Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
File:                     pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft (raw, json)
Hash identifier:          S/rYOCRtcwF6SDhlWEd9M+dPIxRoIEnAaxl7CUUti5U=
Subject key identifier:   14:E0:41:0F:5B:8B:37:C0:9A:7D:90:52:96:AB:C1:FB:84:43:3F:17
Authority key identifier: A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2
Certificate issuer:       /CN=a58d4983c9c63bd8a158003c585f43d994c12dc2
Certificate serial:       019F8EA2CC91247DABB44F07E75B76D86D44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
Manifest number:          0E28
Signing time:             Thu 23 Jul 2026 11:01:01 +0000
Manifest this update:     Thu 23 Jul 2026 11:01:01 +0000
Manifest next update:     Fri 24 Jul 2026 11:01:01 +0000
Files and hashes:         1: XRP_MPkLm_0QssEiTHkCbDrEPpU.asa (hash: synzedK0MZTRSsmmEbbHPfwcXL4mKHgf1KOGnhSnQyw=)
                          2: nNH6sGpCvz3ezBX3sx86BQOdyAA.asa (hash: GLJegFjrYiTvKngtgiheUKQbcRubxcGvaIy2G1YhBWs=)
                          3: pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl (hash: 1+E3bmKs2O3iD85xZpNGImmCRaenFC5QVjHB7cZB3lg=)
                          4: xSbXTvUREzkzc7-l2JL6Gfg8LbE.roa (hash: /FjGi3zucL1NzNe41iFvx0RHmpavP7RfeWxzQfA6e5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:cc:91:24:7d:ab:b4:4f:07:e7:5b:76:d8:6d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a58d4983c9c63bd8a158003c585f43d994c12dc2
        Validity
            Not Before: Jul 23 11:01:01 2026 GMT
            Not After : Jul 24 11:01:01 2026 GMT
        Subject: CN=14e0410f5b8b37c09a7d905296abc1fb84433f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9f:e9:32:0c:1e:77:af:2d:db:9b:6f:c9:f5:
                    46:23:8e:3b:e6:ee:ff:08:33:94:19:0f:76:b6:a9:
                    78:00:c6:09:1a:95:a0:69:8d:97:e0:c9:bd:55:22:
                    c1:c8:c4:3c:53:da:0d:39:20:9c:e0:a1:d3:cc:f6:
                    87:ca:4a:90:91:5e:c8:c1:98:91:09:31:df:42:8d:
                    40:9f:76:7e:34:f8:1c:29:b4:02:8e:b8:b3:5d:b4:
                    a3:d0:ea:07:d9:b8:b0:97:c3:e8:61:2e:99:80:c0:
                    a5:18:bb:89:c7:09:b9:b3:86:05:8d:cc:2c:84:8b:
                    7d:da:b7:84:57:94:8e:c6:be:6c:2b:75:f1:74:3d:
                    a2:2f:5a:56:90:fb:cb:ef:5c:09:4e:0b:19:ed:9a:
                    0f:9f:5e:8a:e5:5d:50:03:35:c0:e9:87:3f:99:a2:
                    09:91:01:f4:29:64:a4:6c:9f:7a:b6:ed:d3:80:6c:
                    7f:f5:7f:48:b4:d6:da:bc:ca:ec:b0:3a:94:f9:0f:
                    65:a6:22:5a:84:1e:87:5b:00:59:f2:8f:ef:d3:e6:
                    da:f6:ee:19:6f:fc:22:c9:d8:fa:bf:9a:2b:60:d8:
                    54:a4:79:34:a8:ab:3e:66:02:40:63:8a:f8:5c:a3:
                    98:4f:38:ed:8b:e3:73:1d:bb:ec:86:86:b9:b4:39:
                    90:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E0:41:0F:5B:8B:37:C0:9A:7D:90:52:96:AB:C1:FB:84:43:3F:17
            X509v3 Authority Key Identifier:
                keyid:A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:15:e8:a0:8c:ce:4e:d4:77:ca:57:e1:49:6d:54:df:10:75:
         63:67:39:aa:23:a0:c6:cb:d5:45:12:d9:7f:ce:d0:a8:48:99:
         24:9e:8b:cf:0d:5c:eb:4d:bf:17:25:2b:b3:80:c1:f0:23:99:
         8b:ef:dd:ba:50:11:b0:82:23:32:69:4a:8d:a6:ea:9e:96:64:
         39:29:99:13:d0:95:01:4b:6f:45:cf:2d:69:9d:fc:a5:9c:10:
         1b:4a:33:47:7f:6b:82:21:c3:42:ec:e2:3b:e3:d5:7a:a4:94:
         11:66:27:26:c6:28:a8:91:41:17:04:7a:f0:81:de:b0:67:07:
         88:fc:79:80:ee:48:3b:c4:55:40:3c:62:7a:49:6b:03:ce:ca:
         e5:d8:06:cd:cd:56:e7:18:5d:b8:7d:7e:a7:77:15:f4:94:ac:
         14:34:69:14:69:77:09:57:2e:33:4b:6c:ae:e1:67:d1:86:10:
         55:cc:2c:2b:c6:16:2f:6c:97:3e:68:c2:ef:cb:e9:cd:8a:1c:
         03:99:f3:9c:64:3d:4e:da:f3:75:be:6e:cd:79:ce:e9:ac:4d:
         d8:68:7d:b6:a6:ce:03:9e:a1:2f:6a:a6:33:c4:35:45:15:8a:
         fc:c9:e3:4e:45:dd:ba:31:2b:f6:ad:b9:02:47:92:5e:54:c7:
         53:5f:8a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:12 2026 by rpki-client