Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
File:                     sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft (raw, json)
Hash identifier:          zXpfYNRSAYY2XuJ1uvvqG2sXgWHHhQPS5tFdiQeuUlw=
Subject key identifier:   C4:57:74:CB:A9:CC:57:41:0A:51:DB:D6:E4:AB:8F:1B:6B:CE:D7:F0
Authority key identifier: B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
Certificate issuer:       /CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Certificate serial:       019F939249BD45EF85E243F3315AF12C4225
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
Manifest number:          0CE8
Signing time:             Fri 24 Jul 2026 10:01:05 +0000
Manifest this update:     Fri 24 Jul 2026 10:01:05 +0000
Manifest next update:     Sat 25 Jul 2026 10:01:05 +0000
Files and hashes:         1: 6tRNFOHlYPyCYFIHgatSgb5gCeA.roa (hash: E6/vpznSWjmg4YEWxQ9xApX1IggzL3noXqAm0pLp65E=)
                          2: sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl (hash: cnCJoFvAFyyOGPilbYFKb4rMWkB3EOoP4lwz2/zC79A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:92:49:bd:45:ef:85:e2:43:f3:31:5a:f1:2c:42:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
        Validity
            Not Before: Jul 24 10:01:05 2026 GMT
            Not After : Jul 25 10:01:05 2026 GMT
        Subject: CN=c45774cba9cc57410a51dbd6e4ab8f1b6bced7f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:04:9f:13:e1:07:e2:bd:d8:e1:04:21:a4:ae:
                    e8:4c:c6:13:1f:54:55:36:65:1f:e1:d1:f1:b0:a9:
                    68:29:2f:87:19:3c:8e:74:c6:41:42:8b:fc:b0:66:
                    76:93:98:35:12:9e:b7:67:71:87:0d:2a:f8:e4:86:
                    ee:63:5c:61:09:77:90:57:e7:d0:31:9c:fb:5e:40:
                    2d:84:18:7b:d5:23:14:85:9f:bb:3f:71:85:9c:dd:
                    63:d8:ff:04:5c:7e:4e:3b:ca:fa:8c:10:4f:b9:14:
                    44:e1:1d:50:ee:34:b0:78:cb:12:f9:60:04:51:21:
                    2b:93:08:63:a3:62:0e:96:e2:93:65:3b:86:e4:0d:
                    d2:19:65:b5:1d:13:07:5f:03:29:14:b6:40:9d:e0:
                    40:7d:89:53:c5:a0:12:e8:7f:ed:c3:82:24:84:f1:
                    8a:8d:16:a5:7d:b1:a8:49:68:d5:50:08:a5:37:30:
                    ea:65:a2:32:fd:26:4b:ca:5b:1d:c3:ca:65:a9:51:
                    8f:2f:fe:9a:26:22:24:ee:54:b6:7f:ee:f7:e9:2f:
                    91:d9:cf:f8:06:ba:b9:49:5c:5e:3c:7c:48:99:2b:
                    31:3d:51:81:63:ce:6d:07:52:2a:be:44:24:a6:ca:
                    13:66:32:22:1e:92:4a:98:7b:10:ca:be:cf:9c:22:
                    7c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:57:74:CB:A9:CC:57:41:0A:51:DB:D6:E4:AB:8F:1B:6B:CE:D7:F0
            X509v3 Authority Key Identifier:
                keyid:B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:44:e9:a3:14:30:e0:b0:42:ad:41:0c:07:61:88:5f:4d:77:
         21:51:fa:e8:8c:df:79:9a:59:87:c8:7a:0c:3b:90:f9:22:3d:
         1c:3e:5c:c8:0c:6a:38:87:29:79:8d:ea:90:53:64:dd:09:7e:
         0e:7f:3a:3d:fd:29:66:a9:c5:97:8c:95:47:23:b3:39:04:85:
         c0:65:ca:cd:ca:9d:de:a2:d9:b7:b2:b3:d8:95:cb:2e:66:2d:
         4d:c1:b6:1d:c6:6f:12:bf:dd:0f:85:e3:de:f3:91:22:f7:e3:
         af:ea:7f:8f:5a:9f:e0:61:b5:5b:cc:a1:b2:b6:e7:76:37:41:
         66:02:ff:86:29:2c:8e:e9:72:d1:0e:3c:87:5f:ba:a0:6e:9d:
         63:57:04:31:ec:b9:d3:96:fc:85:27:5a:ad:dd:44:82:bc:57:
         81:23:5b:db:da:e4:9d:2a:cd:42:9d:6c:de:8f:d5:05:fc:d9:
         b5:3e:10:09:4d:41:de:88:a4:7f:56:c3:45:0a:5f:59:31:f3:
         55:71:c1:e8:e2:f1:01:f1:9d:70:57:43:bf:d9:8c:2f:a0:f9:
         d7:12:31:97:04:a0:cb:b6:72:b1:75:04:ac:1f:77:b3:ca:de:
         b5:c7:fe:e1:84:e7:b0:81:0a:aa:d6:19:93:da:00:f1:59:41:
         8d:d3:e1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:06:50 2026 by rpki-client