Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft
File:                     yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft (raw, json)
Hash identifier:          4VIgxJt7S1OIoWvZZROSnvcYSQn5Xky8P4XL2ubN/yw=
Subject key identifier:   7B:D9:07:09:6A:72:2F:5D:6A:1D:1F:F5:CA:F0:7A:FD:BF:BC:73:CB
Authority key identifier: CA:24:87:F5:9F:8B:3A:F8:BF:2A:59:24:67:20:21:B6:50:80:F4:B1
Certificate issuer:       /CN=ca2487f59f8b3af8bf2a5924672021b65080f4b1
Certificate serial:       019F8E6C230CBCD8E8E6B7C2B18A96D8B758
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft
Manifest number:          BF
Signing time:             Thu 23 Jul 2026 10:01:19 +0000
Manifest this update:     Thu 23 Jul 2026 10:01:19 +0000
Manifest next update:     Fri 24 Jul 2026 10:01:19 +0000
Files and hashes:         1: E_xpCOpsZ5-t1WX6WrI9YENITng.asa (hash: bNhbXuXh50hasGOTMO13Tz9lkiSAHuwhJ2TJlWd+gwg=)
                          2: yiSH9Z-LOvi_KlkkZyAhtlCA9LE.crl (hash: d2aPGtYy2FZRFNsnhnVheGf21bXPgEpLmn15TP1OqGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 10:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:6c:23:0c:bc:d8:e8:e6:b7:c2:b1:8a:96:d8:b7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca2487f59f8b3af8bf2a5924672021b65080f4b1
        Validity
            Not Before: Jul 23 10:01:19 2026 GMT
            Not After : Jul 24 10:01:19 2026 GMT
        Subject: CN=7bd907096a722f5d6a1d1ff5caf07afdbfbc73cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:94:5c:f5:f5:97:60:cc:84:ed:94:63:8b:d8:
                    18:c5:74:15:a9:6c:6a:19:06:98:99:41:65:a2:69:
                    1c:c5:d3:b3:e8:49:72:73:4a:80:0d:16:44:08:8f:
                    76:fc:b1:da:fe:79:87:04:16:14:17:2b:65:66:bf:
                    68:4b:69:97:53:ec:f4:bf:41:35:10:a5:83:ce:ab:
                    ae:1d:54:8d:7f:57:6b:87:c3:f8:fa:91:1f:a2:20:
                    06:0d:8a:88:2f:ec:8c:dc:9b:93:1a:53:8c:4d:e8:
                    03:2c:eb:e1:9e:9b:3b:e5:1e:63:57:c5:79:be:56:
                    bd:cf:f2:83:cd:d5:e6:2d:3f:6a:d3:68:90:b7:b8:
                    6b:33:29:3c:8b:ba:97:d1:41:1d:62:64:e2:87:88:
                    32:3c:31:d4:d0:89:35:93:14:77:6d:38:1d:1e:92:
                    3a:3c:9e:ed:2c:92:7c:c7:5c:26:bf:34:64:f0:0a:
                    3c:18:ea:64:2e:c2:96:08:93:57:2c:49:28:32:5a:
                    9a:ae:08:ca:a5:eb:9b:11:d7:48:83:5c:b4:01:5d:
                    ad:ad:f3:79:46:36:db:53:2d:44:0b:96:df:b1:1f:
                    c4:af:e8:f8:f5:b6:87:e5:ed:6a:2c:0f:d1:72:9a:
                    a4:b1:fc:1b:55:53:5e:a0:d9:8b:d2:a7:2e:62:df:
                    d8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D9:07:09:6A:72:2F:5D:6A:1D:1F:F5:CA:F0:7A:FD:BF:BC:73:CB
            X509v3 Authority Key Identifier:
                keyid:CA:24:87:F5:9F:8B:3A:F8:BF:2A:59:24:67:20:21:B6:50:80:F4:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:05:a7:30:e9:10:4e:1e:4c:7e:d0:ce:02:8d:f0:ad:40:0e:
         2f:7e:ef:33:64:20:7b:f6:fd:f1:00:07:b1:cc:5e:51:fb:57:
         d0:7a:d7:e0:ba:fe:10:be:16:92:ce:82:c3:a6:58:a0:fb:89:
         b9:35:cd:be:90:0b:87:3f:f9:68:a0:c8:44:67:b1:08:c6:ed:
         dd:97:4b:1b:03:9e:ce:3e:9d:57:c6:d7:f8:b6:a3:a4:cf:55:
         8e:39:22:d0:77:99:71:40:6e:5e:d5:14:e2:91:dd:fd:9b:26:
         20:32:c8:e0:8c:b7:ba:3d:3c:b1:20:7d:50:36:9d:ef:8e:f3:
         c5:14:44:61:5e:a3:4a:d5:0e:ca:d9:15:34:e3:8f:f8:ab:fa:
         7e:6c:60:b5:7f:b6:00:0d:79:66:14:89:d0:51:a7:7c:a7:36:
         b6:02:b2:e4:3e:55:8b:1b:67:9d:9a:2d:8e:c0:68:6d:af:ac:
         9d:9f:f3:23:b7:ce:49:a6:f2:58:e5:0c:be:a6:6a:f0:d0:d3:
         25:d8:5d:50:ea:c8:c7:7a:ec:8a:cd:67:76:05:f5:37:81:98:
         42:8d:ca:a2:2a:10:33:50:72:ec:3f:1e:45:f6:d8:07:f1:75:
         54:d0:78:c7:b7:a7:89:c0:45:1a:86:d7:98:3f:69:e0:56:06:
         63:03:4a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:54:54 2026 by rpki-client