Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
File:                     Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft (raw, json)
Hash identifier:          OSFHe2BJLKzs05heWwGvlkKnkISTb+1E8+UUr36N8EQ=
Subject key identifier:   78:DE:48:C8:FE:27:6F:54:A9:B0:B3:7B:17:4B:15:8B:70:0D:B8:88
Authority key identifier: 61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
Certificate issuer:       /CN=61e6ea83926bc478c785471d805a5c1210a8c993
Certificate serial:       019F9135FDC290856FBFC4F729A6C86DAEF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
Manifest number:          19D0
Signing time:             Thu 23 Jul 2026 23:01:02 +0000
Manifest this update:     Thu 23 Jul 2026 23:01:02 +0000
Manifest next update:     Fri 24 Jul 2026 23:01:02 +0000
Files and hashes:         1: 2dU_Wx7maoKES4uWBmISrFThyIU.roa (hash: ffH0TAg9XSxzOXt+6AV+6sDEvW+c8igbg9XX2e6NJUY=)
                          2: HZb22Oio0r0dOkO7Ylc22UNpmkI.roa (hash: 4bxPJ8gmL9NMrQNM+ipouVsdrPbO9cdpsR6HkCC+6eM=)
                          3: Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl (hash: B5oBkJ+w3/SH4cryOasXZfvPArmO/+mJB4eaI9UbxR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:fd:c2:90:85:6f:bf:c4:f7:29:a6:c8:6d:ae:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61e6ea83926bc478c785471d805a5c1210a8c993
        Validity
            Not Before: Jul 23 23:01:02 2026 GMT
            Not After : Jul 24 23:01:02 2026 GMT
        Subject: CN=78de48c8fe276f54a9b0b37b174b158b700db888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:01:ac:67:e4:ca:36:46:af:3d:2e:08:76:b0:
                    87:94:fc:93:dd:2d:4d:1d:7f:37:a7:17:7d:de:32:
                    48:cd:28:3e:34:80:c7:0f:cc:82:9c:d9:62:44:d8:
                    95:a5:80:1a:0c:8f:0e:3a:af:c3:01:6f:77:8a:0f:
                    3d:39:85:62:a4:7b:0a:6e:72:97:6f:55:43:1a:9f:
                    c6:3a:6b:7e:c1:b0:c0:c7:1c:e2:5e:95:47:e8:28:
                    30:0d:b1:79:37:12:f6:ad:b3:45:01:5a:41:0e:02:
                    2f:20:01:dc:80:6c:69:d7:5e:18:69:a2:5d:4c:0c:
                    47:67:a8:e1:8e:c6:ef:74:d3:54:22:6f:5a:ec:8c:
                    a0:b8:91:ab:97:46:dc:21:21:5f:ab:f5:f4:d6:2f:
                    b6:d5:be:65:f0:64:cd:45:21:8d:3e:fc:06:c6:c8:
                    ed:53:ae:f7:58:f7:a8:44:d1:47:ca:8c:8f:ec:fa:
                    ca:16:18:3d:82:0d:5a:1f:c7:b1:22:9b:fe:70:b9:
                    9d:53:80:28:66:21:6d:36:d0:58:bd:0b:3a:ba:ac:
                    77:08:37:ed:e4:57:ce:8e:e0:ec:2f:e9:68:f8:7b:
                    d2:61:8b:32:3b:f9:17:f1:b2:67:64:31:c6:ae:63:
                    77:7a:61:7b:34:dd:33:0e:d5:b1:79:7d:85:e4:52:
                    60:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DE:48:C8:FE:27:6F:54:A9:B0:B3:7B:17:4B:15:8B:70:0D:B8:88
            X509v3 Authority Key Identifier:
                keyid:61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ec:a6:7e:c3:9c:5b:9b:95:c5:c4:11:b8:9b:00:0b:b9:3f:
         24:12:95:d1:09:6f:ab:29:69:0e:10:6d:d5:31:fe:05:9a:d1:
         f9:a1:8d:bf:d0:10:c0:ec:1c:e3:7c:3a:f2:c2:e6:7b:39:97:
         56:7a:ca:bf:7b:ca:a9:44:07:24:21:c0:7f:a6:de:35:69:d0:
         a0:65:5b:96:f4:b9:9a:b9:13:cf:ac:ec:fa:02:80:c3:2c:7c:
         29:dc:8b:32:3f:3f:29:cd:7a:b8:ec:7f:f4:23:f6:07:5d:8f:
         1e:4b:9c:9a:56:55:c8:f9:ba:69:5f:1b:6f:1c:90:ab:8d:6c:
         68:e0:4f:39:89:a7:7e:fa:b4:2e:ae:d9:f1:a3:40:70:cc:45:
         49:3d:ab:e2:69:45:c0:00:8a:64:75:5c:8d:66:bb:d9:f8:db:
         dc:62:5d:0a:06:8d:41:a5:ce:46:1e:ce:62:e5:3e:25:3e:2a:
         da:15:8c:bf:66:96:3c:e1:52:0a:5b:54:1c:a5:36:26:f9:20:
         12:35:af:5c:21:5f:64:46:35:4b:ef:75:0e:6b:de:dc:e9:cd:
         59:18:87:7d:d0:fd:cf:b8:14:24:d5:35:e4:88:80:0c:d6:26:
         20:c4:d1:b2:29:d1:c0:7b:6e:67:3e:c6:c5:a3:96:89:33:26:
         b2:1e:d9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:54:25 2026 by rpki-client