Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.mft
File:                     RY-8K-wAmQ5cw7QhdHwFV6jtu_8.mft (raw, json)
Hash identifier:          74FReNhTVTQYqO9bqVTjKfLaXgc+89hhR2T2TKi+Mcg=
Subject key identifier:   F0:7F:45:11:1B:9E:45:D5:51:3E:B7:16:6D:1F:64:48:07:55:22:31
Authority key identifier: 45:8F:BC:2B:EC:00:99:0E:5C:C3:B4:21:74:7C:05:57:A8:ED:BB:FF
Certificate issuer:       /CN=458fbc2bec00990e5cc3b421747c0557a8edbbff
Certificate serial:       019F90C7B7A12C54BA372DD04871CCD706D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.mft
Manifest number:          40
Signing time:             Thu 23 Jul 2026 21:00:35 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:35 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:35 +0000
Files and hashes:         1: 8vX1WdlmM8tymTaEX4AMsj1Yp1U.roa (hash: wdVLNmwDr0kbfoI7x7yvRxbo7hOTDr5XiPVUT8cP3+4=)
                          2: PUjKVuvXyy_Bmuww0cD28b0h0YU.roa (hash: 2Hrc6A2H1DaOZgvfa2sIx+XtUdZTXzHJ1TKysCf+RYU=)
                          3: PvcdpObefkzVah2If1vGVRM5pPw.roa (hash: E2SK6HlEkywPIAxJejC343dtDicPwBaW8NfPI1M31po=)
                          4: RY-8K-wAmQ5cw7QhdHwFV6jtu_8.crl (hash: SOJsAM7K7zlL2ZUpLZlAvRLzrDO1+dNcpaNVjp/rCeg=)
                          5: v8lfLOKHVZnkrdD-G0CENmIoGFY.roa (hash: +aHQYF/Vd4+YgYybVszc6iY/MnmjqAxgJRPynynFvpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:b7:a1:2c:54:ba:37:2d:d0:48:71:cc:d7:06:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458fbc2bec00990e5cc3b421747c0557a8edbbff
        Validity
            Not Before: Jul 23 21:00:35 2026 GMT
            Not After : Jul 24 21:00:35 2026 GMT
        Subject: CN=f07f45111b9e45d5513eb7166d1f644807552231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c3:57:1b:a5:14:c2:5a:d4:38:9b:d3:04:e5:
                    3d:84:54:85:dc:43:99:36:50:81:c1:14:95:09:2e:
                    a2:c9:17:0d:65:47:4c:d7:9a:20:ff:ac:5d:ae:68:
                    3a:88:00:85:46:62:32:57:f1:53:92:02:8d:53:c5:
                    81:24:2e:75:89:23:05:58:6b:7a:5c:cf:c7:9a:65:
                    ae:62:b2:eb:23:04:1f:fd:19:1d:02:05:ec:86:08:
                    e8:6b:64:4e:12:71:b4:76:86:b7:3b:aa:3a:cb:22:
                    e1:5a:b3:7b:ce:82:3d:75:3b:56:4f:34:48:ea:ff:
                    79:1d:ec:e6:e2:b6:3b:ba:12:18:41:f2:d1:de:81:
                    27:9e:9b:e8:82:13:3d:92:e2:31:21:b7:f6:2a:37:
                    8f:fb:dd:6a:de:d0:93:32:28:7a:d4:50:17:40:ae:
                    75:94:80:c0:f3:eb:cc:0f:de:35:25:da:6f:ad:16:
                    93:bd:03:25:7d:3b:99:3d:be:c0:f7:e8:cf:bf:c0:
                    c5:4e:6c:c3:f6:45:f0:8c:52:44:d8:a9:95:b1:82:
                    89:bc:52:82:7e:47:9e:b4:de:7f:e6:d5:bd:85:c0:
                    f0:bc:dc:a8:83:09:5b:f6:cc:26:7e:f2:b6:d7:80:
                    55:2a:80:50:7c:21:c7:da:aa:ad:96:49:86:55:6e:
                    4a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7F:45:11:1B:9E:45:D5:51:3E:B7:16:6D:1F:64:48:07:55:22:31
            X509v3 Authority Key Identifier:
                keyid:45:8F:BC:2B:EC:00:99:0E:5C:C3:B4:21:74:7C:05:57:A8:ED:BB:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:0c:ac:20:87:cc:47:7e:13:46:6d:66:5f:b0:69:0d:95:5c:
         bf:18:30:a0:97:36:a6:d6:86:bf:f8:7c:eb:d4:2d:15:46:5d:
         b5:f1:3f:c2:03:ab:41:f5:9b:ae:05:35:70:e3:74:3c:ed:11:
         e7:aa:a7:fb:f1:fa:43:23:fb:f0:b0:55:ae:34:4b:d6:8c:46:
         10:45:82:27:ca:01:41:b3:d9:87:b4:2e:86:ca:c7:f7:53:56:
         09:96:2e:d0:04:48:39:e0:9d:38:f4:c2:29:04:24:ab:61:e7:
         ea:c1:e5:cb:b8:86:b3:e3:a1:69:5a:b2:eb:3f:55:b3:7c:71:
         a6:c1:5d:31:cf:3b:48:67:96:ae:89:42:c3:05:0e:5d:1a:06:
         3f:2f:47:83:31:52:74:81:87:08:68:9e:ab:4a:0a:f4:97:da:
         f6:89:fa:7f:39:e2:b8:01:fc:23:75:8b:8f:15:eb:0a:07:4c:
         39:65:bc:68:52:52:92:88:8f:8c:29:95:37:3e:6e:8a:b4:58:
         74:65:08:08:77:16:72:ae:bc:06:28:48:d0:6c:de:bb:aa:fc:
         5e:eb:ef:be:b7:4a:16:a3:59:38:ce:b1:a0:57:29:68:a1:8e:
         34:a4:20:30:7c:da:45:fa:9d:fd:2e:88:6a:df:a0:81:48:66:
         1e:19:3d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:26:52 2026 by rpki-client