Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.mft
File:                     7YYRkV4WUa8X578ffKuQ1V3B3Yg.mft (raw, json)
Hash identifier:          Ua0/oPgZr65dl0K8dpWU671QuTCrxlWxXTq4IFaC49s=
Subject key identifier:   C4:58:94:5D:A0:CD:21:B0:1D:34:67:E0:17:22:C9:7C:DE:74:08:4F
Authority key identifier: ED:86:11:91:5E:16:51:AF:17:E7:BF:1F:7C:AB:90:D5:5D:C1:DD:88
Certificate issuer:       /CN=ed8611915e1651af17e7bf1f7cab90d55dc1dd88
Certificate serial:       019F8F7EE09332BCCF47C7DAB54EE14B436A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YYRkV4WUa8X578ffKuQ1V3B3Yg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:01:24 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:24 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:24 +0000
Files and hashes:         1: 7YYRkV4WUa8X578ffKuQ1V3B3Yg.crl (hash: mlSD6RTKKpH5xS1KBBfvMzV/2Ot5YCIBIW8m+zpHu8U=)
                          2: Df_oTOu_EP4d50D-2XA0QPqfKjk.roa (hash: +VGVc2qalWbQy0rJrmFcx94atdweW3ZFDDwOq9nPIVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YYRkV4WUa8X578ffKuQ1V3B3Yg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:e0:93:32:bc:cf:47:c7:da:b5:4e:e1:4b:43:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8611915e1651af17e7bf1f7cab90d55dc1dd88
        Validity
            Not Before: Jul 23 15:01:24 2026 GMT
            Not After : Jul 24 15:01:24 2026 GMT
        Subject: CN=c458945da0cd21b01d3467e01722c97cde74084f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:49:86:02:75:ab:34:8d:a2:ee:b6:3a:17:8b:
                    3b:07:69:cc:ab:bb:14:a7:9e:3f:c8:98:74:dd:be:
                    46:aa:47:8c:e3:2d:d2:2d:bf:f0:00:c9:70:d7:25:
                    61:53:fb:33:86:46:72:30:e6:17:81:72:46:ed:91:
                    a2:3a:39:bb:84:79:3d:c4:bb:e6:42:b4:bd:d4:ed:
                    b9:a3:d9:45:b5:32:4b:6a:a2:00:ee:56:fc:32:e7:
                    16:5e:72:0c:dc:4a:0d:53:39:32:f5:57:04:51:33:
                    ce:c8:ef:23:34:ab:53:78:0c:e9:b4:54:fc:cc:d7:
                    d0:4c:92:d2:c9:27:41:d7:a8:a4:ca:f7:d9:d6:94:
                    64:f7:82:81:72:5c:9b:ba:f9:d2:9b:dc:06:de:7b:
                    d8:89:e2:1c:07:65:0e:98:98:a2:9c:cd:bc:b4:c3:
                    ce:4f:ec:29:6d:d5:f4:38:3e:a4:70:8c:84:85:cf:
                    a6:69:66:2b:de:1f:fa:ab:65:cc:ae:5e:84:4c:3f:
                    12:e0:55:95:d7:66:f3:9d:5e:a5:f9:77:d4:b4:a9:
                    ce:a1:66:77:23:eb:a8:53:bd:62:fa:6c:a2:99:93:
                    6c:1b:e4:57:b9:a3:e4:a6:4e:59:ec:5b:77:4e:5d:
                    45:13:cf:2b:2e:a0:ac:03:24:55:70:51:c8:06:34:
                    10:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:58:94:5D:A0:CD:21:B0:1D:34:67:E0:17:22:C9:7C:DE:74:08:4F
            X509v3 Authority Key Identifier:
                keyid:ED:86:11:91:5E:16:51:AF:17:E7:BF:1F:7C:AB:90:D5:5D:C1:DD:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YYRkV4WUa8X578ffKuQ1V3B3Yg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:47:f4:b5:8a:c4:8f:2a:e9:65:dd:7d:c2:a0:52:9c:2a:a7:
         47:4b:cf:26:48:af:b5:bf:5d:fb:f3:09:1e:c1:ef:77:b6:c5:
         57:b1:8e:dd:ff:27:46:27:13:92:2c:c6:c5:99:c7:a7:81:83:
         33:45:ff:22:58:26:28:61:f0:e2:52:fa:a6:e0:50:53:7d:c1:
         0f:77:2c:e1:52:6a:7f:54:58:f3:ff:cf:87:57:63:cb:23:29:
         8d:27:17:cb:17:e7:fb:e8:fe:0d:0e:85:49:73:28:15:f3:9e:
         57:5d:db:87:4d:e4:05:5c:cc:d6:87:eb:7f:c7:bd:0f:40:ad:
         7c:5a:34:3b:59:73:27:b3:40:96:df:f8:ac:ac:9e:f0:4e:c3:
         fa:b5:7b:66:94:1d:1b:1e:3a:bb:79:7b:77:8e:18:15:b2:7c:
         f8:00:9e:18:86:c0:e3:02:4b:28:28:e7:21:75:89:d0:28:cd:
         91:3c:f1:fa:eb:6f:52:08:7e:d6:5a:6d:c2:9c:d4:13:f0:a1:
         df:f1:60:f9:d3:8e:20:38:a4:ce:4c:c7:bc:5d:96:24:ef:58:
         95:f3:0a:d6:a0:8a:44:98:99:68:b1:d1:62:a8:35:90:fb:95:
         f1:e2:e2:23:a8:be:c5:eb:d2:18:ae:43:60:2c:3d:90:f0:56:
         00:26:8e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:02 2026 by rpki-client