Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
File:                     yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft (raw, json)
Hash identifier:          vCVTKG70L66nSpUB4z9vH7vtc5FocxguWIoOEGh8sGI=
Subject key identifier:   19:44:39:52:29:F9:9E:70:60:FA:5B:19:70:8D:22:D8:B0:7C:39:5C
Authority key identifier: C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
Certificate issuer:       /CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Certificate serial:       019F94A46823BEF7AE690091C4141A118F22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
Manifest number:          035D
Signing time:             Fri 24 Jul 2026 15:00:30 +0000
Manifest this update:     Fri 24 Jul 2026 15:00:30 +0000
Manifest next update:     Sat 25 Jul 2026 15:00:30 +0000
Files and hashes:         1: Pk6dmv-1h5zWIXu5Oty1Pp_3yV4.roa (hash: /ND/9TFeaNgP6XF6YHep3PGuc7vk/LLfQoeSDsS92Uk=)
                          2: yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl (hash: zhU0y5mSJka7hIl/8iidqdt/uOs5AdXsGtXAnGyRxdw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:a4:68:23:be:f7:ae:69:00:91:c4:14:1a:11:8f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
        Validity
            Not Before: Jul 24 15:00:30 2026 GMT
            Not After : Jul 25 15:00:30 2026 GMT
        Subject: CN=1944395229f99e7060fa5b19708d22d8b07c395c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a3:19:b8:0f:74:e1:ee:b0:f8:fc:5a:e1:02:
                    1e:eb:95:ae:72:d3:64:c7:d9:04:bd:0d:2d:35:51:
                    d7:2e:e8:d3:fa:97:8d:d3:6c:79:6f:19:74:3a:75:
                    fd:fd:d2:c9:38:2a:eb:1e:a8:2e:4f:08:25:be:a1:
                    26:b8:ae:3f:aa:9d:1f:5f:60:76:ce:ce:10:6d:38:
                    52:86:25:ab:c6:fa:7d:3a:db:fb:e4:fb:27:50:d2:
                    59:88:d6:31:78:66:22:b2:8e:9e:c0:3c:0d:e8:59:
                    fd:f2:8c:f9:0e:19:97:27:92:83:de:28:73:5d:0e:
                    a0:a4:a9:6f:d5:f7:ac:c5:02:68:1b:7a:79:5e:51:
                    6f:56:70:fa:9a:53:ab:85:d2:48:4f:15:eb:ed:60:
                    48:40:ec:8f:3f:49:72:37:13:45:f5:f2:a3:01:ca:
                    16:5a:33:8c:f4:e0:de:ad:d2:87:eb:40:e3:cd:c9:
                    79:e2:f9:1b:84:cb:37:f8:92:b8:4f:33:68:34:59:
                    00:ae:24:e4:74:cf:4f:3a:e2:c9:9a:9f:5d:27:90:
                    99:2b:01:a2:97:56:0a:d6:44:b1:56:ac:a7:d1:05:
                    80:c1:ab:2d:7a:60:64:9c:cf:f0:76:c2:51:59:e2:
                    c3:2a:7c:a8:3d:99:28:1f:1c:c9:2a:75:71:0f:ee:
                    3f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:44:39:52:29:F9:9E:70:60:FA:5B:19:70:8D:22:D8:B0:7C:39:5C
            X509v3 Authority Key Identifier:
                keyid:C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:4a:d4:62:c1:b3:0f:04:b3:98:c0:09:22:09:ec:aa:e9:c9:
         74:5b:4e:d8:bd:27:a6:9f:5b:6d:4b:43:8a:ac:be:a2:5d:61:
         3e:60:04:b5:0e:9b:60:f8:c4:86:7f:ce:b4:7a:80:4b:33:6b:
         08:b6:a8:8b:df:2c:7a:e6:27:1b:fc:e7:2a:28:a1:6f:02:14:
         07:52:03:a3:14:7c:bb:73:81:0c:71:6c:10:42:14:6d:91:6f:
         e1:12:f7:50:10:ca:ef:3d:ea:cf:1d:80:a0:a3:0f:6e:81:54:
         ed:84:ce:92:79:e8:ec:b4:e3:7a:23:f0:a0:f7:09:c3:02:81:
         9f:34:98:35:85:0c:2d:19:ad:bc:14:16:55:86:a1:38:ce:40:
         23:82:e7:85:04:f4:8e:26:24:d3:7f:89:51:42:fb:5e:2f:8d:
         19:85:80:a5:f1:4c:b7:8f:63:d9:0b:10:6d:65:e8:34:17:d5:
         f8:29:e4:fe:46:83:00:95:00:73:70:0f:7c:68:fb:14:49:9a:
         0c:ee:23:fe:90:da:d0:c8:fb:43:d9:27:51:66:44:be:5a:a1:
         69:1b:ab:83:db:10:2a:19:c9:da:53:e2:fa:4b:fe:9f:eb:b7:
         7e:dd:8b:3f:f1:e1:00:0c:62:8a:76:2d:df:a7:15:16:f4:e3:
         c4:ef:6f:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UpGgjvveuaQCRxBQaEY8iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZjM3NDZlMGM2YjA1MzE0N2I1MmE0ZWY0MGM0OGM3MGE3
ZjFjZDgwHhcNMjYwNzI0MTUwMDMwWhcNMjYwNzI1MTUwMDMwWjAzMTEwLwYDVQQD
EygxOTQ0Mzk1MjI5Zjk5ZTcwNjBmYTViMTk3MDhkMjJkOGIwN2MzOTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaMZuA904e6w+Pxa4QIe65WuctNk
x9kEvQ0tNVHXLujT+peN02x5bxl0OnX9/dLJOCrrHqguTwglvqEmuK4/qp0fX2B2
zs4QbThShiWrxvp9Otv75PsnUNJZiNYxeGYiso6ewDwN6Fn98oz5DhmXJ5KD3ihz
XQ6gpKlv1fesxQJoG3p5XlFvVnD6mlOrhdJITxXr7WBIQOyPP0lyNxNF9fKjAcoW
WjOM9ODerdKH60Djzcl54vkbhMs3+JK4TzNoNFkAriTkdM9POuLJmp9dJ5CZKwGi
l1YK1kSxVqyn0QWAwastemBknM/wdsJRWeLDKnyoPZkoHxzJKnVxD+4/1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlEOVIp+Z5wYPpbGXCNItiwfDlcMB8GA1UdIwQY
MBaAFMjzdG4MawUxR7UqTvQMSMcKfxzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVBOMGJneHJCVEZIdFNwTzlBeEl4d3BfSE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82NzhhOTYtNjk1Yy00MTg3LTkwOTMt
MTBjNTQ2ZDc5YmE1LzEveVBOMGJneHJCVEZIdFNwTzlBeEl4d3BfSE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82NzhhOTYtNjk1Yy00MTg3LTkwOTMtMTBjNTQ2ZDc5YmE1
LzEveVBOMGJneHJCVEZIdFNwTzlBeEl4d3BfSE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAskrUYsGz
DwSzmMAJIgnsqunJdFtO2L0npp9bbUtDiqy+ol1hPmAEtQ6bYPjEhn/OtHqASzNr
CLaoi98seuYnG/znKiihbwIUB1IDoxR8u3OBDHFsEEIUbZFv4RL3UBDK7z3qzx2A
oKMPboFU7YTOknno7LTjeiPwoPcJwwKBnzSYNYUMLRmtvBQWVYahOM5AI4LnhQT0
jiYk03+JUUL7Xi+NGYWApfFMt49j2QsQbWXoNBfV+Cnk/kaDAJUAc3APfGj7FEma
DO4j/pDa0Mj7Q9knUWZEvlqhaRurg9sQKhnJ2lPi+kv+n+u3ft2LP/HhAAxiinYt
36cVFvTjxO9vQw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:10:21 2026 by rpki-client