Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft
File:                     Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft (raw, json)
Hash identifier:          /POukHMJ5I3DQUFWY8MZRKQW2fzORAjP+zmltQegbJQ=
Subject key identifier:   B2:D5:9B:83:6E:8C:1F:42:D0:42:E3:C6:68:30:60:16:BA:B2:B4:3B
Authority key identifier: 62:EF:97:75:50:FA:7C:81:3D:EE:5C:1B:90:E9:51:1B:9C:68:DD:0A
Certificate issuer:       /CN=62ef977550fa7c813dee5c1b90e9511b9c68dd0a
Certificate serial:       019F927F4C74608E5F3947E42B25959D1335
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft
Manifest number:          0D0A
Signing time:             Fri 24 Jul 2026 05:00:43 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:43 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:43 +0000
Files and hashes:         1: Yu-XdVD6fIE97lwbkOlRG5xo3Qo.crl (hash: iR1UZ5PPreoSPmTBSdoVk7T8GNDDZSuV45J+Scd8Ij8=)
                          2: rt1jmEWcts8v82w_w-CIFAF6XNA.roa (hash: 2a8J88cRjXc2S0NbaaMIdvXvo0cjbAPhTxZH/dueltY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:4c:74:60:8e:5f:39:47:e4:2b:25:95:9d:13:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62ef977550fa7c813dee5c1b90e9511b9c68dd0a
        Validity
            Not Before: Jul 24 05:00:43 2026 GMT
            Not After : Jul 25 05:00:43 2026 GMT
        Subject: CN=b2d59b836e8c1f42d042e3c668306016bab2b43b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ad:2f:96:80:f8:97:f4:f5:a5:8b:70:28:fc:
                    27:53:64:57:e3:01:3d:0e:18:40:53:61:34:1d:c3:
                    e1:69:80:17:2f:07:a7:15:15:f7:a5:8c:73:ba:f7:
                    af:59:50:b2:8a:cb:d4:e2:4d:ef:ae:24:1e:61:96:
                    f5:30:f3:68:79:ea:23:a7:0e:d5:1a:27:08:72:38:
                    07:78:17:0d:3f:23:d2:62:de:c6:27:a4:c3:3f:cf:
                    1a:0c:84:4e:46:3d:ab:1d:7d:17:2c:bb:bb:aa:b0:
                    6b:fc:33:51:e8:ee:8c:27:29:0b:92:94:57:ff:78:
                    98:cc:77:03:e8:1d:9a:0a:15:82:a9:e4:8b:fb:39:
                    e7:92:a5:02:8a:48:7f:36:5f:69:99:90:c0:37:6b:
                    92:c8:dc:7a:ea:f6:c8:58:e5:48:36:ac:5e:64:19:
                    11:a9:e7:c9:d5:42:45:20:f0:58:ee:05:16:cd:96:
                    fc:ce:c8:63:93:44:6c:61:36:b0:c6:3a:d4:ff:a8:
                    f0:cd:84:29:78:1a:90:e6:c7:98:39:90:6b:0e:63:
                    f1:7f:0b:1d:b4:14:3e:ef:64:f8:29:10:bd:03:f9:
                    e8:3d:08:3c:dd:9b:83:6e:fc:93:b7:d5:4a:0d:4e:
                    a2:ed:9c:e2:cc:a4:b7:95:97:7b:2c:65:19:51:63:
                    1d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D5:9B:83:6E:8C:1F:42:D0:42:E3:C6:68:30:60:16:BA:B2:B4:3B
            X509v3 Authority Key Identifier:
                keyid:62:EF:97:75:50:FA:7C:81:3D:EE:5C:1B:90:E9:51:1B:9C:68:DD:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:75:68:50:80:fe:45:04:f5:f7:4d:2c:3c:ca:1b:63:5f:7d:
         0f:d1:3a:1f:c1:3d:95:a4:f0:eb:ed:62:f0:aa:f6:92:93:f2:
         4c:9e:a6:ba:71:37:26:dc:d3:b1:30:93:ba:17:be:ec:13:28:
         f1:5b:c1:21:22:37:57:b4:74:30:75:46:bc:0f:4d:8e:a5:1e:
         b6:27:15:bc:37:6b:07:f4:78:68:2b:ab:99:df:15:f3:ac:28:
         de:d3:a1:34:94:e5:f9:56:21:a1:8b:2d:a7:26:75:1b:52:9b:
         3a:6d:31:7e:28:66:0e:91:d9:90:68:e4:5a:84:02:c1:08:d9:
         35:63:7a:bf:ce:48:92:95:6d:b3:5a:2b:f6:d6:f6:fb:b5:0d:
         bb:7e:aa:c0:38:d6:ce:4a:6c:40:b1:7f:af:fd:96:78:6c:d3:
         8d:ad:74:1a:93:32:28:87:54:9a:19:23:da:a4:2a:eb:56:fc:
         33:c3:a0:b0:98:d7:3c:ca:58:45:34:7c:51:ef:7c:8e:54:e3:
         07:cd:cb:a6:ca:9e:19:30:07:59:9b:10:7e:9e:59:52:b0:16:
         6b:27:ca:bb:90:94:2b:7a:be:59:a4:3e:8d:11:73:8f:52:17:
         b2:d1:26:12:44:96:e7:82:84:e9:32:0e:a1:b1:c8:b4:5b:c0:
         ef:5c:3b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:34 2026 by rpki-client