Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
File:                     yZE15YfLs4vh63tt6cSAKdBF0nM.mft (raw, json)
Hash identifier:          Owvq3ED5ulTkM17+ZLJ7ZxT/uSJFCkxeXDXtleIsWEQ=
Subject key identifier:   D4:D0:43:1D:57:B6:5A:30:20:FA:3D:73:91:7C:17:2B:B6:EC:B9:67
Authority key identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
Certificate issuer:       /CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Certificate serial:       019F90FEF92DFA4D168711E539EF94846680
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
Manifest number:          071A
Signing time:             Thu 23 Jul 2026 22:00:56 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:56 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:56 +0000
Files and hashes:         1: Y5vED9_-DcGMaaxbEGOZus8MwVQ.roa (hash: G2iq16qjDO2AmE19u6Mdnenb3I/Kvxji/seB7NO5CFY=)
                          2: gKtjzQMB06yDauEd9zVELt-Geqk.roa (hash: ON0aCx2enNugObjEPugyFFI494d+5BTaKTrArKDjsJI=)
                          3: sLC5YO5xONWk4v-wyFAtQfaIubc.roa (hash: RnXdiuhlkryBeMlrPXhg5Tc0W7BvyjnuvWyXURl030k=)
                          4: yZE15YfLs4vh63tt6cSAKdBF0nM.crl (hash: LdS4/m4sr2KsQxTd75ST6gIopETs1iLX7G0y2pJ4PJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:f9:2d:fa:4d:16:87:11:e5:39:ef:94:84:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c99135e587cbb38be1eb7b6de9c48029d045d273
        Validity
            Not Before: Jul 23 22:00:56 2026 GMT
            Not After : Jul 24 22:00:56 2026 GMT
        Subject: CN=d4d0431d57b65a3020fa3d73917c172bb6ecb967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:59:c8:2d:12:74:f3:c8:2d:0d:94:f2:7d:5b:
                    b0:b5:6f:ed:0a:9c:ae:9c:3e:89:9b:5b:0f:f7:df:
                    c6:85:c5:ad:7d:5e:71:b8:3c:15:5b:25:df:bc:ea:
                    2d:34:5b:f0:5d:4f:de:96:18:34:5f:c7:d6:17:80:
                    70:0a:f1:bd:2e:44:94:84:f2:11:8a:5b:b4:df:a8:
                    85:38:69:e9:03:d6:8f:a5:ea:bf:69:95:43:fb:83:
                    e6:4b:12:64:96:fe:9d:5a:e7:96:02:42:7f:96:11:
                    f3:2f:8a:31:0b:b8:5b:cc:7f:73:a2:5c:91:e6:f3:
                    de:46:80:d3:f9:73:2f:18:94:04:be:05:53:98:17:
                    97:ef:9e:61:ba:f1:bb:62:35:44:c3:73:3a:0e:01:
                    e2:21:c5:a0:a8:c3:fe:04:10:79:a5:d6:26:27:87:
                    65:ef:4a:68:4e:be:12:49:75:ab:8e:6f:07:a5:64:
                    2f:7a:ee:86:46:6e:2c:88:e4:79:a4:53:4a:00:85:
                    61:d8:ec:af:2a:25:33:78:9b:e6:0a:ec:07:fd:40:
                    da:fb:e8:4c:a0:7a:51:2b:96:40:d8:65:6e:72:b2:
                    28:22:2d:41:d8:5f:a5:55:6d:04:02:a7:95:4d:d0:
                    0d:6b:2e:0d:ac:d6:35:99:c5:5b:ef:fa:24:40:d4:
                    24:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D0:43:1D:57:B6:5A:30:20:FA:3D:73:91:7C:17:2B:B6:EC:B9:67
            X509v3 Authority Key Identifier:
                keyid:C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:b5:22:5a:cd:d1:3e:78:2d:80:41:a4:4a:4c:1a:89:ec:da:
         94:5b:c7:db:75:9d:d1:b2:28:21:0a:70:48:9b:47:52:f9:03:
         82:e3:3b:38:89:27:90:a6:07:b4:d1:db:50:99:c2:9f:12:ff:
         78:9e:28:94:a0:4f:dd:7e:44:12:4e:6e:54:01:1e:d7:0e:fe:
         4c:fd:a7:f9:e6:00:d8:b7:11:21:f3:16:e9:97:d7:2f:d6:da:
         18:d7:6b:19:03:36:b2:2f:4b:ba:41:70:0a:89:c3:d1:bd:6e:
         32:82:c5:30:2c:6f:c2:01:27:79:af:39:93:2a:bf:c0:63:87:
         00:61:e1:4a:99:66:67:98:a6:f7:b6:a3:fd:74:3f:f4:7d:c8:
         e5:67:3d:7f:3e:ec:30:53:9f:22:e1:0d:24:19:9b:d9:82:df:
         bb:3f:a2:49:a8:41:f3:3b:07:9f:67:f3:92:e5:4c:df:09:a0:
         8b:96:22:6f:86:df:75:87:82:db:5c:c0:5b:f2:9d:c0:50:8a:
         91:a6:dc:fe:31:23:b3:97:24:4b:f2:81:ca:3a:b2:7f:ac:7b:
         a2:12:e8:8b:fa:7c:00:fd:fa:18:1b:a0:43:97:13:eb:c6:1c:
         b6:91:1d:90:f9:86:da:de:16:a8:9e:7b:ad:27:ea:eb:ed:d3:
         d4:26:35:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:10:15 2026 by rpki-client