Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
File:                     YxrKX5odz6GXBNHwN38bn-kUXgg.mft (raw, json)
Hash identifier:          ORebS7Ib/3W0AZqlnhCk7uPhQPA6plUDSWPNMlrlz6U=
Subject key identifier:   8B:EC:6A:2B:4B:8C:E4:39:D5:2D:98:ED:A8:1C:03:0C:35:84:30:76
Authority key identifier: 63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
Certificate issuer:       /CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Certificate serial:       019F8E6BAD14ED9D3215B0CA8A8C3143E5EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 10:00:48 +0000
Manifest this update:     Thu 23 Jul 2026 10:00:48 +0000
Manifest next update:     Fri 24 Jul 2026 10:00:48 +0000
Files and hashes:         1: Awm_DabV6b5aFzZjoL4IRRaHXvI.roa (hash: 8OukxgZtrCYr2IAiBPp1+KwaQD8XPdUdi2hA8JM9baM=)
                          2: YxrKX5odz6GXBNHwN38bn-kUXgg.crl (hash: 2ZUu4p0oHFnwGrIoDJEuGUqeIqI1PIsEYPDIzt14eRQ=)
                          3: llfMrhUWfSkRK5hK0AzdhqQLJv8.roa (hash: hJA3pZdghhHwfd7bRm3Ls7VwTVf1TOxJacXNTFZzVPI=)
                          4: nFnwvZn2y6J_tUGewNTO4fY9C0k.asa (hash: zDo5Ms/ybgPRllQhXvdgQws7ZsKZj1TDWdYoEliu338=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 10:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:6b:ad:14:ed:9d:32:15:b0:ca:8a:8c:31:43:e5:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
        Validity
            Not Before: Jul 23 10:00:48 2026 GMT
            Not After : Jul 24 10:00:48 2026 GMT
        Subject: CN=8bec6a2b4b8ce439d52d98eda81c030c35843076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:eb:d5:4e:d2:4d:03:1d:d7:9c:21:90:e8:87:
                    b6:df:da:9f:71:30:ef:3b:de:d9:10:20:b1:a0:ab:
                    83:48:cf:d1:b1:c2:1c:ea:5c:8a:55:aa:95:ec:84:
                    6e:e8:df:05:cb:01:a7:90:d2:7b:c3:20:78:58:2a:
                    7e:7e:28:44:dd:03:44:3a:49:f2:58:6b:dd:72:b4:
                    99:03:3b:31:99:0b:6e:e6:3d:4c:7f:c8:cb:b7:16:
                    30:a0:02:ad:b3:c6:42:78:a7:eb:a5:2b:12:f2:68:
                    f1:25:94:11:ea:2d:27:d5:7a:9d:a9:ea:01:a6:4c:
                    42:0d:e4:8f:39:51:2e:52:1c:9e:c1:df:41:90:c3:
                    84:58:d5:25:99:6a:a0:94:f9:f8:fb:66:29:87:72:
                    01:df:a2:5f:1f:80:b6:a4:88:11:f9:52:23:07:8f:
                    c6:62:2b:06:33:e3:32:21:4e:61:17:9c:f5:cb:2c:
                    22:61:91:be:a4:51:d8:48:52:86:ba:6c:8c:04:fe:
                    fa:8d:bd:f2:41:c7:3e:d7:1d:55:48:42:b6:e7:9d:
                    5a:2f:30:72:b5:e6:00:b5:c9:a3:a0:7f:c7:45:4d:
                    97:e2:63:ad:77:1a:99:0c:57:35:e9:25:85:64:53:
                    2d:20:bf:ba:ce:f1:54:41:88:6b:b9:df:a9:9c:5a:
                    48:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EC:6A:2B:4B:8C:E4:39:D5:2D:98:ED:A8:1C:03:0C:35:84:30:76
            X509v3 Authority Key Identifier:
                keyid:63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:3c:43:5e:2d:67:d7:fc:00:1f:c1:c8:ac:7f:46:da:43:58:
         a6:75:cb:35:f7:3b:c1:ba:b6:52:13:38:00:46:bf:e4:10:62:
         bd:70:67:53:26:88:2d:4b:17:63:2b:88:e6:53:d7:8f:ec:72:
         a3:d9:be:39:f7:4c:d0:38:58:7d:15:bb:b8:9f:4e:26:f8:60:
         2d:09:9d:0d:9a:a1:b3:56:38:14:fb:3a:66:cf:32:66:2a:42:
         95:94:c7:01:31:af:7a:b1:0d:b2:2a:c2:af:6e:32:d1:20:65:
         e5:84:1d:70:f0:00:49:86:31:9e:c2:c0:94:58:31:c3:c6:ad:
         ad:34:6b:75:13:08:16:52:bd:e3:5b:2c:fd:73:e0:fc:9d:a1:
         89:68:f5:96:b9:64:bb:cf:e4:70:9f:90:fe:7f:15:ba:a3:8e:
         6e:bc:06:0a:b8:88:50:33:8d:7a:95:40:ef:af:9a:00:ba:15:
         66:4d:3a:42:a6:2e:51:ac:b4:78:cb:12:bf:2e:f9:b7:d0:6b:
         7c:94:4f:8f:92:13:e5:c1:7b:cf:3a:be:e7:29:35:fe:fc:01:
         5a:45:31:8a:8d:0d:d9:40:ce:49:4c:45:4f:ec:54:7c:ec:1a:
         cf:52:9b:00:cd:50:a0:86:3e:65:96:08:09:42:8c:eb:67:6f:
         69:7f:87:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:27 2026 by rpki-client