Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
File:                     YWFHDTm-S6LdXfj6R7FjlieOZwo.mft (raw, json)
Hash identifier:          oe4BYqOt3xilAG0Xo3SDu4fncjzESww+8qn7PhPAobE=
Subject key identifier:   1B:06:61:9B:00:68:D6:BC:1A:1F:F8:A1:3C:AF:A0:55:9B:98:77:0B
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Certificate issuer:       /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial:       019F90916EE77145775D926695A9722D1135
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
Manifest number:          1581
Signing time:             Thu 23 Jul 2026 20:01:17 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:17 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:17 +0000
Files and hashes:         1: A2edUifbSShzdJ1Gis-SqBKDNH4.roa (hash: Vy37s5YBxFgEPmxrlCq+GM34iA4Ip0Oc6gKZuBhegNc=)
                          2: BPuWk6CfIovuR0hN4ab9_Vg8fpM.roa (hash: Io/zg3oPjnrBQRK8TUjjHMBbPc/oa9KH3Wg0gDqsd6M=)
                          3: CMj-58s7HjFJfPYnqyY_H8iMras.roa (hash: l/VgtwLP67EeRyfmCVyIdNqgvDzJvQY/H0EIMqQ+RF0=)
                          4: LYaVyURA1Hqer0FhBdoqEAlltug.roa (hash: NWGVsZzZidWUl0MNChqOvov8kyqJB0zTJQ1HSXjGZw4=)
                          5: MFBUVUGoLTFb6mMUZK00McW_7z0.roa (hash: F53ezXG/M5tdcqiYCNPbO7yVUwgcKU5OMRV7nr04e3o=)
                          6: YWFHDTm-S6LdXfj6R7FjlieOZwo.crl (hash: EXZ3Hywr0TTqYU3zIEwHZTz56UhRItoeFp4MyXNJIyA=)
                          7: kjQiljeUwEx-0O3qxw80JEcNHTk.roa (hash: Nj75u7cki0A+yVZeLl5QIeG1w+agzNtRDNjOCJHZFpc=)
                          8: m4DpurF7pXpEMEv3x379sHsIzI0.roa (hash: AQ+Y/OhWDwIEf3fur9MU0/7BD96QO4hZo7G0csSPbMo=)
                          9: qaLHn37xtjw3qy4avBKJZx30pG8.roa (hash: 37z1vS8oU1I2E/gSNbcyl0yQyKdvAVXffCULUq/vHIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:6e:e7:71:45:77:5d:92:66:95:a9:72:2d:11:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
        Validity
            Not Before: Jul 23 20:01:17 2026 GMT
            Not After : Jul 24 20:01:17 2026 GMT
        Subject: CN=1b06619b0068d6bc1a1ff8a13cafa0559b98770b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:92:51:b7:43:95:be:fb:8d:b9:73:78:ef:a6:
                    39:ff:f2:8c:2c:be:7c:88:e3:31:aa:4b:0d:9d:a2:
                    c4:81:71:d9:7f:a3:a3:d3:6b:f4:53:ff:9e:02:95:
                    c5:4d:fe:d8:53:06:ba:57:6a:eb:02:2d:31:0c:f0:
                    3f:e2:bc:20:26:e8:0e:75:79:0e:a2:b6:87:60:a4:
                    ce:84:ad:7a:c0:0f:99:be:73:67:70:8c:07:71:86:
                    3a:de:cc:02:7f:cd:c0:f4:5c:91:4e:5a:dc:a7:69:
                    fd:84:66:1c:48:c4:66:b8:b5:7d:2a:e2:e7:fc:14:
                    f8:e7:97:0e:4d:ec:4a:9d:f4:f5:46:a0:7f:bc:1e:
                    10:b9:e7:c9:62:bf:5f:96:4e:aa:1e:ea:20:c9:32:
                    c0:bb:ca:4f:db:df:b5:71:11:00:84:6d:a0:2f:04:
                    1c:fc:f1:5c:b8:bd:2c:d1:be:e1:bd:a8:ed:a4:ec:
                    d7:89:53:b7:30:fb:b5:93:f9:fb:8c:3e:9f:4d:51:
                    90:53:f3:4d:a6:34:21:01:14:9c:9f:2f:d5:35:e4:
                    16:eb:bf:ad:07:f7:fb:fe:3f:6d:b5:88:ce:db:45:
                    40:78:3f:3b:18:03:60:20:b6:9d:26:90:ad:37:f5:
                    1e:be:b1:9c:b7:fe:88:1e:38:cd:33:e1:26:ae:cd:
                    5b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:06:61:9B:00:68:D6:BC:1A:1F:F8:A1:3C:AF:A0:55:9B:98:77:0B
            X509v3 Authority Key Identifier:
                keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:20:67:c4:75:f1:9e:5b:38:5d:05:29:d9:96:44:24:e8:73:
         94:6b:ff:a5:66:1c:6a:ac:de:20:cd:10:ad:e4:78:20:94:05:
         32:58:01:18:04:e4:7c:48:b2:e7:3c:e5:0f:5e:03:be:1f:f4:
         84:2b:27:c3:5a:27:f0:eb:f8:53:8e:6c:96:70:4a:0e:74:92:
         f9:e5:be:cc:2e:2d:1b:3e:bb:33:bb:52:89:ab:dc:2d:e5:fb:
         d3:c0:76:d2:0c:b1:40:59:95:75:74:5c:df:2c:fa:cd:32:5f:
         95:93:26:12:90:fa:0e:c7:af:3d:64:eb:e1:23:20:9d:c9:37:
         74:ed:17:86:ac:36:55:4f:59:4c:4c:29:56:45:59:c9:20:b2:
         17:c6:b9:aa:fa:da:13:8f:5b:40:19:b7:4e:7d:48:91:25:6f:
         93:c4:32:41:a8:f0:a3:a5:3e:ec:ba:64:3e:23:dd:12:b7:5a:
         42:27:b0:94:14:51:b8:86:bd:54:10:fc:33:5c:fb:ed:bd:38:
         7f:fd:fd:85:c2:68:0d:b8:30:42:f9:49:5d:ad:0e:7d:82:03:
         74:b8:39:5b:98:ae:3c:4d:8b:00:4e:15:f7:34:de:aa:b0:ba:
         d8:6e:62:66:dd:fb:ac:6a:36:51:74:d1:cc:e3:20:b0:7a:2a:
         ec:e7:cc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:04:01 2026 by rpki-client