Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft
File:                     yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft (raw, json)
Hash identifier:          y0rzVEbBcF5Q2V08PpaewX0nFy2fB9xAWWP6+I0oW5M=
Subject key identifier:   E4:53:EC:7F:F8:C0:EE:4E:AA:B1:19:64:38:24:B8:87:84:F1:43:FF
Authority key identifier: C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
Certificate issuer:       /CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Certificate serial:       019F90234419F75CC943416CFBF45FA62703
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft
Manifest number:          19CB
Signing time:             Thu 23 Jul 2026 18:00:57 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:57 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:57 +0000
Files and hashes:         1: XE0uV5aWkakbXto1CgcBdZIztP4.roa (hash: Td1DQRkpx9SC0wJzCk6gDumqozx5Hu6He8/fRNyLpFI=)
                          2: YJ9HBfugKV0TxthqLm9MDPEsBq4.roa (hash: muct2cn0yyydW85h1pmTm+JomLouMfLTPtPtoA/rvMA=)
                          3: qBCwaPOh1kM_Brblbd-aN4oLWvE.roa (hash: UhhYSexpgw2WJktE7OGu7b0Flql+JwXaUYjyUOXWJqg=)
                          4: vTeQphfN2kOOEUbtX-iDOET61jg.roa (hash: d96uQbpZZgvCDIsBrz8d/YthfALSsMKs+VoyzsKFeiU=)
                          5: yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl (hash: 7kgMhFPHqn1N5W4N4dBDLC0sLwuCYFYiJ44xRhJNT+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:44:19:f7:5c:c9:43:41:6c:fb:f4:5f:a6:27:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8531ae2ce57c95f5a398930ea45503542801ba1
        Validity
            Not Before: Jul 23 18:00:57 2026 GMT
            Not After : Jul 24 18:00:57 2026 GMT
        Subject: CN=e453ec7ff8c0ee4eaab119643824b88784f143ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e1:62:d6:a6:db:69:d5:e6:4e:d4:51:56:90:
                    2e:0d:df:fd:77:b5:a7:2f:ce:3b:67:a5:20:77:5d:
                    7e:5b:3c:76:78:3c:38:7f:46:74:75:88:a5:e6:47:
                    ee:3f:c7:9e:ed:8e:2b:66:ed:d3:9e:1f:6e:cf:47:
                    a2:e2:4f:1d:2e:57:90:d6:eb:69:83:57:4d:2f:00:
                    e9:10:3a:3f:b5:6e:c9:9e:96:27:93:73:d5:fc:0b:
                    5e:f6:02:e6:cc:8f:ad:e7:f5:8b:7c:ff:e3:21:20:
                    05:d5:55:b9:26:48:2a:04:26:85:82:36:13:3d:20:
                    8f:2d:38:a3:c6:b3:af:fd:2c:fe:3c:c6:f5:8e:88:
                    be:50:7a:7c:b6:b4:be:b0:1f:a4:54:61:f3:82:25:
                    1d:e5:3a:0e:9d:81:fa:9c:77:15:69:77:12:c8:a4:
                    ee:df:7d:59:c9:b2:7c:4f:96:49:d5:dc:27:85:5b:
                    b6:18:6c:4d:0c:06:00:28:5b:0d:75:5c:a1:94:a2:
                    58:0e:1d:86:f8:f8:e7:4a:fd:7d:9c:5d:a6:2c:56:
                    7f:43:52:5a:8e:73:e1:e5:01:17:60:7d:00:2b:8d:
                    b2:a2:a8:75:f8:e6:cf:23:48:ef:93:69:c3:f2:19:
                    95:13:74:fd:52:c2:40:cd:67:9c:35:a3:31:57:84:
                    6d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:53:EC:7F:F8:C0:EE:4E:AA:B1:19:64:38:24:B8:87:84:F1:43:FF
            X509v3 Authority Key Identifier:
                keyid:C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:bd:59:c0:68:f9:4c:ee:0f:c8:2b:94:a0:2f:ac:6f:26:7b:
         2b:25:58:59:06:39:e3:f8:37:95:fa:e6:d2:f9:0b:16:62:f7:
         d0:8e:53:14:61:93:1d:1a:62:21:01:12:5e:59:fe:4d:3f:d7:
         3d:5c:85:08:aa:01:df:84:fa:fd:7d:ca:12:56:a1:e7:8e:0c:
         5f:d7:ae:e9:1f:74:3e:f4:55:b9:74:53:90:90:af:66:32:d4:
         6e:c4:df:ed:3f:6c:c9:4b:7f:7d:c3:91:52:23:76:ab:30:b0:
         35:e1:b8:46:c2:97:1a:47:28:d1:95:d2:66:f4:94:4c:5b:5d:
         a9:e0:d9:b9:64:9b:50:72:e9:c5:d2:1d:b4:52:d7:8f:ae:08:
         5e:81:29:6f:28:44:03:66:ae:7c:30:e1:a7:d8:90:d3:d6:b4:
         d7:9b:60:11:d8:f4:fc:11:c6:56:ee:86:f4:1c:fb:2c:0f:f5:
         f3:df:a8:d4:c3:a0:21:b7:2f:4d:b5:1e:79:4d:07:7c:76:13:
         0a:e7:90:25:bd:ec:98:6c:f8:50:96:75:5b:44:e9:61:62:d9:
         03:b6:53:af:48:0a:b0:3f:89:b1:3d:0b:44:2e:6c:c5:ac:79:
         fb:80:54:f8:97:6e:e2:b4:54:b1:71:e2:5e:83:c4:75:78:18:
         e3:1d:c5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:21:52 2026 by rpki-client