Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
File:                     YRs47qO8cHP29KpNIe1BNmXXyic.mft (raw, json)
Hash identifier:          vfkGE6kXfdxv86pAGCgxHzQWf+gTlpm/uQISbQw0aEY=
Subject key identifier:   DF:DD:C2:05:92:26:D1:77:6C:F3:C6:B0:77:8B:85:59:72:F3:AB:4F
Authority key identifier: 61:1B:38:EE:A3:BC:70:73:F6:F4:AA:4D:21:ED:41:36:65:D7:CA:27
Certificate issuer:       /CN=611b38eea3bc7073f6f4aa4d21ed413665d7ca27
Certificate serial:       019F8F7F81E5CE7CA604BA4481A7DB05A304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YRs47qO8cHP29KpNIe1BNmXXyic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
Manifest number:          30
Signing time:             Thu 23 Jul 2026 15:02:05 +0000
Manifest this update:     Thu 23 Jul 2026 15:02:05 +0000
Manifest next update:     Fri 24 Jul 2026 15:02:05 +0000
Files and hashes:         1: TcaCPZlW9b7nUjd0B-e1yd0zAE8.asa (hash: Oy2UJlXOZ8xOLUsWDNeaDlW0wd+hjDN8NHEzf1/ZIt0=)
                          2: YRs47qO8cHP29KpNIe1BNmXXyic.crl (hash: IilrCJ2a3jD9ChmAwXtNr6qcI3auCuTPaUiYyC1nZZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YRs47qO8cHP29KpNIe1BNmXXyic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:81:e5:ce:7c:a6:04:ba:44:81:a7:db:05:a3:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=611b38eea3bc7073f6f4aa4d21ed413665d7ca27
        Validity
            Not Before: Jul 23 15:02:05 2026 GMT
            Not After : Jul 24 15:02:05 2026 GMT
        Subject: CN=dfddc2059226d1776cf3c6b0778b855972f3ab4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ca:9f:54:12:44:eb:8c:1a:f3:1d:3e:b4:03:
                    fe:5f:f6:0f:e3:2b:9c:05:5e:54:bd:76:39:37:24:
                    83:51:d9:bb:72:ed:54:55:13:81:1d:81:32:4c:a9:
                    ab:b2:1d:36:b1:b5:5e:e4:bf:d6:e0:93:f6:07:ad:
                    fd:08:dc:85:12:85:46:dd:20:af:30:9c:74:45:35:
                    92:bb:50:d7:10:a4:c4:60:d8:59:59:1f:ea:14:a6:
                    5f:f1:4b:fd:b8:90:2c:17:04:86:4c:5e:a8:e8:36:
                    dd:49:81:c1:03:e6:82:dc:fd:b4:51:2a:34:16:9c:
                    58:fb:97:e7:d5:e8:38:1a:a5:f1:15:bd:4a:ec:64:
                    c2:ea:53:1f:f0:da:8d:f0:2e:35:ba:0b:c2:0a:35:
                    67:11:f1:08:d0:77:ef:3e:ce:2a:fa:51:06:0e:1f:
                    81:df:4f:4c:d0:6a:e3:e1:eb:83:d0:98:f0:59:d4:
                    fe:e6:2c:a3:37:1f:55:5f:a5:ff:3f:b5:7e:e3:f3:
                    2f:20:29:1c:69:5b:c6:85:20:7c:3e:4a:a5:2d:1a:
                    02:62:28:27:da:d2:1c:ea:10:d3:2b:a9:6b:53:b9:
                    0a:a0:c6:7e:9e:20:c3:eb:ae:b9:86:ec:c4:55:85:
                    26:eb:bc:fd:54:c0:cc:a3:d4:7d:05:44:8b:0d:e5:
                    43:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DD:C2:05:92:26:D1:77:6C:F3:C6:B0:77:8B:85:59:72:F3:AB:4F
            X509v3 Authority Key Identifier:
                keyid:61:1B:38:EE:A3:BC:70:73:F6:F4:AA:4D:21:ED:41:36:65:D7:CA:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRs47qO8cHP29KpNIe1BNmXXyic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a9b6d1-0374-4728-b4f8-d605eef051f0/1/YRs47qO8cHP29KpNIe1BNmXXyic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:cc:05:ba:10:2a:dc:39:43:21:aa:bd:7d:87:ce:cd:3d:c8:
         cd:99:28:36:64:95:a9:bb:3c:3a:f5:ff:72:bf:91:d8:53:a9:
         41:02:d1:e8:9e:1b:a8:94:54:df:4e:6e:b1:dd:50:33:a2:6b:
         14:ec:74:52:12:20:cb:df:5b:7d:cf:f3:70:b3:af:37:9e:27:
         af:30:20:11:19:08:c9:44:06:5f:74:f6:70:b6:4f:6f:48:63:
         2e:e1:ef:e0:7c:9a:0a:b1:af:10:e9:e0:fe:cb:21:dd:f5:a3:
         84:47:0d:67:b1:a9:08:cd:de:91:ae:10:9e:65:fe:a9:82:f4:
         49:0a:1b:cb:b7:29:10:9d:01:be:3f:20:ac:71:6c:89:39:64:
         21:16:b8:1b:c7:0a:01:01:ef:a2:fe:4c:0b:06:7e:8d:09:69:
         f8:95:14:f5:94:63:04:ec:2b:cb:e1:92:d7:54:1f:31:cb:b5:
         10:16:86:83:1f:55:46:19:3e:8a:01:9f:c4:91:bf:90:a9:b1:
         54:c7:41:1e:5e:24:ee:06:c9:99:ff:f3:c7:d8:78:ed:85:1e:
         75:ca:f5:ae:bc:22:f4:1f:22:e7:ac:1a:5e:0d:26:ab:51:b4:
         36:2b:00:96:03:11:e1:9b:89:ed:1d:b3:1a:70:30:bb:5e:b2:
         23:8e:de:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:06:52 2026 by rpki-client