Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
File:                     yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft (raw, json)
Hash identifier:          pn25bFMg2amkJukxQnSGDeLF4qrB8e5huVnixGumP2Q=
Subject key identifier:   C1:2A:E6:E7:7D:47:75:61:48:8F:55:A3:9B:B9:C1:12:53:73:89:8A
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Certificate issuer:       /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial:       019F9059CAF54F17D0A3F938B9A473A115C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
Manifest number:          1723
Signing time:             Thu 23 Jul 2026 19:00:31 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:31 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:31 +0000
Files and hashes:         1: 2Rt9Gwr4sjkr8DA_k8J0_h0v0S4.roa (hash: tqZC3K8qhKl5fCuSFTCvvWh/uoUIwg2YeD8aanIXDKI=)
                          2: 7RP3iQSQtD7arxeBmQKhFnoyW2s.roa (hash: uPo2yrco4pJh4jY2PAvFRXkWk7uLAk3aIu3THxlgOtk=)
                          3: G6JvpqCYvPpC7VM1ZZPSfJgdNhc.roa (hash: D1iE+lUItdHWGUL+J972PCDTzMoGyX6bUifXJiUpjwY=)
                          4: lUtDTycr7tmHl8som-NIOGSL4hQ.roa (hash: bob91L00C+zBJmnNvfIjHOpV1SfQVQs/iVPuHdwEzf0=)
                          5: tWOuO39d71f5m4fAGnZWNgBEmoQ.roa (hash: 9CQk4BPxr4B6xZlS3j9hWqhPr4OQvnm1ZyCmYYoOxCM=)
                          6: yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl (hash: 9ABBXX3wWS+eATiUj12mrcGGTtp/zsVbixjb7s67ezk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:ca:f5:4f:17:d0:a3:f9:38:b9:a4:73:a1:15:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
        Validity
            Not Before: Jul 23 19:00:31 2026 GMT
            Not After : Jul 24 19:00:31 2026 GMT
        Subject: CN=c12ae6e77d477561488f55a39bb9c1125373898a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e2:fe:8d:17:2c:23:14:e8:24:ea:46:5c:b6:
                    53:b6:4c:34:1c:80:81:eb:72:6b:78:6b:ed:d7:a6:
                    ff:fe:9a:61:a2:a6:fd:cc:6f:5f:f3:31:64:94:90:
                    02:28:b8:96:c9:2d:18:c2:b5:0f:c6:b5:0a:19:03:
                    39:ea:5f:0b:9e:08:6c:9f:d8:67:58:9d:c2:55:15:
                    f5:91:ae:62:39:0d:3e:8b:a7:c0:f2:83:2b:16:86:
                    59:4b:8a:5e:66:8e:f9:9e:6d:72:1b:b1:a2:2e:6e:
                    d7:c6:3e:07:92:b7:38:82:40:2f:ef:02:86:2c:8c:
                    e9:1d:64:3c:d4:06:37:a8:73:88:6b:86:c0:24:b4:
                    84:b7:8c:ba:68:9a:7a:82:42:cb:90:e6:aa:fc:1f:
                    51:e5:2e:e1:00:31:b3:41:e2:17:8f:3e:4e:ba:4c:
                    29:42:8c:1a:16:d6:aa:a4:fd:00:94:c9:55:7c:d4:
                    24:ac:e2:9a:ea:e4:c8:f2:b6:3b:5d:93:27:8c:c6:
                    5c:49:06:2b:72:4d:12:af:8e:74:b3:b7:4d:b9:0c:
                    d8:3b:cf:31:d2:73:e2:6a:de:09:ae:b4:02:fb:41:
                    b5:39:74:7e:8f:fc:b3:da:7c:7a:e4:d5:e4:ab:bd:
                    fc:0b:f7:49:fe:2a:53:66:9a:0c:48:ca:ac:1a:5f:
                    1e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2A:E6:E7:7D:47:75:61:48:8F:55:A3:9B:B9:C1:12:53:73:89:8A
            X509v3 Authority Key Identifier:
                keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:21:a4:08:09:bf:b3:d1:15:a8:24:9e:f3:a5:40:17:2d:7d:
         fe:55:04:0b:d4:74:78:97:8a:70:d9:1f:9e:3a:9a:69:cc:22:
         b5:0b:54:85:4c:2a:5e:92:dd:05:8c:3f:dc:be:f5:76:42:45:
         37:7f:c8:5d:7e:08:f8:91:3b:d5:91:1d:8f:f3:6e:dc:ea:fb:
         fa:da:bf:85:3d:ec:0e:dc:ee:49:7c:ea:e2:c5:8d:c2:e8:3b:
         2b:cf:43:80:14:b3:d1:7d:b2:1a:bf:32:25:fb:e4:2e:87:98:
         9b:36:03:84:cf:07:c9:08:3a:1e:6b:26:1f:7e:ad:92:3d:fc:
         3e:17:7d:83:56:b0:f5:07:da:94:91:56:52:69:03:08:d2:89:
         89:58:61:11:4c:fa:06:b1:48:02:e1:bc:f9:3e:c1:24:50:06:
         f2:c4:26:92:91:0d:25:8e:90:04:e4:c7:cb:1e:f0:ec:2b:67:
         6f:4f:00:ed:3c:b1:e0:76:da:7f:a7:46:01:84:d2:63:fa:c6:
         c4:2a:e3:85:df:90:92:9d:a3:4e:83:72:8b:67:15:c2:22:73:
         d0:b2:50:f6:dd:d1:e1:04:ab:f3:39:9a:6e:54:0d:d1:38:93:
         3f:66:ec:4e:c9:48:6b:78:79:96:c0:eb:66:4e:df:80:56:01:
         8a:79:4c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:32:41 2026 by rpki-client