Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
File:                     A-ynkyRXUrZ6iB9441q4_0ndPsE.mft (raw, json)
Hash identifier:          DbHNB1sKVRxIOFSylR0o9to/4RFiuEM0NV3nvzvd/x8=
Subject key identifier:   46:A7:97:30:5B:D7:CB:6A:2D:32:17:77:CB:05:B6:2F:BF:FC:5B:A5
Authority key identifier: 03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
Certificate issuer:       /CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Certificate serial:       019F8FEBC2433F7ACD36CD8F96F68AC5E6B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
Manifest number:          19C9
Signing time:             Thu 23 Jul 2026 17:00:20 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:20 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:20 +0000
Files and hashes:         1: A-ynkyRXUrZ6iB9441q4_0ndPsE.crl (hash: 16PDS1CMmwQFxdvApNRteEPbpfHlZ9yVPMi+SEasuEI=)
                          2: lsqSMmJEavXh7pViu8wsmFP-0ew.roa (hash: WZM+G3iXoRdRNC/z9rbX80joIRjQ5aWaqz7KFYrf3LE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 17:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:eb:c2:43:3f:7a:cd:36:cd:8f:96:f6:8a:c5:e6:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
        Validity
            Not Before: Jul 23 17:00:20 2026 GMT
            Not After : Jul 24 17:00:20 2026 GMT
        Subject: CN=46a797305bd7cb6a2d321777cb05b62fbffc5ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:81:f2:4e:f0:02:a1:4b:ef:ce:65:c6:f9:81:
                    68:41:83:70:9e:b9:a4:bf:77:fb:f1:5c:94:71:aa:
                    88:ad:dd:37:c1:f7:14:ea:81:d6:c8:21:83:77:85:
                    a1:9b:8d:47:0f:cc:8f:af:3b:81:cb:7f:dc:77:d3:
                    30:47:4e:e8:70:13:7b:e2:5e:3e:60:0e:ab:ff:0f:
                    b7:24:20:c1:76:ba:68:37:16:eb:b4:0f:b0:34:97:
                    85:00:7f:35:cd:f6:d3:ac:e6:77:bd:fe:b2:cc:20:
                    cc:37:78:ab:8b:3f:9a:2d:15:e6:51:a7:18:10:7f:
                    77:52:3a:7a:8b:0e:b7:8c:0f:ad:e9:f2:b3:8e:a7:
                    f4:bc:af:f4:df:1a:5c:c0:d6:f9:5e:d6:1b:a9:80:
                    82:1c:34:64:ed:09:76:40:74:1c:2a:3a:74:7c:f9:
                    39:86:fb:9f:24:06:90:79:26:69:15:7b:20:d7:51:
                    8b:61:a4:b4:17:95:e2:57:75:74:39:6b:94:8b:ee:
                    d6:35:8c:88:ac:d9:95:3d:51:48:ec:6d:67:c6:54:
                    5e:a6:a8:a8:ec:42:2b:a6:2b:1b:41:e6:b5:02:2a:
                    21:ac:a8:06:b2:53:38:99:9f:23:2b:f3:e2:55:1a:
                    8a:e2:62:7a:6c:dd:e5:80:4b:f2:79:16:cd:ca:8d:
                    8b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A7:97:30:5B:D7:CB:6A:2D:32:17:77:CB:05:B6:2F:BF:FC:5B:A5
            X509v3 Authority Key Identifier:
                keyid:03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:af:93:f1:f4:13:b1:ca:40:7a:ee:2a:c4:e4:7f:c9:fe:42:
         69:b8:4c:83:0d:5e:36:a2:10:92:f8:25:19:0f:b9:d6:6f:69:
         c1:e2:7e:ce:8d:a1:4e:23:3d:58:8b:a3:31:cc:f7:36:35:bb:
         ec:7d:b4:73:a8:29:bb:d4:cf:a0:12:a4:04:ef:df:a0:72:ec:
         80:61:da:a2:18:c8:4e:0b:cb:8b:dc:1d:8c:1a:0a:2d:c3:2a:
         6e:e1:a7:9c:f9:2b:14:24:d6:38:0d:7d:6d:e2:23:36:d9:42:
         6a:09:44:e5:fb:49:9f:09:2d:dc:22:c1:26:90:13:0a:3a:26:
         c4:c0:e6:70:50:ea:27:6e:e5:8f:20:39:6c:1c:f1:f0:5a:eb:
         5f:fb:d4:5c:74:87:fa:86:84:3b:6c:bd:48:d1:a1:98:da:b1:
         e8:1f:93:e3:03:3f:b3:44:80:50:54:1c:5d:d7:20:19:a8:21:
         6c:cc:32:49:41:58:98:89:bf:c4:8f:e0:bb:4f:59:7c:e4:5f:
         dd:07:f7:8a:24:04:5e:0e:8a:9d:38:e9:8b:30:9d:82:11:25:
         ae:cf:af:c5:af:46:ce:74:ca:a2:1a:09:b5:6d:40:77:6d:a0:
         c2:ed:de:4c:87:39:31:5b:fb:9f:43:5a:29:4b:f3:3d:ba:d9:
         d0:80:ff:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:08:39 2026 by rpki-client