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9c:1b:24:8c:23:fb:a7:a5:10:05:f8:29:24:
                    cf:e4:5a:3d:e7:1a:4e:78:f2:71:5d:9f:45:cb:41:
                    95:28:d3:4d:45:27:8e:e1:22:dc:de:4f:c2:b5:a5:
                    5a:47:66:20:c0:c3:a4:85:4c:a0:20:07:31:e6:be:
                    cf:ea:d8:3e:22:eb:b2:45:b6:4e:52:a6:b6:e7:61:
                    d2:ff:44:01:9a:84:2c:bd:0a:d3:40:6f:bc:dc:21:
                    38:9c:1b:93:70:79:2f:d2:c0:df:e5:09:3a:06:85:
                    4f:6d:38:03:c7:67:08:a7:19:75:33:9e:cc:71:c5:
                    93:ac:3b:1b:35:09:48:c5:a8:cb:9b:02:2c:a1:aa:
                    7e:b6:d5:5d:cc:f9:79:fe:56:f2:ab:e9:a7:59:bb:
                    dd:97:40:29:42:27:5f:69:6f:f0:3e:3e:33:0e:22:
                    a9:7c:69:d2:f4:24:6a:36:cf:10:f6:19:e2:60:e1:
                    6f:d5:09:ea:0a:8f:ec:78:cb:22:59:80:f8:5a:4d:
                    70:07:d9:64:b5:f3:ac:da:cf:51:7b:6f:f8:24:40:
                    fd:ef:66:11:cd:87:43:d0:c1:23:0c:a0:fa:7e:4f:
                    ab:52:22:10:9c:76:4b:81:10:93:bc:61:91:76:c2:
                    0e:c7:25:dc:04:97:80:38:cc:53:98:74:ec:6e:6e:
                    7b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:37:0F:FC:10:6E:33:06:EF:C2:61:42:FA:0F:87:D0:36:14:7F:53
            X509v3 Authority Key Identifier:
                keyid:CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:23:0a:34:f9:e9:de:a1:3d:7b:e5:de:a9:8f:51:63:8a:26:
         40:43:48:e9:8f:52:62:8f:79:f3:ae:37:18:f3:81:8b:bf:45:
         c5:00:62:f9:e1:95:ef:c3:db:5c:ea:e5:ea:e9:34:ac:87:6f:
         b6:da:20:bf:1e:19:11:20:76:a1:17:7f:f9:1f:8f:bf:4e:ae:
         d2:f4:30:4f:0d:d0:35:1d:d4:32:96:be:9d:f6:78:76:61:43:
         d7:9e:d2:b3:ec:09:06:64:03:3e:a8:e1:cb:e2:b2:56:46:81:
         65:36:a3:cd:37:e8:26:15:28:fc:a8:bf:ca:1e:fd:e3:69:a4:
         10:0a:e9:75:a4:2c:6a:58:7a:d9:3f:a7:d0:8e:f4:14:be:a7:
         80:2a:ac:84:d1:b3:81:6a:a7:f9:a8:f8:06:94:f7:98:12:aa:
         0e:8b:4d:e6:eb:7d:62:ec:1c:00:f3:4d:19:2a:a1:3b:70:04:
         2d:df:61:07:bf:6f:5a:69:d2:cc:b6:dd:4a:ae:ab:90:ed:f5:
         2b:cf:0a:fb:be:c3:d3:9f:72:e4:bf:83:15:30:19:e0:79:99:
         c0:e6:33:cd:09:3c:ce:2f:1d:6b:b5:48:08:59:5d:70:a2:e9:
         74:a7:18:8e:87:32:7c:c1:cd:62:cf:1b:c6:45:82:19:5f:1d:
         ab:e6:e9:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGJ5JdUudz7tR9P0g0KhzNiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNzQ4Y2QwMGNkN2ZlNmEyMTc1NWFmNjQyZDg4MWI4ZGQ5
YTM5ZjcwHhcNMjYxMDI5MjMwMDIxWhcNMjYxMDMwMjMwMDIxWjAzMTEwLwYDVQQD
EyhhOTM3MGZmYzEwNmUzMzA2ZWZjMjYxNDJmYTBmODdkMDM2MTQ3ZjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpwbJIwj+6elEAX4KSTP5Fo95xpO
ePJxXZ9Fy0GVKNNNRSeO4SLc3k/CtaVaR2YgwMOkhUygIAcx5r7P6tg+IuuyRbZO
Uqa252HS/0QBmoQsvQrTQG+83CE4nBuTcHkv0sDf5Qk6BoVPbTgDx2cIpxl1M57M
ccWTrDsbNQlIxajLmwIsoap+ttVdzPl5/lbyq+mnWbvdl0ApQidfaW/wPj4zDiKp
fGnS9CRqNs8Q9hniYOFv1QnqCo/seMsiWYD4Wk1wB9lktfOs2s9Re2/4JED972YR
zYdD0MEjDKD6fk+rUiIQnHZLgRCTvGGRdsIOxyXcBJeAOMxTmHTsbm57qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKk3D/wQbjMG78JhQvoPh9A2FH9TMB8GA1UdIwQY
MBaAFMp0jNAM1/5qIXVa9kLYgbjdmjn3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW5TTTBBelhfbW9oZFZyMlF0aUJ1TjJhT2ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xNmVlYjItYzgyNy00MmM5LThlNDgt
MmEzZGY5YjMzMzEzLzEveW5TTTBBelhfbW9oZFZyMlF0aUJ1TjJhT2ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8xNmVlYjItYzgyNy00MmM5LThlNDgtMmEzZGY5YjMzMzEz
LzEveW5TTTBBelhfbW9oZFZyMlF0aUJ1TjJhT2ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASMKNPnp
3qE9e+XeqY9RY4omQENI6Y9SYo958643GPOBi79FxQBi+eGV78PbXOrl6uk0rIdv
ttogvx4ZESB2oRd/+R+Pv06u0vQwTw3QNR3UMpa+nfZ4dmFD157Ss+wJBmQDPqjh
y+KyVkaBZTajzTfoJhUo/Ki/yh7942mkEArpdaQsalh62T+n0I70FL6ngCqshNGz
gWqn+aj4BpT3mBKqDotN5ut9YuwcAPNNGSqhO3AELd9hB79vWmnSzLbdSq6rkO31
K88K+77D059y5L+DFTAZ4HmZwOYzzQk8zi8da7VICFldcKLpdKcYjocyfMHNYs8b
xkWCGV8dq+bpNA==
-----END CERTIFICATE-----
Generated at Fri Oct 30 05:08:13 2026 by rpki-client