Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
File:                     YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json)
Hash identifier:          VUTxBwcyNbaDkzP/uVEJDsBgg6+dmIXcIGmFtCIa9xw=
Subject key identifier:   59:05:8E:02:0F:D5:2D:15:16:7F:78:47:BF:B6:48:A6:E7:56:01:C9
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Certificate issuer:       /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial:       019F90C7ABD6EB3F844C8A752AE7208F0B55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
Manifest number:          1149
Signing time:             Thu 23 Jul 2026 21:00:32 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:32 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:32 +0000
Files and hashes:         1: 0sTykt04zhafsgKWmG0fpAc6Xi4.roa (hash: s3D/zF9I60gRgjWMCWnW5l2vwcfUO0zatEx48bleBv8=)
                          2: 13bSAbvbvGDWUO5yvtSsKXnlK94.roa (hash: DXldFZAd6AGXUWvxh5LvcSzCrQoe+CYXwhAGhk24KDA=)
                          3: De_n5gWs77mFUbESDcEhMP4Zgu4.roa (hash: 6EezXySVgGXz55sVzTpFqjj+QzByDEb/wr63m1U01ek=)
                          4: T5zUGgRal9JKPPCQ5ILhLwlQlHM.roa (hash: YHDYE65RL2KgOZOOjjz6vjoQjHzxsBWW9qIdkVOIzBk=)
                          5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: 3KkKIuFdvqa+QdTX3NsEFuocL5zZyzygsHVrx6uocXo=)
                          6: Z943jXHlAqEjC8HhkAmn0vuwcbY.roa (hash: zwEb4pXvmmR3brxpaMTgJgnaLu7vluGbc09IMA9MXt4=)
                          7: aZEJdlE8rryKdFsxcXIyoyt-SOg.roa (hash: BG6zGbPXxvvnXkdjQ9fWCyghzw5YTxYUyEjcqpnK0GU=)
                          8: d9cqCh7w_HREeS5tpm1EQv7bdkc.roa (hash: DnP+rNEbo3897fPDs3e26jS0WYx/AYH67Gkmxad3fpM=)
                          9: tL-DJ8EbDPZqo5Hcwxd2ywWIDr0.roa (hash: 7ypgmIY8clfcgfXd8ScXxIyNvL0UG8VUmIwT7yY7+ig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:ab:d6:eb:3f:84:4c:8a:75:2a:e7:20:8f:0b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
        Validity
            Not Before: Jul 23 21:00:32 2026 GMT
            Not After : Jul 24 21:00:32 2026 GMT
        Subject: CN=59058e020fd52d15167f7847bfb648a6e75601c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:03:4e:ff:76:0a:7e:32:ee:e8:99:cb:58:5c:
                    a8:b3:36:5f:53:b7:a0:51:42:a0:26:ab:63:91:4d:
                    10:78:ee:5e:a5:43:43:a0:a0:61:46:40:8b:72:e3:
                    b9:b2:cb:f0:c9:48:2a:5d:7c:b4:0f:2f:bf:9c:24:
                    b8:b1:68:f4:06:d1:4b:aa:92:06:31:10:77:b6:67:
                    12:9f:95:ba:6a:db:1d:c5:8b:bf:ca:d0:eb:bd:5d:
                    c3:ef:93:f6:a4:1e:0f:8a:2e:c1:43:ed:3d:cf:bf:
                    1f:63:bc:44:24:5f:8c:d2:a0:a7:63:28:7c:3a:6e:
                    57:e8:94:0a:92:06:e0:8b:1a:73:fb:28:bc:4e:dd:
                    ac:dc:68:a5:56:84:7f:0d:b4:88:7d:dd:d0:e5:0c:
                    a8:63:6b:84:10:5b:57:83:25:05:f4:e9:8c:24:81:
                    2a:d3:63:29:55:e8:bb:e6:b6:6c:ba:44:f4:ff:3f:
                    55:da:32:72:ff:36:06:f0:c3:dd:98:b0:54:a6:de:
                    0b:d7:73:17:ec:4a:a6:27:69:18:3a:c1:86:76:33:
                    29:50:dd:fa:2e:e0:a4:e6:77:5f:89:02:11:7c:35:
                    12:5e:fc:5a:1c:1e:1d:03:a1:b5:85:b9:41:03:7f:
                    ab:4f:a3:ec:9e:5a:ac:03:d0:3c:37:1c:55:8e:41:
                    52:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:05:8E:02:0F:D5:2D:15:16:7F:78:47:BF:B6:48:A6:E7:56:01:C9
            X509v3 Authority Key Identifier:
                keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e3:4f:f8:5c:f4:4f:e6:27:5e:d1:3b:f8:26:17:8f:d5:fa:
         a7:af:09:46:63:b4:20:67:89:7e:74:e5:52:12:9a:47:4b:e1:
         e1:92:cd:89:d5:7d:c1:b6:62:de:94:4c:17:88:91:48:d6:d4:
         33:7b:50:d0:c1:50:f2:12:49:67:18:07:f9:c2:09:23:a6:4a:
         d2:01:60:77:81:cd:1d:47:57:f4:3f:2e:bb:f2:ea:a4:e4:8e:
         4b:03:40:50:db:dd:5a:8b:ca:57:7c:fe:6c:e8:6d:52:bf:03:
         6d:1d:ae:91:e0:cb:04:a6:0b:a8:9d:9a:da:d3:82:bf:d4:00:
         ff:75:08:62:95:19:9a:92:5c:b3:d9:2c:d7:bb:0c:26:c3:73:
         93:87:b1:09:80:34:2f:19:73:f1:e6:4f:02:4d:1e:95:53:e9:
         5c:bf:c3:0e:ce:66:69:0a:3c:ae:20:40:64:96:d4:2a:bf:47:
         aa:07:79:24:3c:d3:0e:14:93:b0:d1:71:47:3f:bc:87:06:e6:
         0b:22:9e:3c:01:4a:72:e6:c2:f3:01:05:9a:ae:37:d8:17:0f:
         54:be:8e:80:76:94:21:fc:68:0a:3b:97:14:18:07:39:b5:53:
         fe:61:97:4d:d0:27:75:66:d2:53:89:d7:fd:e6:b8:00:44:aa:
         8d:05:c3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:22 2026 by rpki-client