Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.mft
File:                     YOPZchUzu192hceOyY34FPrV1nw.mft (raw, json)
Hash identifier:          VoH1oYsIEXuyUrNR/Fhr8dvdEe6AmE7IcpWdwsu2tS8=
Subject key identifier:   AC:F4:65:82:4E:28:E0:31:41:FB:07:E3:26:4E:86:28:41:80:A1:12
Authority key identifier: 60:E3:D9:72:15:33:BB:5F:76:85:C7:8E:C9:8D:F8:14:FA:D5:D6:7C
Certificate issuer:       /CN=60e3d9721533bb5f7685c78ec98df814fad5d67c
Certificate serial:       019F939214D9EB7FCFB95B0CEDD72906CAB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOPZchUzu192hceOyY34FPrV1nw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.mft
Manifest number:          F7
Signing time:             Fri 24 Jul 2026 10:00:52 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:52 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:52 +0000
Files and hashes:         1: YOPZchUzu192hceOyY34FPrV1nw.crl (hash: 9Ov0QSMJLj70Oqpwy/iQ6snDlMRd5uwX5Y344wbKd5I=)
                          2: cUpkjaDP4LJticYxAdxvejamI7s.roa (hash: NYs65YNfWkOoclb0FiT35oPaVvQTLiTbCeZBVy6gqu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOPZchUzu192hceOyY34FPrV1nw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:92:14:d9:eb:7f:cf:b9:5b:0c:ed:d7:29:06:ca:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60e3d9721533bb5f7685c78ec98df814fad5d67c
        Validity
            Not Before: Jul 24 10:00:52 2026 GMT
            Not After : Jul 25 10:00:52 2026 GMT
        Subject: CN=acf465824e28e03141fb07e3264e86284180a112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7d:ed:5d:f2:7b:36:fd:16:98:5f:a4:bd:ac:
                    97:9a:8b:9e:f4:cc:03:b3:a1:01:a7:95:52:05:af:
                    cb:1d:e7:a2:bd:84:50:3e:bd:5f:42:79:f5:1e:4d:
                    8e:9d:61:7e:a5:f6:b0:46:89:a9:d9:64:b2:70:29:
                    75:ae:d3:24:83:4b:f0:1f:8c:87:af:63:59:a3:a5:
                    0a:eb:b9:1c:9b:a1:16:3f:89:a6:bc:b5:c4:86:c2:
                    c9:f5:ad:fe:69:72:c8:24:55:1d:3f:86:49:aa:9f:
                    e4:b8:94:9a:b7:c7:f9:46:9e:23:cb:7b:23:7b:6e:
                    27:96:fd:dc:cd:ae:26:77:84:5a:64:e9:63:51:3d:
                    2b:88:50:47:98:58:12:06:1a:dc:5e:8b:ea:3d:ad:
                    34:3f:25:be:1d:3d:7a:77:35:26:ad:2c:de:e5:4a:
                    55:db:12:1d:8d:b6:4d:39:15:8d:0b:80:d3:57:32:
                    e4:42:01:5e:00:d4:cc:c8:6a:72:6c:cf:7b:a1:99:
                    ac:53:2c:12:f0:9d:ab:cd:76:4f:9c:a6:bb:2d:77:
                    c2:6b:be:1c:84:c2:c4:8c:1b:9e:8c:d1:ad:6a:88:
                    3c:60:1b:11:48:b3:51:17:18:f0:3e:38:b0:e3:c9:
                    c8:c0:05:f2:19:7b:4a:a4:09:61:ac:bd:17:79:18:
                    5d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F4:65:82:4E:28:E0:31:41:FB:07:E3:26:4E:86:28:41:80:A1:12
            X509v3 Authority Key Identifier:
                keyid:60:E3:D9:72:15:33:BB:5F:76:85:C7:8E:C9:8D:F8:14:FA:D5:D6:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOPZchUzu192hceOyY34FPrV1nw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:a2:a5:c8:41:8a:89:0b:ce:2f:ba:0c:92:68:14:1b:f0:77:
         81:41:ab:ee:ed:bf:7f:88:93:b5:38:e6:ed:1c:8c:bd:f5:dd:
         6a:06:5e:28:ae:1b:90:26:17:51:ff:ff:d4:31:ef:c6:84:69:
         c7:e0:94:80:c2:fd:d7:ef:76:ab:d6:63:73:67:0f:94:9c:1b:
         d8:45:5b:a1:79:12:2e:8c:84:09:0e:ab:b0:9a:66:dd:d7:74:
         2c:b1:f0:4e:46:03:0c:6d:32:f6:86:37:1b:2a:e8:48:ee:8b:
         e3:50:f8:af:a6:b4:48:e4:b2:62:2f:24:a9:40:36:4e:6c:4c:
         6a:b0:fd:fe:e5:f5:83:67:d0:de:57:7a:77:c3:d1:b0:db:7b:
         2a:20:ac:68:c1:e8:a5:4f:17:3c:a8:9d:56:10:47:44:68:1d:
         c1:ca:8a:1f:83:1c:34:30:d7:40:75:9e:84:d4:82:2d:60:f8:
         85:5c:b8:8d:83:30:85:f5:90:e5:44:f1:d7:ef:32:7e:2f:a8:
         69:5c:3c:ec:9b:14:87:09:77:5c:3b:e3:0b:0e:5d:f3:25:f5:
         51:f0:bd:c8:27:a5:62:82:56:35:6b:3c:7d:c0:65:fb:c7:c3:
         55:9d:da:ae:48:5c:fa:8e:9b:78:7a:92:8b:81:93:74:f3:ed:
         31:95:da:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:36:06 2026 by rpki-client