Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/y4HNpg5_XtX_8DjLSQkTr_4jMeo.mft
File:                     y4HNpg5_XtX_8DjLSQkTr_4jMeo.mft (raw, json)
Hash identifier:          ePp8LaeFABgu2HgyNiKZmxXHtEeScILxO4nh4msSHK0=
Subject key identifier:   90:40:74:25:76:BB:6B:AA:E4:41:75:15:28:70:75:CA:A5:4F:4E:9E
Authority key identifier: CB:81:CD:A6:0E:7F:5E:D5:FF:F0:38:CB:49:09:13:AF:FE:23:31:EA
Certificate issuer:       /CN=cb81cda60e7f5ed5fff038cb490913affe2331ea
Certificate serial:       019F950D72C493C3D9734E37A6750B4A341A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y4HNpg5_XtX_8DjLSQkTr_4jMeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/y4HNpg5_XtX_8DjLSQkTr_4jMeo.mft
Manifest number:          5F
Signing time:             Fri 24 Jul 2026 16:55:14 +0000
Manifest this update:     Fri 24 Jul 2026 16:55:14 +0000
Manifest next update:     Sat 25 Jul 2026 16:55:14 +0000
Files and hashes:         1: y4HNpg5_XtX_8DjLSQkTr_4jMeo.crl (hash: hq8pmCTIpzmJbFQWijh9ffSDk9pamPAoQ/rVOtBkyy0=)
                          2: ypwoD8WNlujjLErobvoTdVgSnlM.asa (hash: mZSvKsEORYpPG2YuRUeELKK/DzjDDr8HvRa5KJ/AxkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/y4HNpg5_XtX_8DjLSQkTr_4jMeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/y4HNpg5_XtX_8DjLSQkTr_4jMeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y4HNpg5_XtX_8DjLSQkTr_4jMeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:55:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:0d:72:c4:93:c3:d9:73:4e:37:a6:75:0b:4a:34:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb81cda60e7f5ed5fff038cb490913affe2331ea
        Validity
            Not Before: Jul 24 16:55:14 2026 GMT
            Not After : Jul 25 16:55:14 2026 GMT
        Subject: CN=9040742576bb6baae4417515287075caa54f4e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c0:5b:d8:12:4e:24:db:6b:8c:72:97:65:49:
                    7a:58:0c:fd:c0:30:3b:fc:2a:25:79:ef:ff:50:28:
                    c7:62:93:a5:4c:72:44:d0:a8:c0:fb:7a:5a:13:01:
                    38:97:5f:3a:45:0b:cb:56:91:68:41:48:13:db:75:
                    69:c9:04:2f:12:2a:21:96:3c:4e:03:e8:fa:e8:85:
                    3c:b5:ed:c9:a8:d6:f0:cc:79:4e:fd:b2:fc:a4:7d:
                    f9:0a:e4:f0:c0:4f:dc:e9:85:00:33:8d:fc:ff:74:
                    d7:38:b6:85:7d:3b:4a:eb:78:cb:10:f5:c1:f2:53:
                    46:34:94:6b:03:9d:b2:34:3a:16:e0:04:62:4c:50:
                    43:38:e2:a9:12:95:38:ea:65:46:5d:ee:6f:ca:fb:
                    00:f4:7d:e4:05:e0:c5:94:db:38:62:1b:ba:27:4b:
                    27:0d:08:55:3b:0b:04:e6:cc:e8:d8:cd:9c:7a:1a:
                    fa:fe:70:df:fd:82:28:3a:79:a7:7e:16:e4:6e:5e:
                    14:35:eb:67:f0:2a:42:e1:78:29:c5:4d:2b:3b:b1:
                    60:d1:6f:40:45:12:27:8d:60:8d:86:eb:90:34:c1:
                    1d:5e:14:0e:5d:94:b6:79:08:b1:78:60:8a:ed:f2:
                    05:73:da:a0:9a:3e:1c:b9:11:33:71:5d:4f:0c:a0:
                    b2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:40:74:25:76:BB:6B:AA:E4:41:75:15:28:70:75:CA:A5:4F:4E:9E
            X509v3 Authority Key Identifier:
                keyid:CB:81:CD:A6:0E:7F:5E:D5:FF:F0:38:CB:49:09:13:AF:FE:23:31:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4HNpg5_XtX_8DjLSQkTr_4jMeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/y4HNpg5_XtX_8DjLSQkTr_4jMeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/y4HNpg5_XtX_8DjLSQkTr_4jMeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:05:10:c5:c9:16:11:69:70:87:4a:ca:9e:91:a7:96:31:27:
         b1:d7:d2:5a:08:95:6b:1a:b6:7a:d1:ab:7a:52:31:19:12:ab:
         9a:e0:04:f4:16:07:4c:a8:14:30:fa:fb:cc:b7:c0:86:e5:2d:
         b8:af:08:fa:4b:1c:74:18:59:fe:5f:34:83:00:54:80:fa:b4:
         74:e1:de:64:31:a3:22:e8:57:70:a4:9e:61:59:4f:4b:d2:88:
         05:ad:c4:7f:93:a9:0f:e0:4e:94:7b:87:67:a6:ac:f5:d5:f8:
         1d:f9:4c:b8:8d:d2:ea:48:44:90:a9:cf:e9:50:e9:23:a6:1f:
         1f:73:69:9c:fa:a8:88:e5:51:02:d9:e9:c4:f4:8c:7b:6e:20:
         02:1e:90:d1:79:1b:7a:4c:4a:ff:85:b2:8f:53:3e:ff:3b:77:
         61:9d:65:db:72:76:13:5b:13:71:87:81:70:93:41:61:15:5d:
         42:66:f2:f9:76:c9:1b:82:ac:a4:a0:fe:cb:d2:d4:fc:c2:07:
         e3:02:c5:18:b6:81:89:3d:4c:39:a5:b9:e7:84:19:44:79:9a:
         17:f5:3a:56:66:0a:38:41:38:df:36:3d:8c:a5:b1:ae:14:62:
         70:47:58:5f:fb:a7:2a:7c:48:17:78:25:88:d4:18:4c:f7:5a:
         50:bb:47:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:35:19 2026 by rpki-client