Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
File:                     cYZUy47T9V1cYJctMQ9e1iBLT-U.mft (raw, json)
Hash identifier:          hPa6JPSrv96Bc+m+5ZhBHQObJWyTcjxJiMV028a3YuA=
Subject key identifier:   1F:6A:F4:4B:01:51:D0:4B:A7:D7:48:1D:C6:63:71:C2:C8:77:77:B6
Authority key identifier: 71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5
Certificate issuer:       /CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5
Certificate serial:       019F95EDFD69BA0F3BD3821E5EECBA019D8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
Manifest number:          02D1
Signing time:             Fri 24 Jul 2026 21:00:29 +0000
Manifest this update:     Fri 24 Jul 2026 21:00:29 +0000
Manifest next update:     Sat 25 Jul 2026 21:00:29 +0000
Files and hashes:         1: Db8si0kRaxTnvBotY5xlGgXYCEY.roa (hash: 6MeVbdKHOlGhavTCR/DEJwBFemKsETXHXudBvVRWmI4=)
                          2: cYZUy47T9V1cYJctMQ9e1iBLT-U.crl (hash: hxjzPsOcVOxSU2sfP8FQ48KLMH7UeiyWpzZaF8xdGhg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:ed:fd:69:ba:0f:3b:d3:82:1e:5e:ec:ba:01:9d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5
        Validity
            Not Before: Jul 24 21:00:29 2026 GMT
            Not After : Jul 25 21:00:29 2026 GMT
        Subject: CN=1f6af44b0151d04ba7d7481dc66371c2c87777b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:77:52:2f:90:a8:b5:a6:0d:bb:23:91:0e:
                    f2:24:97:23:f2:1b:0e:88:ca:be:b2:d8:1d:f1:6a:
                    5f:2d:39:1c:86:b7:12:09:3f:3a:f9:fe:6c:b0:50:
                    0c:fb:04:0a:b9:ef:1c:e3:66:54:dc:5a:d7:de:79:
                    65:40:a4:4e:ee:fe:18:fc:c9:47:32:c9:d7:9c:d5:
                    a0:31:04:70:7a:8a:df:60:a6:e8:2a:4e:d0:d4:ba:
                    1b:8e:02:03:c1:5b:25:6d:6c:63:8f:98:ee:85:4b:
                    45:df:ca:0c:d3:43:cf:bb:8f:64:c5:37:fa:a7:0c:
                    12:13:b5:d1:5f:b6:4c:da:bb:84:2d:9b:5a:d3:c7:
                    f4:0c:8b:37:a6:ad:c1:d9:7c:78:17:6e:04:18:c4:
                    bc:9e:05:e0:b4:2e:90:f5:3c:8c:2c:89:0f:38:a6:
                    f8:6d:e4:f5:0f:e9:dc:fe:11:5b:6b:19:e4:bc:87:
                    ec:5d:36:2e:52:fa:ab:a8:f3:78:54:ea:14:a0:6e:
                    4e:0a:0c:ca:ad:e6:57:89:94:df:f7:3f:af:73:01:
                    62:ec:33:d7:e4:91:83:4f:22:95:20:90:c9:70:81:
                    e7:2d:c4:74:82:08:f5:8d:22:60:8a:a3:79:e2:9d:
                    05:a6:3c:0e:0e:df:53:61:f4:f8:46:b8:c2:31:77:
                    5d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6A:F4:4B:01:51:D0:4B:A7:D7:48:1D:C6:63:71:C2:C8:77:77:B6
            X509v3 Authority Key Identifier:
                keyid:71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ca:17:d6:29:95:b0:dd:10:85:37:b9:26:16:eb:43:6b:7b:
         4a:44:82:3e:f6:59:10:eb:4f:ad:cf:2d:0f:0a:78:9c:4b:b5:
         e0:ac:4d:cc:ce:1f:c9:06:4f:93:af:50:dc:35:9c:22:44:c7:
         ea:21:9d:56:d0:cd:b6:22:73:bf:cd:37:7d:5d:4b:a1:c7:e7:
         d0:bb:19:37:e1:e4:12:b7:17:1b:02:28:43:59:6b:e5:db:78:
         37:dc:5c:6a:84:38:77:8a:0a:5a:c2:50:54:ae:ae:42:ec:53:
         a5:8c:75:8a:39:a0:e9:a6:54:ab:b3:64:1d:a4:ac:89:e7:ac:
         c9:0d:82:dc:f6:d8:c5:d7:56:f6:15:6d:ee:b9:c8:e3:2b:9c:
         20:8f:76:38:84:ce:7a:75:1c:12:3e:0c:c1:21:2c:08:86:4b:
         83:a4:2c:5f:16:df:b8:a3:02:6d:6c:49:2e:f3:42:93:e7:cd:
         03:32:4c:31:09:36:16:d2:58:ee:26:b0:25:8c:2c:d8:e1:e5:
         b4:47:a4:8e:05:29:90:54:5e:60:ae:27:63:6b:a3:1d:29:3f:
         4a:52:52:c2:e8:32:71:56:23:67:5a:0f:fd:50:60:6e:f0:e6:
         d4:84:9a:d2:ea:1f:05:5f:08:27:65:b9:c8:c8:6f:3e:bb:a6:
         9c:c7:94:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:47:00 2026 by rpki-client