Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
File:                     yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft (raw, json)
Hash identifier:          ViIXEPs081CgOdQs6w8tOplxggo9hG5iaQVxe3VSrss=
Subject key identifier:   55:48:7E:E8:A0:C4:59:46:6F:56:88:C0:00:2A:50:B3:93:25:5F:98
Authority key identifier: C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
Certificate issuer:       /CN=c8e50ca17134837a50d3063d43d443385abe6f49
Certificate serial:       019F92B6056971B6B7592307859D1CAD24B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
Manifest number:          193C
Signing time:             Fri 24 Jul 2026 06:00:30 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:30 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:30 +0000
Files and hashes:         1: KruYfdwnUNYxfXkcEK0pRrgHkqg.roa (hash: UrG6tcE8plAV8A8NaRxXB6Nz6rhzF4jRdCMcfNiMj5Q=)
                          2: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl (hash: 1scqy+P8gdJb3O3ZP6Kt01eXLO9em0ssy5w4HKMfkB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:05:69:71:b6:b7:59:23:07:85:9d:1c:ad:24:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8e50ca17134837a50d3063d43d443385abe6f49
        Validity
            Not Before: Jul 24 06:00:30 2026 GMT
            Not After : Jul 25 06:00:30 2026 GMT
        Subject: CN=55487ee8a0c459466f5688c0002a50b393255f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:97:5b:d7:f6:98:a2:4e:64:84:3c:b0:e4:
                    ea:f1:63:a9:c3:a9:74:1c:f8:bb:be:7d:31:d6:84:
                    46:f5:4c:ab:72:bc:43:df:1d:42:8a:29:00:15:95:
                    9f:7f:f7:18:e8:53:2c:9f:c1:15:64:3f:36:24:f6:
                    ca:b4:12:49:a0:75:d9:09:3d:8c:fa:44:19:3d:b7:
                    6d:28:2d:cd:8b:16:51:ab:5e:7a:48:9d:f6:0f:65:
                    0f:48:e4:7a:09:04:4a:fa:c4:39:e4:30:f1:ea:f6:
                    55:43:a5:e0:8b:39:3a:c2:53:0b:51:c4:56:00:eb:
                    d4:12:5e:58:de:d8:ce:9b:6e:5a:d8:66:29:d7:a1:
                    12:fb:81:1c:2c:9b:b1:4e:1b:3c:20:57:9b:fe:23:
                    6c:90:6b:cf:e4:31:e0:a1:f9:56:fb:58:6b:22:ba:
                    47:3e:d7:c5:d1:e4:a3:03:a0:c0:4f:7e:8a:39:04:
                    08:f1:ba:f3:6d:a6:6f:19:eb:6e:99:1f:5e:5e:e6:
                    c6:93:ff:63:23:be:61:e5:3d:ec:70:53:3b:43:97:
                    8c:a0:ab:d2:b8:85:d7:d2:37:a9:fa:f9:82:ce:ff:
                    5a:e7:92:78:16:83:f6:fd:fc:52:0b:5e:80:50:2f:
                    f1:56:d7:d3:9f:bb:a9:15:88:6e:08:9d:f5:4c:94:
                    33:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:48:7E:E8:A0:C4:59:46:6F:56:88:C0:00:2A:50:B3:93:25:5F:98
            X509v3 Authority Key Identifier:
                keyid:C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:85:3f:77:59:1b:96:47:dd:4c:90:18:fd:a9:ad:d7:af:b3:
         46:42:c6:1e:a3:50:5c:b8:97:cc:d2:bb:fb:e0:b7:8f:80:dc:
         14:9c:37:2b:56:bf:03:d4:00:43:af:b6:56:f4:4b:0a:57:c7:
         95:b5:cb:c4:b9:df:73:77:a5:2d:82:9b:5f:e3:18:0b:be:2e:
         62:21:23:15:36:3d:78:ad:49:00:9f:5c:7d:39:76:a3:ff:21:
         99:f3:0b:94:cb:3a:ae:5b:56:67:d3:67:19:7a:11:53:11:f2:
         35:e9:56:52:f1:cc:36:97:03:64:b7:f8:3e:30:4a:bc:2c:16:
         f5:3a:7c:6b:91:7e:fa:9e:67:3d:ff:10:65:cc:fe:34:95:01:
         4f:85:33:8e:f7:de:24:43:e7:26:ed:ee:79:46:0f:a5:31:c8:
         ef:ad:64:19:c4:3b:12:75:83:23:99:cf:39:f9:4f:0f:a5:d8:
         c1:80:84:75:e6:c7:a9:fe:7b:e2:5f:85:54:5b:ad:01:1f:d0:
         6b:b4:40:1b:bf:96:e5:24:cb:6b:b6:19:d2:28:20:cf:89:f1:
         98:b2:cf:42:c0:a6:5a:7c:45:69:52:a0:56:69:56:a8:83:e2:
         32:8f:8c:c8:0d:10:92:f9:94:6e:83:2e:1e:b5:86:11:3d:93:
         09:8f:e4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:02:46 2026 by rpki-client