Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
File:                     y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json)
Hash identifier:          Hd90XM27EjvIMROJJGBpgefsaH7+BGvSRFlZId1SqSg=
Subject key identifier:   17:B4:C9:DB:07:73:8B:89:49:4C:B1:93:7C:DE:F7:30:1B:AA:A6:9D
Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
Certificate issuer:       /CN=cb889feed135dc03492d8b3e828c7309587d1411
Certificate serial:       019F9512AEB18FF1DD7589787723C8579BFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
Manifest number:          1466
Signing time:             Fri 24 Jul 2026 17:00:57 +0000
Manifest this update:     Fri 24 Jul 2026 17:00:57 +0000
Manifest next update:     Sat 25 Jul 2026 17:00:57 +0000
Files and hashes:         1: Qt8hBCMlNLI8nIk_LiMf9y2OnJw.roa (hash: GjRUGfRDG86hd7K9wU5XQ1rme8zCmD1Q06yAXGf5F6Q=)
                          2: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: 4pJ4d2SAkD8cH/9V3gcwtvBTKqwvjUVerbf5dMYgVNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:ae:b1:8f:f1:dd:75:89:78:77:23:c8:57:9b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411
        Validity
            Not Before: Jul 24 17:00:57 2026 GMT
            Not After : Jul 25 17:00:57 2026 GMT
        Subject: CN=17b4c9db07738b89494cb1937cdef7301baaa69d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8e:9d:3c:56:8d:34:96:e0:2a:4c:71:57:c6:
                    a9:8d:30:bd:ec:d4:a2:02:fc:92:dc:89:1f:17:3d:
                    43:f7:8b:0e:d9:ff:00:55:87:bf:e1:b6:c3:16:0c:
                    66:11:3b:53:3f:1d:44:26:c0:4b:93:af:20:7b:d9:
                    c0:4d:a8:0d:f5:be:93:c6:fa:92:e1:93:06:9d:1c:
                    40:3d:2c:1a:cd:35:f0:46:4c:ec:dd:c7:58:03:bc:
                    2f:01:63:5d:95:b3:8a:b0:cf:7f:52:ef:c4:52:f6:
                    8e:e6:33:a9:ea:0c:b5:63:18:a2:97:3e:52:07:2c:
                    34:c2:d9:17:4f:fa:64:a6:8a:68:50:a2:13:7d:64:
                    31:bb:52:4f:07:38:e9:42:30:52:e5:8e:b3:b4:da:
                    e7:3d:8a:f1:9c:b9:06:67:e3:99:f9:3b:9a:c6:db:
                    61:91:56:f8:c3:a5:ce:6d:33:db:de:15:98:b1:d2:
                    61:45:35:98:d1:7e:4b:a5:08:08:ad:9a:e9:94:17:
                    0c:52:a2:5f:73:2b:f2:b8:55:cc:34:63:d4:5c:2e:
                    f1:89:df:f7:ef:db:70:eb:57:31:58:a4:20:8f:2b:
                    56:0b:d9:94:c4:f8:7e:8f:5a:5b:a4:1f:b3:bb:fb:
                    77:3b:8c:08:8d:18:1f:09:5a:03:2d:4a:0f:c6:6c:
                    49:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B4:C9:DB:07:73:8B:89:49:4C:B1:93:7C:DE:F7:30:1B:AA:A6:9D
            X509v3 Authority Key Identifier:
                keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:26:9b:0d:f2:75:59:2e:28:8f:5c:ce:9f:f7:d7:a7:0f:60:
         56:b0:8b:f0:78:62:5d:f1:17:05:43:50:a9:08:18:c3:0c:30:
         ce:a8:ff:97:d6:a4:28:fd:a7:d9:1e:50:1d:99:47:ce:67:b6:
         7b:ad:72:e1:25:2a:b2:dd:9d:1b:86:6d:41:55:ae:5b:73:c0:
         4b:f8:a8:e5:4e:ae:77:6a:33:a9:d6:b0:5e:12:d2:e7:e5:13:
         d8:bb:91:a6:75:d9:88:9c:62:a2:d9:f1:03:8c:6f:8f:14:00:
         e6:e1:ee:f4:a1:97:a1:67:5b:2e:90:13:5c:af:62:30:a1:64:
         07:9d:d8:7d:23:50:a1:52:0c:25:bb:6f:33:0a:85:32:00:9d:
         b1:ae:ac:09:48:6d:b9:98:d5:6b:1f:99:62:f5:39:bd:0e:dd:
         cb:a6:51:b7:96:e4:f4:f8:0d:74:be:78:4e:8d:3c:83:ad:2b:
         da:f6:48:ab:60:43:28:5a:07:75:c6:0a:1b:73:39:09:93:4a:
         72:90:09:ec:fa:0f:00:1d:0e:ab:14:e0:a0:75:44:f7:2b:0a:
         7e:29:05:1b:a9:68:b3:d8:6e:3b:da:28:6b:8e:b6:74:6d:3a:
         45:1f:5e:ec:d6:ed:c1:97:1a:46:96:88:4d:37:76:cb:dc:59:
         c8:d2:e6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:48 2026 by rpki-client