Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
File:                     Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft (raw, json)
Hash identifier:          0IREbXcitCgBFraAbifCYPSI4l757Z2vanb2LvtBLlk=
Subject key identifier:   AC:43:C7:D0:EF:E5:CA:A8:EC:DC:57:03:61:6B:31:07:78:98:24:37
Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
Certificate issuer:       /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Certificate serial:       019F9022F3C8432F003601E77B5BE888F7A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
Manifest number:          1318
Signing time:             Thu 23 Jul 2026 18:00:37 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:37 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:37 +0000
Files and hashes:         1: CK8OJfLCISBl1ouaHEnbpGJbOnw.roa (hash: pt47KAPdqRnN1dkS3yo4ZlI5RRvRrx+uI3TswhWMkuU=)
                          2: Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl (hash: UeHQNR8H1ycln4YiFumCMZuMKSHWzCMfnFXO9FMDWKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 18:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:f3:c8:43:2f:00:36:01:e7:7b:5b:e8:88:f7:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
        Validity
            Not Before: Jul 23 18:00:37 2026 GMT
            Not After : Jul 24 18:00:37 2026 GMT
        Subject: CN=ac43c7d0efe5caa8ecdc5703616b310778982437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2d:66:64:3a:a1:c0:77:92:81:fb:31:13:a4:
                    12:2d:06:5d:4a:b0:77:da:32:22:98:a4:8c:a2:0e:
                    37:f4:f7:0a:b1:c5:c6:18:b2:c0:3b:a0:b7:a1:31:
                    11:70:dd:ff:e1:2b:54:ec:39:4c:ab:c9:09:db:78:
                    a8:cb:d3:0e:44:f6:2b:eb:20:f1:64:c6:3d:d1:2d:
                    66:5e:7a:73:da:32:63:72:17:88:03:10:40:f2:96:
                    61:fa:43:a0:51:2e:15:8d:ab:09:c8:58:33:88:8f:
                    aa:b0:72:60:3d:52:f1:fa:b8:e0:63:2a:2a:28:29:
                    85:bc:21:c8:c9:18:ed:62:3d:de:69:f9:00:9c:ce:
                    cd:00:93:18:a2:1d:7a:32:4d:02:cc:d6:2b:0d:fa:
                    6b:fb:7d:1d:e8:de:a4:18:c4:fb:1a:e9:ee:75:ae:
                    99:70:63:69:cb:ab:b2:e0:05:38:43:7a:1b:17:52:
                    dd:e5:12:26:5f:d7:b4:3b:c7:f0:33:98:26:04:55:
                    6b:e5:48:3e:ee:bc:b9:4e:03:3e:34:ab:f2:6e:59:
                    34:4b:21:c5:20:a4:ad:00:c3:e7:32:8b:bd:c3:80:
                    35:71:d2:07:99:33:b4:49:66:df:c4:1a:2a:e8:bc:
                    2c:1c:ce:3f:89:57:7f:44:cf:37:d3:1a:dd:08:6b:
                    83:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:43:C7:D0:EF:E5:CA:A8:EC:DC:57:03:61:6B:31:07:78:98:24:37
            X509v3 Authority Key Identifier:
                keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:7f:89:72:87:9c:0a:62:ec:bd:fa:a3:42:79:2e:b3:9f:ba:
         d7:58:c9:19:f1:8f:ec:b2:cc:1c:01:a1:d2:79:93:ef:f5:51:
         e5:a5:b1:1a:2a:59:bd:65:31:6a:7a:4a:c9:37:c5:f5:2e:4d:
         21:49:41:87:12:2c:89:a9:c7:c2:27:30:ac:9c:f1:23:cc:f9:
         ac:44:f9:b2:f4:30:00:d5:ba:c9:41:dc:9f:0b:eb:fc:42:00:
         34:c6:11:9b:2d:13:75:fc:70:73:a3:74:71:49:10:ad:76:39:
         86:ae:3a:f6:e6:ab:a7:be:e8:0d:ad:ad:b1:4e:c8:07:3f:19:
         e0:d3:5d:11:39:e3:61:7d:9b:64:32:09:ef:13:15:ca:25:5d:
         1b:45:1b:3e:0b:02:37:a1:03:0e:fb:1d:cc:c6:dc:27:c1:fa:
         81:c3:cd:83:ff:a1:72:b4:ed:7f:66:03:a2:2d:1a:9c:1f:29:
         23:0a:86:77:ba:a1:6f:f0:57:e8:7e:13:bf:20:de:eb:46:30:
         fb:1b:c1:b3:05:11:e3:c7:2f:10:fe:3e:64:3c:67:88:86:36:
         a3:10:26:d8:1b:a5:eb:d7:d8:de:63:04:d5:f3:86:1d:b9:7c:
         a1:a4:42:73:26:f2:25:5b:9e:88:8c:25:ea:1c:ed:6a:b2:7b:
         a1:a8:f7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:55:45 2026 by rpki-client