Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
File:                     HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft (raw, json)
Hash identifier:          Y4QqCCL4DuFBoEDzMo3xu3+C9xAVmHR21MpXesEi+5E=
Subject key identifier:   26:8B:55:6D:83:C8:61:CA:1F:0E:DD:AA:11:31:56:DD:31:CF:DA:44
Authority key identifier: 1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14
Certificate issuer:       /CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
Certificate serial:       019F92ED12BF29C18823ACA61A90C40823E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
Manifest number:          19CF
Signing time:             Fri 24 Jul 2026 07:00:37 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:37 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:37 +0000
Files and hashes:         1: CTIK34W0gV9x3uv1-r0HDqxk6oI.roa (hash: yVsgO2IBgHOLaRgSGBJBDT5TTrMQD1SCcScxIYhY8XY=)
                          2: HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl (hash: nazA0/FwfaAoeRfJUCwQpmWFGzxMRQVdLC/4Pk8VioQ=)
                          3: LegPI0LcRAcrLBTlGUY6DuF5bPU.roa (hash: NBAPRKnIYd+TgJ5/R1gZLE8ial4CZdJAp6oEz5nJrso=)
                          4: dZcFXy59OBgCvb8-LnAFu481H80.roa (hash: S71mkWocgYTtJLOJGQFJaSGFLZadtvbJJdWNegtQAMs=)
                          5: nffOhSPbCiWPAgtugzjWRyuC30E.roa (hash: ozFheVA8KcSrBcCrb3RelsPEg0hh8qk70m83xq3pSAo=)
                          6: sUCFmwpJav81ZSRKsG-SSJaCaxg.roa (hash: 9KxlfWrLv7YnnCH1Vf26DGRif8A8TjjKojTT9mB5Eaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:12:bf:29:c1:88:23:ac:a6:1a:90:c4:08:23:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
        Validity
            Not Before: Jul 24 07:00:37 2026 GMT
            Not After : Jul 25 07:00:37 2026 GMT
        Subject: CN=268b556d83c861ca1f0eddaa113156dd31cfda44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6c:8a:43:20:26:fd:11:65:e5:df:13:25:5e:
                    14:73:46:31:ba:54:9e:98:b0:a0:62:01:28:05:6a:
                    3c:9c:ec:6b:4b:e4:2c:72:d6:6e:d6:d9:36:7b:41:
                    c4:fd:a7:7d:7f:08:b7:7c:b2:b2:db:66:02:a1:16:
                    dc:91:d4:f4:f0:0e:d9:f3:3f:0a:aa:05:51:59:5c:
                    4c:ce:f9:74:49:28:b3:4e:33:bc:c3:31:f1:ea:70:
                    b3:28:0c:83:ff:d4:47:de:13:8a:f4:cc:eb:f5:c1:
                    2f:2f:c7:a7:66:3c:1a:81:d5:a6:5a:e4:96:aa:95:
                    2e:fa:b1:97:ea:d6:97:33:7f:89:40:72:4f:ec:22:
                    3d:2f:a4:9c:63:a5:13:3d:7f:45:9e:8c:7b:94:b5:
                    db:cc:5f:15:ed:9b:89:e5:03:c8:15:44:d7:89:67:
                    16:0e:a7:2b:b6:25:d8:f4:e7:80:99:7b:27:f5:3c:
                    05:98:2e:a2:9e:de:c0:82:af:a4:2a:04:18:ae:98:
                    ed:e1:bf:3b:a1:9f:e1:fc:a8:1b:13:d6:52:f3:fa:
                    ac:37:6c:62:df:9f:4b:de:c1:31:ff:94:f8:c0:f7:
                    49:53:6d:81:a3:ce:1f:58:02:0e:7e:83:d4:c8:e6:
                    ca:b6:62:f9:33:50:fe:a2:6b:e7:2b:b7:38:fe:96:
                    a2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8B:55:6D:83:C8:61:CA:1F:0E:DD:AA:11:31:56:DD:31:CF:DA:44
            X509v3 Authority Key Identifier:
                keyid:1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c3:f2:29:6a:3a:7d:16:cd:c6:0e:3e:00:62:a8:b8:d5:53:
         e2:a3:88:dd:de:a0:2f:a3:3f:4a:2f:6a:58:26:c8:06:e5:bd:
         61:bb:3a:5d:42:21:4e:2e:86:a3:7c:11:c5:be:3e:9f:94:4e:
         1e:ea:7c:6f:26:fb:b9:61:96:2f:ce:d5:78:0a:55:6c:21:d8:
         d2:61:37:13:4b:d5:65:13:f2:88:7e:29:ee:d7:90:e9:4e:73:
         2b:9b:00:16:fc:1d:f6:a8:d0:52:57:ef:bb:5c:8f:57:36:37:
         81:61:6b:05:9e:49:b8:82:72:fb:7a:b6:50:af:03:be:85:26:
         16:a2:4f:e9:4e:6b:0b:da:e8:cc:28:4e:2f:d0:1c:5a:80:22:
         f0:f7:e9:d6:7f:a6:6f:6e:b2:48:ca:fe:a9:ed:2b:e2:fe:95:
         90:bf:d4:2c:59:33:c8:36:71:71:33:84:27:81:a7:9f:2c:db:
         12:89:5f:5c:07:94:70:a3:3b:e9:e5:e9:88:de:51:cd:bb:b0:
         49:ce:58:54:e4:ee:16:3c:48:28:40:54:50:79:86:07:15:68:
         a8:b8:0e:e0:86:0d:53:73:ba:82:95:dd:dc:62:23:31:74:88:
         af:ae:46:dc:90:05:19:55:f8:87:0e:2f:f9:aa:74:21:f5:46:
         fe:27:5b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:14:57 2026 by rpki-client