Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
File:                     yuzkHLwsMGJu8qKNGDny1sR1fz8.mft (raw, json)
Hash identifier:          /BcWLMBLNH2C6ajkyPX72K3Pzrv+092m9d1i04buSq0=
Subject key identifier:   93:D6:D2:2E:4C:4B:4C:6E:89:75:35:93:C2:18:91:A1:A5:F1:54:D5
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Certificate issuer:       /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial:       019F905A524991D3FDFFDCFD96F4A602A6FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
Manifest number:          19D2
Signing time:             Thu 23 Jul 2026 19:01:06 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:06 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:06 +0000
Files and hashes:         1: C0mI0v3AUYRPG8yTqF1QgFx7xU0.roa (hash: NZkJ/jcOZzqhSAxEfG1FbsPeSS23tdRhxk92nPlXNFM=)
                          2: JTcKp_-HzhWS07Rh-pfbwQal9BE.roa (hash: K+FwMVfzlkVxN/6tFJRIps6Jd4mzYW6vjm8IFKOQH8g=)
                          3: U-ONT3QFPmL6bgDFPQrkc4UkItw.roa (hash: jHrm5ubltObAwz/kEr5+twdpGR7UoJHw+XLZONVGw4I=)
                          4: fIbLyWDcpEVajMwX0IRFmbRboBM.roa (hash: qO1PWw5QDsqq+kEFxL2W+jiNK15/wTUl2EHHtmkWM64=)
                          5: nbAQ4BPt9n4nKfMqMproTXSCv8M.roa (hash: XXF2LQVa1HbRIXhKxBQckeiuDt9Ut4eLmMQeCOw1aKI=)
                          6: qcBd1Q5bVW4seHpjXwWwpkJfYnQ.roa (hash: dRY1xnWd/ZI7zspxffS1quMRwGNyT+a2Sy2Dp6pe8Ys=)
                          7: rZHZ_k5hgir55AATjETSpEWsH80.roa (hash: 8tYYoFYaWJCj2Pb7rbLdOHuTB+Gfcdd0okrBmCgEOAE=)
                          8: yuzkHLwsMGJu8qKNGDny1sR1fz8.crl (hash: dzQAECC2H7Amdf+jGiuwXz4+f6DZhtSeHxTAeHsJ9lg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:52:49:91:d3:fd:ff:dc:fd:96:f4:a6:02:a6:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
        Validity
            Not Before: Jul 23 19:01:06 2026 GMT
            Not After : Jul 24 19:01:06 2026 GMT
        Subject: CN=93d6d22e4c4b4c6e89753593c21891a1a5f154d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:73:7f:ba:71:71:15:60:ff:c1:8f:1e:93:50:
                    c6:a4:4a:3b:91:81:1c:30:4b:4c:9e:ec:19:cb:69:
                    6c:00:c2:f9:36:ec:2b:0c:ea:5d:75:b6:ee:d7:26:
                    25:e4:34:30:6f:42:70:d1:84:f5:0e:92:23:2c:68:
                    19:d2:a7:49:bf:0b:27:6d:bc:3b:53:f5:e7:17:3b:
                    d4:36:57:4c:d0:bf:57:bd:13:0f:98:46:54:4d:d5:
                    60:65:9b:f6:23:9d:41:5e:d7:69:d4:70:03:05:bb:
                    f2:e6:29:86:15:ea:11:5a:22:db:64:7a:48:0a:91:
                    ff:e3:b4:74:1b:29:fe:0c:3f:32:7a:d0:22:a8:30:
                    b8:23:ab:4c:af:d1:80:74:4a:df:57:1a:17:d3:18:
                    39:46:02:fe:02:55:1e:9d:16:7e:55:06:2b:13:d9:
                    f7:d5:81:84:da:e8:9c:f6:d3:48:db:92:bd:5b:cd:
                    ef:c7:74:18:8e:42:82:d0:81:e4:a1:ae:07:75:56:
                    61:ff:89:1e:7d:25:ac:b6:ee:f7:43:db:4a:19:4c:
                    c1:f8:8d:72:5e:42:7c:1a:ff:4e:31:2c:74:ed:a0:
                    da:73:61:78:26:46:c5:9e:64:5a:b8:cc:2f:e3:6b:
                    22:6b:8c:57:6b:e4:52:83:ad:cd:f4:34:0c:1e:ba:
                    96:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D6:D2:2E:4C:4B:4C:6E:89:75:35:93:C2:18:91:A1:A5:F1:54:D5
            X509v3 Authority Key Identifier:
                keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:94:6f:97:e3:89:46:7f:10:75:0d:ac:37:1f:e5:71:bb:9a:
         02:c3:90:80:0e:6d:c3:17:a7:4b:dd:c5:3e:9e:f2:52:a8:18:
         01:c7:c0:a9:02:a0:fa:8d:d6:b0:5e:de:c7:e7:fd:7e:aa:cc:
         f2:61:83:6e:8d:f5:2b:da:59:e7:3b:1c:17:b5:96:14:31:8b:
         67:b2:d0:29:21:79:62:67:46:8a:7e:7f:3f:4a:93:28:2d:2d:
         18:9f:c4:29:ff:b3:db:7f:0c:60:82:3c:b7:b6:1b:05:7f:d0:
         34:d2:1e:aa:0d:f1:33:91:ce:6a:21:9a:89:6c:24:0e:28:34:
         cc:eb:ec:db:54:04:27:19:84:d2:23:58:04:03:a6:68:d3:96:
         cb:c9:15:b8:af:57:78:dd:fa:ce:e1:dd:d8:b5:66:47:0f:e8:
         8b:54:33:cf:7d:12:f7:64:9e:cc:41:65:3a:68:e2:66:42:f0:
         e8:ba:36:c8:df:72:51:af:da:25:2c:ca:af:63:88:60:d0:9f:
         00:a9:bd:5c:a4:12:17:1b:b8:e3:dd:fc:6a:85:98:f2:76:24:
         95:93:09:b7:ae:94:95:64:c6:5b:93:be:13:16:b4:83:39:59:
         4e:f7:77:8a:b9:1c:2c:79:4d:5e:e2:e6:eb:94:b2:fa:15:0b:
         5e:09:07:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:25:58 2026 by rpki-client