Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
File:                     yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft (raw, json)
Hash identifier:          4yq3jhJD+c3tuyK4QSU1RXOoDedS+ltZMpZcRJ5ymME=
Subject key identifier:   98:4D:BF:CA:7B:13:AC:88:8D:B8:1F:59:E1:6C:15:3D:C9:8E:78:37
Authority key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
Certificate issuer:       /CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Certificate serial:       019F9391C908F96358B97F2AFECB553A3792
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
Manifest number:          163B
Signing time:             Fri 24 Jul 2026 10:00:32 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:32 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:32 +0000
Files and hashes:         1: Q9Bl2Y8XynFhwHzSJcPaVyeQxvU.roa (hash: PqOxTXkE1hZGBT5c4H4bbRh8w/mimKAW3aD/Vceb+Hg=)
                          2: SHeQcX4koxBQRv_Fnf7btNJU99g.roa (hash: 8unaGmLOmfi1pzpYrPstmZfA+HzBWFpq+VVnPVsq10I=)
                          3: gpyVlC0l_arGjmVVCGk8FwUeXCo.roa (hash: atjXbXi2DUOCPxkI2GIM/Oz+gbwXdF8QQwJzid/42jw=)
                          4: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl (hash: OH6NUCJDf/sqOoYbl3bYEzZopFbWsnzmLoPtF+JTKDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:91:c9:08:f9:63:58:b9:7f:2a:fe:cb:55:3a:37:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
        Validity
            Not Before: Jul 24 10:00:32 2026 GMT
            Not After : Jul 25 10:00:32 2026 GMT
        Subject: CN=984dbfca7b13ac888db81f59e16c153dc98e7837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a6:1f:42:56:26:39:69:21:98:02:ca:7c:b8:
                    c6:85:92:d9:12:82:88:a3:4c:a6:ef:c4:d9:09:6d:
                    6b:d4:03:13:a1:5c:6c:ae:04:ff:42:b3:aa:9a:33:
                    7f:ec:7c:0a:3a:b4:55:32:49:66:cb:bd:c9:65:9d:
                    71:61:cb:af:e6:92:a5:14:34:8c:7a:28:d7:45:36:
                    5a:98:66:ce:0f:d3:78:09:18:d2:d9:20:0a:e1:b9:
                    c7:2f:31:c6:7a:84:81:6e:25:5e:c8:6d:a9:e6:6d:
                    70:48:66:a4:f3:96:e0:ed:f8:73:2a:3e:81:b8:ad:
                    2d:ff:4e:20:f6:05:c2:92:2f:92:50:de:38:2b:fd:
                    6f:4c:bb:66:ec:af:2d:e8:21:af:17:ce:52:b9:d4:
                    98:e1:7b:84:b8:bf:a9:de:20:a5:c7:79:a0:4e:cf:
                    79:16:6d:14:ee:4f:11:c2:40:44:50:2e:02:50:39:
                    fa:cc:e5:e9:01:f1:1e:8d:56:af:b4:04:85:87:d2:
                    29:7c:e8:2c:3c:31:83:2c:91:f6:23:37:0d:9d:b6:
                    2f:2c:29:ee:7f:e3:f1:12:d0:53:0d:ec:59:95:d1:
                    bd:35:41:36:c8:d4:24:d5:16:ea:cc:51:8b:f9:ec:
                    bb:03:ba:c8:76:97:aa:a5:f9:47:d7:e6:3a:b3:36:
                    5e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4D:BF:CA:7B:13:AC:88:8D:B8:1F:59:E1:6C:15:3D:C9:8E:78:37
            X509v3 Authority Key Identifier:
                keyid:C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:25:f8:27:56:9c:4b:e1:07:46:c9:43:f6:bf:c5:d3:cb:40:
         07:30:ee:d9:a0:9a:95:38:15:c2:3b:ab:e2:34:e5:53:b1:5b:
         05:05:e0:08:70:7e:38:e2:db:e5:f4:80:7f:87:2b:a5:1a:b8:
         f6:47:6c:20:44:8d:c7:51:57:7e:63:bd:b6:6c:69:77:42:9b:
         d5:ee:60:b9:b5:23:8f:99:bb:11:a9:bd:3e:16:83:54:5a:4c:
         0f:62:7c:aa:83:f2:2c:e0:2f:26:af:fe:76:23:f8:75:83:b5:
         8a:fa:ca:0c:d5:05:fd:19:dd:53:23:e0:2c:55:a1:08:b3:55:
         6c:24:de:bf:94:c3:d9:45:1a:08:72:db:03:19:24:b0:3e:e7:
         95:ab:4b:f3:71:87:6f:a6:14:1c:dd:da:63:28:4a:67:0d:02:
         b1:b4:fb:d6:56:1a:07:6a:48:6f:6d:0e:44:ae:60:41:44:2f:
         94:54:c7:b4:e3:61:65:88:23:d8:f3:83:c5:a6:56:f3:d4:90:
         53:4f:d8:0e:1d:e6:2a:0c:9a:11:b0:68:99:58:2f:63:10:1b:
         4f:20:74:8c:32:80:26:2d:5f:3e:25:95:e4:eb:db:15:8b:c4:
         da:d1:04:36:51:ee:bf:d7:29:f6:6a:54:ea:c4:c0:de:cf:22:
         31:98:f1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:13:33 2026 by rpki-client