Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
File:                     jYBF-d8IxTBX6d-ft7eldRA__0o.mft (raw, json)
Hash identifier:          uNHnv/kGmAxmhoh+BPS6XT+P9ov/QSaYaHEhPHetW5o=
Subject key identifier:   49:90:5D:29:F8:5A:D7:7D:10:4F:98:7E:04:21:C1:C9:E0:9F:8F:2D
Authority key identifier: 8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A
Certificate issuer:       /CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a
Certificate serial:       019F91A3A93ABECA90CD6E528CDC2A485241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
Manifest number:          04C5
Signing time:             Fri 24 Jul 2026 01:00:49 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:49 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:49 +0000
Files and hashes:         1: 0wmiIEGgBNaM0SH3E3jDJzi9lvA.roa (hash: 5FuZkazkiJGDrvBOsL3FrqVNzaE9M0HyAMUTf9d4FZQ=)
                          2: jYBF-d8IxTBX6d-ft7eldRA__0o.crl (hash: 873mt8J8XqDFWwzleTp2UfetEtl3J4S1LUQ30uo0BDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:a9:3a:be:ca:90:cd:6e:52:8c:dc:2a:48:52:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a
        Validity
            Not Before: Jul 24 01:00:49 2026 GMT
            Not After : Jul 25 01:00:49 2026 GMT
        Subject: CN=49905d29f85ad77d104f987e0421c1c9e09f8f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:b4:42:44:05:d4:49:b5:b5:4e:9f:64:7f:
                    1a:61:02:c5:bd:1b:e0:23:a1:15:77:4a:1d:21:c7:
                    8c:e7:d0:91:b1:fc:89:01:b5:bc:23:ad:a8:34:52:
                    04:59:5d:ac:d2:3e:d3:ca:b6:7c:84:5c:44:51:54:
                    9f:ea:19:fe:05:55:75:2a:08:0a:f9:2f:83:3f:ed:
                    a4:59:f3:9b:89:c3:bd:b0:b5:5e:c0:6b:17:03:70:
                    5e:77:8e:2b:3d:26:c5:38:44:5d:5c:24:81:c2:a8:
                    43:68:5d:2d:d4:3d:b8:88:a8:6e:8b:43:31:ae:95:
                    7f:f5:59:3e:d8:3f:fa:5e:e7:e1:63:09:95:98:ea:
                    50:8c:8f:63:49:31:55:b8:8b:29:46:19:db:87:f4:
                    b3:06:59:8c:1b:6b:43:a6:86:22:b0:e8:43:58:d1:
                    65:f2:db:91:6b:42:0f:17:d8:c8:6a:52:47:21:79:
                    76:4f:92:f6:5d:f8:d6:08:99:b8:7a:3c:89:f7:f1:
                    c2:78:81:e4:f0:19:7c:ee:83:22:14:9c:3b:3e:8b:
                    34:0b:f9:04:69:36:68:68:4b:9a:20:2a:7c:0e:c5:
                    f7:64:15:29:c0:69:3e:6f:0c:8c:10:92:24:53:ef:
                    b9:ea:68:0f:08:64:1b:53:56:98:ad:1e:31:db:1b:
                    f5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:90:5D:29:F8:5A:D7:7D:10:4F:98:7E:04:21:C1:C9:E0:9F:8F:2D
            X509v3 Authority Key Identifier:
                keyid:8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:53:f9:ec:b5:c3:f0:75:2a:ef:f2:68:2a:6e:16:20:8f:a9:
         84:f0:05:e6:7f:e2:d2:99:58:54:87:53:6c:86:ce:e5:62:3f:
         60:45:e8:e1:9f:b4:eb:b0:4e:d7:15:c5:cf:4f:7b:01:24:02:
         16:3d:5c:d9:7f:34:ec:0f:09:65:67:03:19:9b:98:64:e2:ca:
         88:d4:95:1e:3a:1f:36:49:0f:90:a9:c3:6d:39:8b:b1:dd:67:
         b2:4f:52:be:75:e4:07:a7:2c:78:c7:75:de:6c:74:06:6d:7f:
         6d:bc:77:48:ed:e0:f0:c9:60:cb:93:36:ca:4f:12:c8:b8:71:
         4a:85:d9:df:a2:82:6b:bd:39:0a:b4:9b:fc:fe:5c:89:60:72:
         33:1c:90:6f:a4:37:bf:83:c8:33:fa:1f:77:82:dc:ff:55:2b:
         61:c1:8e:92:6a:81:0b:8d:a2:65:24:1c:13:b1:3d:c0:81:60:
         87:b3:c0:d6:3c:f2:c0:a6:87:4f:1f:4f:2d:85:25:5a:8b:b7:
         11:5e:0e:89:f2:98:72:c2:e2:f9:7f:bd:01:3b:49:98:5f:40:
         75:ea:81:f6:4c:a6:6e:5c:d9:12:ae:0b:d8:3d:82:8b:8d:99:
         f7:ab:77:87:7b:80:dc:38:d2:2c:83:bb:c8:b3:ad:70:27:be:
         02:8b:dc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:47 2026 by rpki-client