Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
File:                     yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft (raw, json)
Hash identifier:          A0/dWqKqD0zmeToBiH0AYw8JHnb+B0qs4uwB9ifF6XU=
Subject key identifier:   F1:DE:38:62:2A:2A:AF:CE:30:BD:3D:38:E3:AB:A2:38:D9:31:7A:CD
Authority key identifier: C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
Certificate issuer:       /CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Certificate serial:       019F92B672E4C4D21FBC8BAE9B4A8DE1991F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
Manifest number:          0F81
Signing time:             Fri 24 Jul 2026 06:00:58 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:58 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:58 +0000
Files and hashes:         1: cN4RDtGLM5l2DvX_T4i1shDStCU.roa (hash: yvuehCFR0SYwl9RZeEUmpN0/FZZPNS0ZYV+AhmYhkto=)
                          2: yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl (hash: xEsVAEP7+7pNYClzcSW2Xji1z/xDt7840+IVtau3rM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:72:e4:c4:d2:1f:bc:8b:ae:9b:4a:8d:e1:99:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
        Validity
            Not Before: Jul 24 06:00:58 2026 GMT
            Not After : Jul 25 06:00:58 2026 GMT
        Subject: CN=f1de38622a2aafce30bd3d38e3aba238d9317acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e7:1b:c8:17:5d:5f:20:f8:85:30:1f:1f:5d:
                    68:20:3f:b7:d7:24:1f:a0:80:48:0d:c9:87:53:23:
                    0d:c1:d6:81:4e:37:4a:70:3c:b9:1d:ed:18:7e:5e:
                    32:b4:ea:d6:e2:7d:b7:d2:9b:9e:f2:d0:98:23:70:
                    52:b4:22:a4:2d:c9:4a:cc:0e:e8:8c:25:d8:1e:69:
                    62:bd:3b:1f:c2:b9:b8:75:d9:ae:89:d0:3b:2f:fa:
                    48:5d:0b:82:6b:56:97:f0:14:99:b8:8d:d8:a6:ca:
                    b3:c8:fe:1c:dc:bf:12:dd:51:6a:ed:13:47:dd:3e:
                    f0:9f:7c:b6:17:a5:47:2c:83:67:57:d8:ea:82:e8:
                    43:fb:b8:28:ab:54:95:d6:d9:14:f9:ad:2d:7d:fe:
                    53:02:b7:8f:2d:0a:6d:fa:f4:bb:22:fb:7d:93:81:
                    4c:3a:95:d0:f8:30:cd:20:60:15:28:a8:92:1b:a9:
                    43:08:00:75:d6:27:fd:90:0b:78:67:89:d2:1d:9a:
                    be:ab:5a:5a:6a:6e:79:c2:3c:ca:7f:aa:1a:44:31:
                    a0:0e:b7:b5:ab:43:fe:d7:11:d0:49:23:f0:ac:89:
                    af:60:c4:ba:fe:ec:98:bd:06:56:0d:fa:bc:a2:f4:
                    73:71:f9:ed:ab:ed:99:42:30:16:ca:89:e3:ac:5a:
                    2d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DE:38:62:2A:2A:AF:CE:30:BD:3D:38:E3:AB:A2:38:D9:31:7A:CD
            X509v3 Authority Key Identifier:
                keyid:C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:27:52:a6:ec:54:6f:9c:19:ff:91:04:1d:d1:d8:d5:f5:c1:
         32:fa:8b:b5:14:f4:77:ef:49:cd:59:a3:19:13:6a:a0:70:d7:
         8c:d0:9f:64:84:17:ab:58:9e:63:fc:63:98:65:84:d5:d0:d8:
         51:38:56:1d:0e:34:df:61:3d:48:85:a0:27:10:5b:53:fd:d4:
         29:59:f8:58:87:53:5f:2b:92:f4:5e:fe:f3:8a:c9:45:5e:55:
         5c:4b:e7:22:5b:11:93:ff:b0:62:58:77:4b:0f:3f:31:77:30:
         5a:00:ae:a0:44:63:cc:a1:ef:97:d2:94:a4:82:6c:47:d3:a3:
         98:0e:64:46:b0:df:f2:f5:13:83:47:e8:15:08:88:34:6a:9d:
         7b:23:af:03:57:dd:14:38:c6:72:c9:2d:05:21:ee:9d:ae:6a:
         4a:eb:51:62:7c:71:30:69:7d:5a:a0:3c:78:57:5f:bf:17:5e:
         50:ff:97:b5:60:2d:43:e9:ec:9c:51:17:02:d2:49:ce:c7:20:
         e7:5b:7f:f4:f9:9b:0d:5b:5f:d1:d3:76:e4:ba:4c:98:e3:21:
         5b:d5:a1:ac:b0:0e:d4:71:51:dd:4e:61:4a:aa:36:eb:b0:f3:
         c2:90:5e:ea:0d:41:16:04:e9:39:4c:12:c6:d9:7b:ac:f2:c9:
         a6:c2:9f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:52:56 2026 by rpki-client