Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft
File:                     Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft (raw, json)
Hash identifier:          Dda+agul5pAJrmyZiGfoL51Wdec50GgEPDhoKooFp3I=
Subject key identifier:   DC:E8:6D:D5:14:94:C4:81:6B:FF:4C:6D:67:EB:C7:C1:C8:71:69:9F
Authority key identifier: 63:CB:81:A7:AF:13:6D:96:F0:C7:60:51:DA:6E:4D:05:D1:FF:63:3D
Certificate issuer:       /CN=63cb81a7af136d96f0c76051da6e4d05d1ff633d
Certificate serial:       019F935B4F19C434F59FAD29C6464E593E05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft
Manifest number:          41
Signing time:             Fri 24 Jul 2026 09:01:02 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:02 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:02 +0000
Files and hashes:         1: 7cTjsLRiYYSxjEiyyxvrM7VcUoM.roa (hash: 9oRDcj/n0yIWrTx9daAB6UyBKfL+1eMjORwY8HvJ18Y=)
                          2: Y8uBp68TbZbwx2BR2m5NBdH_Yz0.crl (hash: ZRpRVUAV+HH3wW7hJ6RGkj4HXGKavPP40fnQcb3UhcY=)
                          3: p0eoEVp2ZRfAFQIEeNZFFp6BKKo.roa (hash: 7ygvBpXf/4xZkV++cCRPOzyCKN66G0s7NhzA+lJoryE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:4f:19:c4:34:f5:9f:ad:29:c6:46:4e:59:3e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63cb81a7af136d96f0c76051da6e4d05d1ff633d
        Validity
            Not Before: Jul 24 09:01:02 2026 GMT
            Not After : Jul 25 09:01:02 2026 GMT
        Subject: CN=dce86dd51494c4816bff4c6d67ebc7c1c871699f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:13:b1:54:88:3e:91:0d:a9:a0:c2:00:b0:09:
                    4b:ee:c9:d8:d4:02:85:94:0e:06:8d:a3:6b:23:b7:
                    28:d9:af:c8:33:6c:31:4f:4f:02:50:9d:42:53:11:
                    5a:48:ac:d2:33:3f:f0:3c:ff:ac:7f:87:ba:3f:98:
                    17:50:7a:42:79:bf:5a:00:20:15:6e:44:12:98:bc:
                    53:07:b3:40:6f:69:be:95:75:84:09:67:9e:3b:d0:
                    55:ce:59:6d:91:d8:4d:bb:15:44:7b:46:23:6d:53:
                    93:72:40:88:c9:e4:cb:49:68:dc:9d:03:74:c1:a3:
                    0e:fd:a5:c6:8a:51:4f:51:25:03:8c:2e:0f:5c:10:
                    53:a3:18:cc:05:ad:a6:15:85:ac:1d:d0:52:28:74:
                    c9:16:9a:a3:19:8c:35:d0:5e:49:31:36:6f:3b:ec:
                    b1:00:43:34:7d:df:fd:29:6b:9a:bd:87:79:ef:f1:
                    6f:ce:8d:f1:ac:e2:e3:db:ff:7f:6d:1e:e9:66:87:
                    40:6c:66:a4:2d:12:a2:45:3a:7c:e6:f9:3a:c3:70:
                    60:8c:70:32:f9:6a:46:b6:26:95:55:7f:65:e8:72:
                    49:47:e6:c2:6a:cc:5b:f8:b0:45:b0:cc:1b:81:6e:
                    bd:21:92:4c:d6:af:75:72:81:c7:0d:51:ef:de:43:
                    9d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E8:6D:D5:14:94:C4:81:6B:FF:4C:6D:67:EB:C7:C1:C8:71:69:9F
            X509v3 Authority Key Identifier:
                keyid:63:CB:81:A7:AF:13:6D:96:F0:C7:60:51:DA:6E:4D:05:D1:FF:63:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:f4:9d:1c:a1:9b:f2:ea:1f:74:bd:2a:b6:c5:53:0a:94:03:
         f3:1e:9e:3e:69:23:9a:b8:e5:ab:b9:f3:ee:7c:11:a5:77:67:
         1b:2d:3f:ec:0e:b5:4a:31:64:aa:08:8f:cd:84:7c:58:8c:15:
         38:e3:e1:27:3e:de:0a:c1:48:12:2f:0b:95:18:06:db:f6:61:
         ab:4d:b4:18:23:32:bf:80:bd:4c:41:d1:c9:f5:6b:87:72:96:
         fd:cb:fd:63:5e:eb:cf:cb:52:f4:da:07:72:12:07:44:99:8b:
         9f:fc:ec:f1:94:ed:23:0d:09:32:6b:46:42:03:24:c2:1e:52:
         26:71:f7:95:9d:09:d7:04:34:ce:b4:e5:a3:87:d0:f4:3e:14:
         24:26:ee:a3:a5:7f:e5:f9:84:6e:a1:85:1f:df:26:01:aa:c3:
         30:2a:50:fb:f9:84:d7:c7:0e:42:d7:1b:b5:11:9c:40:32:4c:
         2f:12:d8:d8:33:d1:57:95:e1:50:af:b6:d3:08:74:49:21:3a:
         92:18:b0:a8:6a:eb:27:1c:93:11:30:04:d1:32:fb:16:83:86:
         78:23:08:c8:5c:5a:2d:59:fd:02:43:63:4f:88:aa:1f:7c:6f:
         09:44:2a:ee:b8:54:bc:45:d0:38:e0:cb:f1:f1:e8:65:e8:fb:
         00:1e:6e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:50 2026 by rpki-client