Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
File:                     yteUrGAc4lBbZfl1p9UWovAKWzE.mft (raw, json)
Hash identifier:          6P7V7X4aNsGR8bJjd1pORZBhYvnQWzcjfS2iiJTQqB8=
Subject key identifier:   C9:ED:F9:19:6E:28:3F:9B:18:EC:AC:22:B6:0D:67:7F:CE:CD:FC:C9
Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Certificate issuer:       /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Certificate serial:       019F91DA2EA5C839B08B5718F56E293726C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
Manifest number:          19D2
Signing time:             Fri 24 Jul 2026 02:00:22 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:22 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:22 +0000
Files and hashes:         1: PZTHXJOe6Rub2_B35Qp_XWm1nCI.roa (hash: ECesKQ6eT4CAViBPjtKG3epmntO2VSEJzUCQqkLEU1U=)
                          2: aFAces1pfL2Gf7A82Ua9HdY5M_8.roa (hash: ihoy12eYWp6w4F3+SZfOyRsI/MGwgD7ZEiY1ooLQCpo=)
                          3: hHr7Y0UynB44y_uXn0Cj4kqW7mo.roa (hash: wecTOMqFEhRZq5XHYAG33+1Fx0NIuyBCiv4Opf1IkrY=)
                          4: uTIU2_KvYO-tKnwpco0cinKSFwY.roa (hash: uuFCbk/LILXi8ySr2DhHYpylPUgn3apdlnG7AhOMN8k=)
                          5: yoOlkunfyIDQIpu8hSJPuV67N8k.roa (hash: 3vGjw6ITVAmFgqvDm6vNVM3T1UQ++9p2OwqdlJ0wKCw=)
                          6: yteUrGAc4lBbZfl1p9UWovAKWzE.crl (hash: 7axcZf3oT93nL2RGCBPHui6RKN1H9zGFn5iXmUxFpr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:2e:a5:c8:39:b0:8b:57:18:f5:6e:29:37:26:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
        Validity
            Not Before: Jul 24 02:00:22 2026 GMT
            Not After : Jul 25 02:00:22 2026 GMT
        Subject: CN=c9edf9196e283f9b18ecac22b60d677fcecdfcc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e4:9f:b4:d7:69:0e:df:67:a0:24:2e:3b:dc:
                    11:03:24:44:87:a7:d4:ec:53:17:c0:3b:e2:87:59:
                    dc:27:07:f7:63:5e:32:36:8e:3d:ae:dd:e1:9f:7e:
                    e6:3c:05:56:df:e3:27:27:d0:3d:66:f7:13:d0:ed:
                    ea:42:3b:fa:3b:69:7d:b2:dc:5f:a0:ad:5e:40:56:
                    21:c2:a6:63:b9:18:91:4e:9a:72:60:31:bd:8e:2f:
                    fd:34:e5:a6:38:10:b0:ac:ab:16:25:a3:db:a4:9a:
                    80:e8:1b:71:6d:38:46:8d:ad:73:6e:cb:cc:5b:52:
                    7a:3f:c9:58:8d:61:91:df:53:d0:65:98:55:5b:11:
                    3b:a6:0c:56:4d:ca:5e:46:48:62:d4:5f:7e:66:cd:
                    6c:bf:7f:a6:01:d8:cc:ed:2b:e2:94:77:10:73:07:
                    a6:70:98:32:df:b8:e8:81:75:37:e9:ae:c7:a0:e2:
                    d3:db:86:95:af:a7:bf:f1:6b:e0:fb:b5:95:10:38:
                    07:cd:d4:56:b6:c3:bf:57:6b:0d:f9:2a:35:95:48:
                    c7:16:92:10:79:57:c6:6f:6f:f2:10:b5:6b:24:3f:
                    37:03:bb:ca:3c:41:d1:38:41:da:e9:31:69:25:67:
                    7b:67:40:5f:ba:6a:d7:8c:33:c7:c4:cc:e1:2f:ee:
                    6f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:ED:F9:19:6E:28:3F:9B:18:EC:AC:22:B6:0D:67:7F:CE:CD:FC:C9
            X509v3 Authority Key Identifier:
                keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b5:4a:af:5e:c9:94:d1:cb:19:17:52:91:5b:48:9c:7e:24:
         32:7f:1a:65:6f:b4:1a:9f:06:f4:e3:9d:62:dd:16:13:d2:1e:
         38:08:c6:bb:60:14:77:b4:b5:f0:10:c6:f5:9b:b9:fa:07:5e:
         49:d1:be:c1:98:a5:93:7c:bb:70:40:78:80:a2:a8:ec:73:be:
         da:25:a4:22:bf:43:a6:92:45:55:05:ef:2f:41:97:7a:f7:81:
         ca:5a:2b:87:c1:2d:83:5c:17:74:19:ae:93:ef:70:ce:f3:4b:
         47:9b:d0:0c:ad:3a:0b:00:0f:f1:b4:be:f6:6a:45:5c:fc:99:
         03:c6:94:4a:c3:c6:00:1d:80:9c:ca:6d:07:1d:2d:97:ac:83:
         10:2f:04:a0:ea:d7:82:c0:f9:67:6d:24:74:a2:76:cb:dd:50:
         9e:5f:60:28:0f:a0:08:0e:51:72:e9:d0:2e:99:41:2b:3d:ba:
         77:8f:c0:6d:53:27:5e:fc:68:bc:b6:5a:26:46:13:1e:1a:78:
         c2:65:f3:17:c1:82:e2:b4:ba:ec:c7:7e:2d:e3:f9:6a:4b:d0:
         1e:7a:ea:af:17:a1:67:a5:c3:f6:ca:1a:49:8e:10:b4:66:04:
         e6:bc:0b:21:ca:3a:cf:82:83:7b:db:bd:f1:99:e5:06:bb:23:
         2d:be:e3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:10:23 2026 by rpki-client