Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
File:                     YYcWngMONyXW60eKMn5r3za-jS8.mft (raw, json)
Hash identifier:          xZOX2Gv22qL2T6aVx8Ovzdx1srtDuj+QN7GLmMmFOa8=
Subject key identifier:   A5:92:60:0D:3C:01:A3:40:D4:4E:0D:25:67:70:0E:F3:CC:DD:4F:DF
Authority key identifier: 61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
Certificate issuer:       /CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Certificate serial:       019F927FB45C2B478D0430D7C408C670AF1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
Manifest number:          03BC
Signing time:             Fri 24 Jul 2026 05:01:10 +0000
Manifest this update:     Fri 24 Jul 2026 05:01:10 +0000
Manifest next update:     Sat 25 Jul 2026 05:01:10 +0000
Files and hashes:         1: YYcWngMONyXW60eKMn5r3za-jS8.crl (hash: rl8Zl5eqc7GBM/DTlHaG/McotOSXx2KvxWcYWJg/54E=)
                          2: dlAKs2OGLWJirE63ZpdfiOJ1IDw.roa (hash: 1fH4y0wj0PpFc5LsMAZ3oXLqRp58JujDDG0+JToDmTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:b4:5c:2b:47:8d:04:30:d7:c4:08:c6:70:af:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
        Validity
            Not Before: Jul 24 05:01:10 2026 GMT
            Not After : Jul 25 05:01:10 2026 GMT
        Subject: CN=a592600d3c01a340d44e0d2567700ef3ccdd4fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1c:55:e8:a2:97:e4:15:a7:ab:e6:8f:28:c3:
                    0f:b6:1c:61:65:92:79:c8:f8:53:95:65:0a:be:ba:
                    d7:0c:53:a9:da:43:00:06:82:d4:21:8d:e6:20:79:
                    39:2d:4c:bc:ae:c5:86:8d:41:8f:1e:de:fc:38:7a:
                    f7:14:4d:1a:66:55:12:d5:55:23:4c:44:b4:ce:d1:
                    6c:85:cd:86:e9:41:0c:f2:86:a8:a9:9b:da:cd:3e:
                    90:cd:91:f7:eb:fc:21:14:c2:13:77:4b:03:5d:ce:
                    d7:c2:6e:e4:0c:57:0f:b3:0d:d6:f7:e0:9b:34:33:
                    8d:9e:2d:7e:e8:b8:e5:66:79:d3:a8:e3:1e:ca:7b:
                    b3:b7:14:53:7c:e9:83:52:d5:32:e5:6c:eb:e3:19:
                    58:87:b9:14:cb:d7:2f:b6:1f:77:e1:b6:94:31:fd:
                    84:66:2c:6e:6d:23:b5:30:aa:72:d4:9c:1d:18:1b:
                    20:27:ed:b2:ea:20:8c:63:92:81:ff:c8:2d:ec:f9:
                    bb:15:de:fb:bd:66:60:a6:be:4f:4c:f3:09:91:37:
                    74:cd:89:84:8d:ae:20:28:38:db:35:f4:e0:58:44:
                    88:40:c6:c9:ab:bf:59:2d:a3:18:9c:76:63:32:e1:
                    c4:4a:5a:36:7c:7f:c2:e4:1a:d1:39:38:27:74:7c:
                    84:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:92:60:0D:3C:01:A3:40:D4:4E:0D:25:67:70:0E:F3:CC:DD:4F:DF
            X509v3 Authority Key Identifier:
                keyid:61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d5:26:61:6b:bb:ef:6a:23:ed:d8:49:9e:7e:1a:e6:9b:33:
         ae:95:93:5a:42:ae:d9:ce:20:f6:ac:57:72:97:e2:ae:f6:fb:
         07:4e:ea:c3:6e:da:e5:9c:33:6c:a8:e3:4b:aa:90:d7:12:ff:
         50:60:dd:17:97:3b:49:cc:55:96:f7:46:3f:80:b1:6e:9d:e8:
         31:97:8d:80:62:34:de:45:db:b0:c8:30:07:2a:8c:ec:3c:4f:
         40:d4:52:7d:c9:de:49:0e:89:4b:fa:da:95:5c:0e:74:cb:35:
         3e:90:ec:5d:58:9e:a8:71:e6:e4:6c:19:95:00:0e:c0:a4:1d:
         3b:e6:3d:79:25:ab:93:24:e7:4d:0c:ae:b9:39:62:ad:12:ec:
         06:5a:c0:fe:c0:2e:61:90:fb:94:83:0a:49:22:5d:17:e1:c1:
         cc:30:49:81:b7:e2:37:8f:7c:13:cb:94:1a:76:7c:95:37:c7:
         f1:e7:e1:60:7e:ba:8a:33:45:32:37:91:6f:6c:42:1a:22:ef:
         d9:63:0c:12:6b:91:6a:7a:d1:ad:4f:f9:df:1d:61:fa:ca:c9:
         0b:61:7e:e9:ca:90:4f:8a:11:fc:cc:e5:99:f2:50:2b:48:d3:
         b0:db:1d:6d:f9:ec:3f:10:84:97:d2:e9:6d:99:d5:21:b8:61:
         df:48:88:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:02 2026 by rpki-client