Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.mft
File:                     yPZn5ggTAzhfE_1MttPaTYyxtsE.mft (raw, json)
Hash identifier:          +ImmkfcRjgbphYtqJHuDXicDo9UHE4DApVTLvwGe11c=
Subject key identifier:   3D:F5:FC:14:7C:D4:D6:38:A8:AE:7F:66:69:E3:99:4E:30:03:0A:B4
Authority key identifier: C8:F6:67:E6:08:13:03:38:5F:13:FD:4C:B6:D3:DA:4D:8C:B1:B6:C1
Certificate issuer:       /CN=c8f667e6081303385f13fd4cb6d3da4d8cb1b6c1
Certificate serial:       019F927F0D17EF44E1076640AF6595DF5070
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yPZn5ggTAzhfE_1MttPaTYyxtsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.mft
Manifest number:          97
Signing time:             Fri 24 Jul 2026 05:00:27 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:27 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:27 +0000
Files and hashes:         1: 2Z6IYH5r9rEHXyb6yaUAQh53_hk.roa (hash: iFsFHaHiOwiJNWh0rDjxLKPBB1FTnSIyeAFgavIf9wA=)
                          2: yPZn5ggTAzhfE_1MttPaTYyxtsE.crl (hash: n+Cdb900INNx4tYngmaDCWpTQ04N9dPWCLL33wBragE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yPZn5ggTAzhfE_1MttPaTYyxtsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:0d:17:ef:44:e1:07:66:40:af:65:95:df:50:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8f667e6081303385f13fd4cb6d3da4d8cb1b6c1
        Validity
            Not Before: Jul 24 05:00:27 2026 GMT
            Not After : Jul 25 05:00:27 2026 GMT
        Subject: CN=3df5fc147cd4d638a8ae7f6669e3994e30030ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1d:81:bb:90:1c:c3:7e:6a:35:1a:43:24:03:
                    4c:92:53:94:ee:4e:8f:d8:57:be:f9:a9:d5:bd:96:
                    ba:f3:c5:da:f9:81:6f:6b:02:25:3e:e6:df:d8:5a:
                    08:5e:f1:7e:fd:14:ff:81:52:3b:8c:2e:3b:33:2b:
                    37:ee:3a:40:8c:ef:b0:3f:ee:87:e8:7d:a9:d9:e6:
                    08:02:ff:92:0c:ac:12:de:60:c4:d4:13:07:fe:b5:
                    98:95:ae:28:9f:c6:79:63:9e:1c:3f:8d:00:90:4e:
                    12:97:b5:93:dd:7e:60:a2:33:36:8c:df:ad:6e:96:
                    8b:09:2c:56:fa:15:89:8c:3c:dd:65:bf:24:4d:cf:
                    3e:7b:f6:1a:4e:b3:bf:6f:d5:29:2b:ef:06:f3:df:
                    1a:83:de:14:bd:2b:03:cd:43:d4:87:82:55:7a:e9:
                    6e:b3:1a:49:c2:dc:3c:a3:77:ab:98:04:18:c4:81:
                    f6:65:f7:d4:67:8e:64:70:10:64:e1:f7:ee:01:4c:
                    ed:a1:6d:71:ba:f6:ba:2f:d7:da:c8:6b:5c:19:49:
                    81:5b:c3:46:8e:ba:cd:da:f4:09:50:5d:a3:15:0e:
                    44:6d:64:79:ef:4a:bf:f2:61:79:82:b0:51:b1:97:
                    ea:0a:a3:34:5f:4a:c5:29:cb:cd:e6:35:26:b8:48:
                    71:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F5:FC:14:7C:D4:D6:38:A8:AE:7F:66:69:E3:99:4E:30:03:0A:B4
            X509v3 Authority Key Identifier:
                keyid:C8:F6:67:E6:08:13:03:38:5F:13:FD:4C:B6:D3:DA:4D:8C:B1:B6:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPZn5ggTAzhfE_1MttPaTYyxtsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:43:53:20:9c:da:37:c1:40:e0:2f:bf:17:0f:27:b9:6f:03:
         aa:2c:af:5b:6a:bc:cc:dc:fd:fb:19:ce:85:b2:f1:fd:1f:a8:
         f5:31:29:84:1b:9e:dc:dd:c5:a4:87:72:6d:69:9a:88:c6:b7:
         82:77:0b:0c:ec:af:ea:4c:a6:cd:26:0a:1e:cb:d7:52:86:02:
         96:09:de:c1:31:36:63:72:22:d0:51:34:3c:58:66:fe:6b:1d:
         16:d7:aa:cb:4d:49:fa:eb:15:d7:7f:2a:9a:6b:99:d5:d3:58:
         80:fe:54:6b:ba:82:8e:42:6c:48:d8:18:26:eb:a7:10:0f:2b:
         e1:86:bc:87:4a:73:e7:c7:43:d2:4c:75:95:42:30:c4:65:da:
         62:aa:12:a8:33:89:34:1e:8e:87:4c:e3:e5:40:7a:27:3c:c0:
         77:aa:e0:44:57:1d:31:ac:8e:0d:48:da:1d:e8:96:34:32:84:
         3b:a6:0a:d1:13:88:12:58:7c:6f:f6:d6:24:5e:ec:d4:43:be:
         10:a1:ae:b7:ab:09:dc:0f:17:63:00:5b:6c:7e:3a:12:25:6e:
         e0:2c:df:12:21:41:40:4a:4e:e5:90:9e:80:77:7f:5a:c4:f6:
         ec:ed:54:8c:c6:e7:73:af:a2:2e:37:af:ff:71:a5:b1:0e:4a:
         2f:d7:5c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:21 2026 by rpki-client