Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
File:                     ypJvljURiT-k2fvV5k4PikODfkA.mft (raw, json)
Hash identifier:          dTZcC/mA1iax8fE9/X7waIxPn3irQDth/fgoFWdpqhE=
Subject key identifier:   B1:C4:E6:5A:C8:02:25:C6:08:75:CA:35:1E:BB:25:26:A3:3E:42:6E
Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
Certificate issuer:       /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Certificate serial:       019F90FF55DCE993B0AED6074CE8F2FD5CA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
Manifest number:          19C6
Signing time:             Thu 23 Jul 2026 22:01:20 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:20 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:20 +0000
Files and hashes:         1: 8qyFq0Jw2vV5jElWSS9BdEiMHZI.roa (hash: v/1+49rt+1xmD87nJbTdyd9Pwk6XUeag3Zc7Vhx+XuE=)
                          2: ENuqnzA3ruRTEDO8nV_unXXFG3s.roa (hash: jqM94Qjxb5BwlTK0O468kBtFYUuLS+gQcO3XoaFwmmI=)
                          3: roAOVMvnNsfrpVkf2GW7F0kGBAc.roa (hash: IkSo7h5qyB5UPtAZ0suaOuHLsEp0jVopR3VGK0uOiaE=)
                          4: ypJvljURiT-k2fvV5k4PikODfkA.crl (hash: FcBD7/a+QAtSK8y2T2GoaqxOlBMvdA9AyqaQ0n6Fsmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:55:dc:e9:93:b0:ae:d6:07:4c:e8:f2:fd:5c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
        Validity
            Not Before: Jul 23 22:01:20 2026 GMT
            Not After : Jul 24 22:01:20 2026 GMT
        Subject: CN=b1c4e65ac80225c60875ca351ebb2526a33e426e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:27:d4:15:fe:80:a6:7b:e1:1b:99:6f:4f:5f:
                    91:c1:5b:47:6e:bc:d8:cd:c6:b7:e1:6e:f6:7f:77:
                    83:31:19:28:d5:a4:a3:aa:c6:ae:15:cf:7d:de:ec:
                    3e:e5:41:2e:f4:40:ce:2d:24:ea:92:ce:33:4b:71:
                    50:e3:dd:99:50:47:d8:3f:5f:e8:57:ba:a9:8e:6a:
                    91:99:db:bd:93:2d:08:e6:d9:62:eb:ea:9f:1f:ef:
                    e7:84:88:cc:3a:db:55:ed:ba:3d:4b:7e:3f:bc:4b:
                    e1:2a:f3:a0:75:f8:42:39:73:92:2a:e6:6e:7e:28:
                    57:0c:70:d9:8f:66:56:65:fa:eb:55:1c:cc:ea:d5:
                    9b:45:7a:5d:6d:87:2d:9a:72:c0:2e:52:c0:0a:01:
                    5b:97:57:19:c0:ae:6f:a8:9c:cf:fa:c7:62:c8:a4:
                    eb:51:25:11:b2:b1:3c:e4:45:43:5f:a5:dc:50:1a:
                    f3:d2:7d:c0:f4:11:09:13:55:97:83:3e:75:1f:90:
                    a8:93:85:a0:56:82:45:1a:03:12:ad:ab:bf:c2:22:
                    e2:37:a5:d4:9f:36:fa:b6:f2:87:88:44:5c:b9:d4:
                    11:24:00:6f:e5:06:14:57:eb:d4:d8:e4:61:d9:8a:
                    6b:84:93:c6:94:2f:f8:e9:0c:f5:68:d4:07:1d:08:
                    5f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C4:E6:5A:C8:02:25:C6:08:75:CA:35:1E:BB:25:26:A3:3E:42:6E
            X509v3 Authority Key Identifier:
                keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b9:27:40:97:ba:57:9e:fc:79:06:6a:e2:be:9b:c7:6c:23:
         60:49:a5:62:f1:de:d9:65:f1:c3:9e:a2:08:af:e7:38:29:93:
         c8:bd:6d:c5:6c:dc:91:e6:e7:b2:b6:14:34:b8:0d:6c:08:dc:
         fa:82:be:99:a3:c7:10:9d:be:06:68:6c:40:12:45:06:8c:00:
         65:fc:a3:dc:78:61:51:00:17:26:f9:b8:e0:84:de:14:1e:a3:
         9f:af:a1:ba:74:b0:75:95:c4:e4:01:9e:80:30:37:d3:7f:22:
         a4:f7:29:34:cf:03:3b:eb:4b:eb:38:5e:e8:b7:27:33:fc:8b:
         54:06:e3:de:29:d8:70:14:90:2b:60:d3:39:7d:f4:47:e9:c9:
         c2:ae:cb:de:bb:09:09:6c:8a:16:a5:35:0e:de:75:55:18:70:
         52:1e:08:46:c4:0a:88:0e:a2:25:08:34:ed:32:c9:a4:0a:cc:
         07:2e:e1:cd:76:f2:17:48:3d:06:47:e1:77:33:a7:e7:77:32:
         86:89:7b:b3:9f:c1:af:52:21:94:f2:ba:89:63:ba:f2:84:72:
         8c:61:c1:57:21:81:ad:ad:a4:df:6e:0a:c1:49:21:20:13:ec:
         c1:77:13:77:c5:a1:e7:a7:bd:ac:9c:f3:70:a7:f7:32:e7:f1:
         7a:60:b0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:22:59 2026 by rpki-client