Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
File:                     Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft (raw, json)
Hash identifier:          Wa+WeQ5L645IDnMHorck7y8nvjPhlFN9PTgBHnM+r/4=
Subject key identifier:   EE:20:4F:B7:56:DA:34:72:76:B3:27:EB:A4:48:E4:43:48:C6:2C:A0
Authority key identifier: 62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95
Certificate issuer:       /CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
Certificate serial:       019F943696A4C4E469EC4FE45EDAA3729DF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
Manifest number:          01B8
Signing time:             Fri 24 Jul 2026 13:00:32 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:32 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:32 +0000
Files and hashes:         1: V6kppHtIo247BBTH3uKp26adRoU.roa (hash: r9eyxABr1xQBoWx1fQ1XYssusw5T9eBOHoVdb80YKAw=)
                          2: Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl (hash: h1dFnlpmlXTAARMMxOltGU2L75Uaigi+g0XUoNRV/ZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:96:a4:c4:e4:69:ec:4f:e4:5e:da:a3:72:9d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
        Validity
            Not Before: Jul 24 13:00:32 2026 GMT
            Not After : Jul 25 13:00:32 2026 GMT
        Subject: CN=ee204fb756da347276b327eba448e44348c62ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f5:8b:67:53:2c:3b:11:90:28:d2:40:dd:6c:
                    58:3e:4f:24:4f:9e:63:41:6c:5f:90:cf:f3:1f:5b:
                    46:81:9d:7e:e3:9a:1a:d3:24:63:ba:bd:c9:a6:b0:
                    b8:a3:d3:ca:0a:40:80:e3:5b:5a:b8:9d:34:d7:63:
                    39:fc:51:ab:39:c0:ac:8c:df:c4:d9:c1:f9:38:90:
                    ff:c7:b6:48:93:fa:fd:8d:cd:fb:fb:bb:0b:81:e7:
                    66:84:d1:b8:2b:a5:12:cd:6a:56:38:b6:e9:a3:9f:
                    f3:2a:90:43:82:f8:e8:13:a7:c6:3d:bb:25:21:f2:
                    c9:f4:15:44:9f:a5:02:b1:89:93:fd:1d:0d:5e:d4:
                    30:25:49:d8:55:1b:ac:b1:17:7f:ce:88:8f:9d:72:
                    fc:d0:da:96:84:7a:7c:55:ae:f1:01:b9:a4:09:de:
                    cd:5b:e1:e7:4b:ee:6f:de:e6:cb:01:05:21:68:55:
                    4b:7e:a4:09:df:5f:21:61:d8:41:d0:26:b3:e6:b5:
                    3d:23:cc:07:1a:0e:c5:a7:dc:34:58:e4:63:da:6e:
                    a4:59:0d:14:ad:6b:4a:13:35:56:af:c7:74:44:05:
                    36:c0:2a:01:6a:d6:99:10:5c:1c:37:66:11:75:3f:
                    2b:0b:e2:24:9e:81:98:fa:56:13:92:71:f5:f1:bc:
                    9b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:20:4F:B7:56:DA:34:72:76:B3:27:EB:A4:48:E4:43:48:C6:2C:A0
            X509v3 Authority Key Identifier:
                keyid:62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:96:62:bd:3e:98:66:0d:71:1c:7e:62:d6:45:42:5b:72:8d:
         23:70:7d:f9:ea:09:80:69:a0:77:52:67:a3:91:e4:c5:7c:dc:
         75:35:56:32:05:d9:a0:96:35:bc:73:f0:5d:61:96:51:a2:16:
         73:e5:a8:da:36:e6:ee:88:19:94:ca:65:fd:86:7d:2e:fb:3c:
         e3:69:4f:23:8e:d2:43:31:97:aa:84:6e:4e:8c:d2:4d:88:78:
         1d:3b:72:e4:bb:2e:f6:23:76:1e:c2:b8:db:86:af:a4:8c:c5:
         6e:f3:b2:a5:1b:f9:34:07:4e:0c:e2:c7:ed:89:12:83:a5:91:
         d0:09:87:13:a5:4c:6a:6e:4b:7c:b8:72:f0:f2:75:d6:40:5f:
         40:21:68:5b:72:23:b1:68:40:ae:60:f6:1f:8a:78:93:67:e0:
         bc:13:7d:17:5d:2f:70:48:9c:09:15:98:f4:76:9f:f2:0a:df:
         e6:02:73:cb:c6:a8:2a:ca:9b:b4:d5:20:68:cc:d1:a2:61:c2:
         b5:71:31:8d:41:dc:7e:86:8e:6f:6b:58:09:bd:a7:df:db:15:
         77:30:9c:70:94:c6:49:f6:56:a1:eb:58:ff:c7:c3:19:fd:c0:
         6a:37:1c:5e:9b:64:7b:7f:b2:b6:68:c5:ac:61:4a:fa:3a:c2:
         42:c4:80:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:21 2026 by rpki-client