Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
File:                     yFEG2q06lz_emJFPfMHM012Mw8M.mft (raw, json)
Hash identifier:          a07khiQSa8AQ7VhqC2Oh57D/1ZuZ4PLT9TRlMOuPKt4=
Subject key identifier:   19:A0:34:FD:6A:A1:59:97:91:C9:22:3C:0E:60:8C:FE:AC:86:17:57
Authority key identifier: C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
Certificate issuer:       /CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Certificate serial:       019F8E6BACB7C391D258C5F22E71600DA6BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 10:00:48 +0000
Manifest this update:     Thu 23 Jul 2026 10:00:48 +0000
Manifest next update:     Fri 24 Jul 2026 10:00:48 +0000
Files and hashes:         1: 9-N6pNClbD9TW9GB1CAgMdzr4Tk.roa (hash: 5ZEJ2hAJfJWVHDDR0yYyaLfl4wYzvQGgrMUVflW8yik=)
                          2: dPHqIY7qbdPlJuiUMKI9vu705BQ.roa (hash: iEFUmiIqI94qx/d/ZIh+kjuR+jCUesRKMo6DZPKrgqY=)
                          3: yFEG2q06lz_emJFPfMHM012Mw8M.crl (hash: BGPsv13lBlH05uj/U7ADETxi9MKgH0CB6efWYUfD6rY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 10:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:6b:ac:b7:c3:91:d2:58:c5:f2:2e:71:60:0d:a6:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
        Validity
            Not Before: Jul 23 10:00:48 2026 GMT
            Not After : Jul 24 10:00:48 2026 GMT
        Subject: CN=19a034fd6aa1599791c9223c0e608cfeac861757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b5:a6:e7:8f:84:53:2c:f6:f1:68:30:d4:8f:
                    c2:c3:87:4b:73:a8:dd:b3:13:1d:4e:93:d0:85:b6:
                    3c:ab:c4:b7:48:60:a3:5f:d8:5d:d1:4b:31:64:a4:
                    ce:32:58:f0:fc:f9:dc:78:32:0c:28:b2:50:a3:9f:
                    ba:43:c5:ff:53:4c:79:09:74:14:b2:d6:40:ec:f5:
                    ab:e1:64:9b:74:2a:0b:0a:0d:1e:ae:77:36:8b:5f:
                    c6:ff:3e:37:ec:6b:7b:45:d2:e9:6b:eb:08:8d:25:
                    7d:dc:54:47:ff:f5:94:a3:1b:cb:14:1b:b3:07:68:
                    02:7b:f6:4e:e5:34:9f:30:11:bf:a8:34:fc:a0:02:
                    a8:48:0c:43:b4:0e:d0:58:f7:14:13:b4:62:4b:ea:
                    d7:31:ab:aa:43:89:5d:8b:c8:01:2a:aa:38:44:9c:
                    bf:70:ee:0d:96:cd:56:a9:d7:92:d8:a4:86:47:2c:
                    85:39:65:bd:16:b8:0f:2f:c9:29:f8:ee:d5:ba:11:
                    bf:a4:3a:45:d5:da:c6:50:0d:a2:33:35:e0:9a:7d:
                    51:6c:91:3f:f8:0b:b5:2d:af:20:71:85:42:5b:d0:
                    7a:d3:a4:85:36:41:94:80:b0:57:60:50:c4:04:47:
                    12:26:ed:32:d4:02:e2:46:1b:ac:48:28:b7:b6:64:
                    a0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A0:34:FD:6A:A1:59:97:91:C9:22:3C:0E:60:8C:FE:AC:86:17:57
            X509v3 Authority Key Identifier:
                keyid:C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:14:e3:8e:66:78:eb:9a:c2:41:54:60:f0:47:57:e6:f6:91:
         92:96:42:38:36:d6:12:cc:fc:7f:1d:d2:86:ff:2b:22:55:30:
         4b:b7:9b:b0:60:46:ec:78:b7:87:2b:da:41:6a:f7:1a:07:9f:
         7d:2e:a3:b7:ac:1e:c3:e1:83:93:6c:e2:09:c5:a3:ae:38:86:
         30:79:fb:7b:77:00:1c:d3:d1:2d:c8:5e:a1:14:a2:0f:a1:d0:
         a2:e1:48:57:7f:e1:0a:08:69:af:5e:f6:62:f8:ca:a6:e4:9a:
         aa:dc:98:e4:89:a4:db:1a:42:d7:38:87:71:6a:3b:eb:09:68:
         0b:8f:44:30:fd:bc:6f:a6:43:4d:bc:5d:07:2b:5f:fe:a3:64:
         09:08:fc:70:83:93:c6:98:44:dd:11:47:d8:5f:a8:b6:97:53:
         bc:00:3e:5f:db:c2:52:dc:8e:bf:ec:ca:69:d1:ef:dd:07:ea:
         94:58:29:5d:79:1d:50:4b:be:4b:42:bc:6c:2f:f4:0f:ba:45:
         c2:41:88:81:4a:13:5e:7d:96:47:5c:5e:db:38:7d:5c:d8:d5:
         fb:94:e9:b4:ec:d2:ce:8b:3b:1c:cd:6e:5b:6f:02:18:a7:d4:
         08:cd:50:27:86:4e:7e:f7:ed:fd:a0:55:9a:90:16:5d:fd:fb:
         d2:08:82:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:46 2026 by rpki-client