Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
File:                     yKS714rzY_pb7uYy6L3Ei2KXNDw.mft (raw, json)
Hash identifier:          3pTh7jkqa+pFNN2NsEeNCZHNRQ1E4+dXGjV5TwQ4TJc=
Subject key identifier:   00:22:81:C4:C8:2E:5C:BC:74:C0:C2:C5:36:53:BE:1E:C6:C1:04:B1
Authority key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
Certificate issuer:       /CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Certificate serial:       019F8FB57A28C75E4BBBC14B2C91CBAB018A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
Manifest number:          0A1C
Signing time:             Thu 23 Jul 2026 16:01:02 +0000
Manifest this update:     Thu 23 Jul 2026 16:01:02 +0000
Manifest next update:     Fri 24 Jul 2026 16:01:02 +0000
Files and hashes:         1: yKS714rzY_pb7uYy6L3Ei2KXNDw.crl (hash: 4LLe+/Z3nKIY811FJvX1ON76z+AXJFq+S011NcNFT4I=)
                          2: ykn6ra4wP0urmcyUyxV1FWZ2Kp0.roa (hash: IJ1D7ZuY9/uNKyGnyBgDEp0dSpIFh5mPiRSScoZkO+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:7a:28:c7:5e:4b:bb:c1:4b:2c:91:cb:ab:01:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
        Validity
            Not Before: Jul 23 16:01:02 2026 GMT
            Not After : Jul 24 16:01:02 2026 GMT
        Subject: CN=002281c4c82e5cbc74c0c2c53653be1ec6c104b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:33:ef:d7:ad:32:2a:64:48:dd:67:b1:85:09:
                    6d:12:2b:22:4c:e2:b6:a8:ff:ac:23:42:d7:c6:94:
                    1d:60:8e:ca:da:33:6f:d8:10:13:8e:6e:ad:bd:2c:
                    2e:dd:f0:07:e6:54:dc:1a:4c:fe:7d:e8:90:e9:5e:
                    b3:8c:f2:79:e0:e3:4b:4b:ce:0c:2f:91:53:76:e8:
                    56:f1:b2:2d:52:e2:eb:28:49:41:19:4b:c5:dd:da:
                    3d:dd:4a:c3:17:cb:fd:34:84:06:25:87:d1:92:25:
                    f7:67:80:f9:68:34:5f:ff:95:a8:5e:d9:50:a0:07:
                    25:09:18:2e:35:e0:ca:00:93:8d:0d:03:51:19:70:
                    9c:68:82:91:ab:5e:2c:a5:62:25:a8:bd:60:42:25:
                    70:da:ab:98:56:b9:82:4f:c8:1c:ef:a7:64:77:4f:
                    c3:e8:18:c4:82:c7:b5:50:d7:73:a9:77:8e:b8:fc:
                    8a:3a:7f:de:6a:8e:63:fc:88:c0:90:60:28:2e:05:
                    2e:28:a9:25:3f:6b:09:ae:cb:d6:bc:42:85:c4:37:
                    31:30:e3:ee:91:e6:a7:c0:35:96:37:1b:a1:ff:63:
                    33:ee:5e:55:37:2a:4f:19:bd:9e:95:b8:af:2d:a3:
                    9b:e3:9e:24:85:2b:c5:11:bf:81:d5:95:1c:d0:c5:
                    ca:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:22:81:C4:C8:2E:5C:BC:74:C0:C2:C5:36:53:BE:1E:C6:C1:04:B1
            X509v3 Authority Key Identifier:
                keyid:C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:73:4e:76:c6:d4:38:70:bb:65:7a:6f:4a:56:48:86:fc:57:
         f8:90:ef:14:ab:5d:1e:5d:51:44:02:75:1a:9f:79:9d:e6:c0:
         0f:2c:7f:8d:d7:cd:52:e5:92:8a:41:c9:63:cc:e5:ab:87:cc:
         a5:92:48:7d:3d:e9:b4:9b:93:5c:57:7f:cb:29:03:75:a0:20:
         6c:4d:37:47:03:da:1a:bd:c0:52:05:6b:06:6b:82:e9:f3:ef:
         5d:0a:e1:c8:75:68:86:3b:d7:26:8d:e3:b1:83:cb:85:6a:88:
         3e:9c:7f:7b:f4:66:31:a3:64:53:51:df:08:bc:bf:f2:77:a0:
         a5:68:b9:57:57:cc:8f:db:92:4b:5c:e1:2b:43:15:39:72:1d:
         dc:ea:86:ef:5b:3c:26:49:80:38:ee:b6:de:09:88:06:71:73:
         0f:bc:1a:ca:4d:d2:8e:e6:a1:5d:da:62:c1:b6:e8:98:33:81:
         f7:30:fe:90:ef:a1:53:cf:09:39:67:11:f1:4d:02:56:3b:b5:
         72:3f:47:33:ee:58:df:75:10:ee:47:ce:a2:b4:04:0b:9b:32:
         51:bb:f9:b0:f1:2d:69:42:8d:ff:21:1d:3c:29:17:0b:ad:7a:
         50:c9:73:5b:4e:49:86:9d:e5:63:f7:4e:61:a7:dd:b1:e8:0f:
         aa:a0:77:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:51 2026 by rpki-client