Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
File:                     yYuCXzbpzDMDFclA3oAMurzjOXs.mft (raw, json)
Hash identifier:          4WgY2wJqxkfiesezrID0aPcuy74pWg0eHNphOc6eyLs=
Subject key identifier:   61:4B:21:D1:53:5E:0A:08:C4:9F:D5:6F:0E:AA:24:70:DE:EC:6F:A4
Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Certificate issuer:       /CN=c98b825f36e9cc330315c940de800cbabce3397b
Certificate serial:       019F9023692CF68D2EE5165FFF88D07168D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
Manifest number:          15D8
Signing time:             Thu 23 Jul 2026 18:01:07 +0000
Manifest this update:     Thu 23 Jul 2026 18:01:07 +0000
Manifest next update:     Fri 24 Jul 2026 18:01:07 +0000
Files and hashes:         1: BIg9g8urjWzblnNO_lVEgCU_0L4.roa (hash: Zkf0cuxdTPBJNDfyoYR/TqE/qjZVNjVMgcTyzgopEr0=)
                          2: Iphm7z7updBWRc2PNItoZmhVxuU.roa (hash: ld3zzmRGDXodfmUypvYiol82dEtF61c0SzZg6YzCfrA=)
                          3: T0TpEfENHz0bxlptxB0nFINW90A.roa (hash: TVxTNouu1BfDbucKooEPdLrXN8aLRFVGM4/IuDaxZE0=)
                          4: fpWqB6GHlXOWcBg30kWtguLx_NY.roa (hash: fXvgv1LhXoBErsUNrvQ4zZ5bYi/IxJJ6Qaj/JGmSwZU=)
                          5: hRup2JJMWBOF-WiIMoiCnCzzApo.roa (hash: /227YrF7k3BWfB+D58mu+onRUSZxRqZuv9vNnJFuS4M=)
                          6: yYuCXzbpzDMDFclA3oAMurzjOXs.crl (hash: pMrRb0d72KPo9N5Zatc3biV5lg+EJ4+OpoE/nXuSM10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 18:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:69:2c:f6:8d:2e:e5:16:5f:ff:88:d0:71:68:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b
        Validity
            Not Before: Jul 23 18:01:07 2026 GMT
            Not After : Jul 24 18:01:07 2026 GMT
        Subject: CN=614b21d1535e0a08c49fd56f0eaa2470deec6fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2c:c5:d2:3a:76:b7:e3:1e:90:e0:e0:1a:1b:
                    5e:38:83:a5:77:1c:77:fb:ca:4f:1f:56:f5:18:76:
                    67:44:fe:42:ac:ee:3b:a3:42:09:46:fb:01:ba:8f:
                    7b:24:05:bd:91:68:78:97:dd:40:02:04:93:1f:62:
                    89:d8:10:21:c6:a6:ce:31:79:49:07:d5:8a:85:24:
                    02:f2:8f:3c:72:45:bf:06:d2:38:8d:1f:8e:aa:72:
                    23:ff:76:20:23:d4:fa:3e:16:37:74:bf:c7:9f:d2:
                    ac:85:ea:4a:30:29:c6:36:63:5f:ee:16:67:ff:4c:
                    e2:3c:39:b5:2d:8d:14:c3:eb:ed:9e:41:65:5a:0e:
                    3d:47:fb:7b:f6:15:ec:04:6f:08:62:df:28:26:71:
                    2d:58:e3:dc:f0:b1:90:5e:5b:74:66:74:88:91:17:
                    79:f5:2d:f3:dc:ea:50:20:49:1b:a5:53:bd:24:3f:
                    36:23:e4:cc:0d:3b:92:f3:78:2e:b0:08:c2:73:bd:
                    eb:79:54:6d:34:8d:c2:91:05:d4:56:20:fb:eb:82:
                    12:d3:71:e8:b5:a2:90:4d:87:da:b2:35:82:74:32:
                    3f:b0:84:51:98:e3:a2:83:eb:33:b0:47:3c:9d:a4:
                    a7:5d:92:a5:71:34:c6:73:ff:04:14:fa:0f:20:b6:
                    c8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4B:21:D1:53:5E:0A:08:C4:9F:D5:6F:0E:AA:24:70:DE:EC:6F:A4
            X509v3 Authority Key Identifier:
                keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:98:f3:30:2f:9e:72:a0:6c:e1:30:41:28:28:70:ee:d4:cf:
         50:d8:74:c5:c8:92:65:0b:11:20:c4:7d:3c:53:4c:3e:db:f1:
         7f:14:e3:35:79:c6:f4:bc:85:24:c7:c0:a8:b9:02:0b:ed:e1:
         ea:dd:c0:b8:b5:0a:63:41:84:36:d6:d8:ed:41:23:e8:61:21:
         f0:83:d8:59:8e:30:b0:63:1c:41:19:99:fb:74:dd:9f:9d:c5:
         1f:3d:08:da:ec:ac:a7:56:d0:70:68:4e:7f:d5:23:f5:b9:d3:
         79:92:85:24:0c:f0:eb:dd:46:f6:90:8f:45:4e:17:4f:4e:78:
         86:35:b0:b5:d0:16:aa:29:34:3e:ab:59:43:b0:52:55:46:78:
         ca:7c:46:e2:9c:9a:42:7b:0a:60:5c:a8:01:2a:54:47:85:a8:
         03:c2:93:f8:2a:07:67:ef:68:b7:bb:34:7c:70:e5:cf:5a:58:
         4a:cb:f7:2c:ba:5e:cf:7b:2f:11:fa:6f:94:a0:f6:f1:5b:a9:
         49:25:38:8d:5e:d0:32:68:c1:52:93:ff:12:6c:b9:af:48:6b:
         18:99:32:04:6c:91:9e:c7:f0:f4:68:7b:75:8e:13:1a:aa:a0:
         f8:b3:fb:03:15:f0:37:8a:75:d3:41:79:09:ad:62:e6:83:71:
         6b:20:0c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:12:42 2026 by rpki-client