Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
File:                     YtGLMS41Pnj6juX4DTb3Qc3N46o.mft (raw, json)
Hash identifier:          LXU5rc0BLwPTjU2yqtnGRq/UXKTx5QGsFeY0ivzLwp4=
Subject key identifier:   D1:20:05:AF:88:AA:08:91:E5:2C:6E:29:43:83:18:DF:07:B4:A0:41
Authority key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
Certificate issuer:       /CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Certificate serial:       019F9090824E75619084AB09400B00646E89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
Manifest number:          146B
Signing time:             Thu 23 Jul 2026 20:00:17 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:17 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:17 +0000
Files and hashes:         1: YtGLMS41Pnj6juX4DTb3Qc3N46o.crl (hash: uZjKxOKPTalMWGLxA9GNjUf5A8SvrXqpYwyK/Den9n8=)
                          2: sRtXhXnTV3BV5O7Uk5pPU6e6DHY.roa (hash: kK2zj8c+pEZD+bWtboW9Noev8kavvORxA7HxKk4tpBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:82:4e:75:61:90:84:ab:09:40:0b:00:64:6e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
        Validity
            Not Before: Jul 23 20:00:17 2026 GMT
            Not After : Jul 24 20:00:17 2026 GMT
        Subject: CN=d12005af88aa0891e52c6e29438318df07b4a041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:28:e8:46:d7:1e:eb:f2:1c:ea:60:15:f5:07:
                    3e:90:06:5a:ee:f4:76:1a:44:9e:a5:a5:d4:00:f4:
                    3e:f8:be:a5:5c:d0:c2:b9:e3:02:38:11:b3:90:7b:
                    10:e5:54:42:62:ee:00:2a:6b:0b:8c:a9:8c:19:8b:
                    94:6f:af:d2:7e:44:df:15:4e:75:43:f1:7d:43:e5:
                    b2:32:0f:00:0f:6a:91:6b:c3:d3:09:d9:a9:7c:bd:
                    52:d6:56:73:fd:51:94:da:0d:c8:31:ee:30:e5:dd:
                    fc:9e:5f:30:bc:df:fd:10:12:d4:91:93:b8:4f:5f:
                    68:dc:76:0c:50:1c:17:bc:e5:4d:04:96:d0:61:bc:
                    4c:c0:f9:07:4e:b1:de:de:96:d8:1b:7e:4d:68:bd:
                    f2:3c:6b:3c:94:72:57:a0:4a:20:27:1a:75:00:ea:
                    a1:07:9e:ed:af:96:05:80:cf:b2:c3:97:ca:56:bc:
                    00:5b:01:2a:48:1e:fd:ee:e9:48:d7:7f:4b:b5:ac:
                    58:3a:57:84:5b:90:ad:24:dd:11:d5:9c:06:f5:89:
                    93:b6:51:97:06:42:79:76:1e:6f:ee:2b:e0:17:e5:
                    49:36:ee:bc:47:3e:55:e0:73:39:d0:6f:fc:4e:4e:
                    7a:aa:a0:a1:bf:c3:5b:8a:96:2d:d9:db:be:e3:f2:
                    70:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:20:05:AF:88:AA:08:91:E5:2C:6E:29:43:83:18:DF:07:B4:A0:41
            X509v3 Authority Key Identifier:
                keyid:62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:4b:a1:59:af:11:bc:05:3a:80:82:39:3f:7e:fa:65:60:74:
         3a:26:d0:dc:9b:c9:ee:67:5d:01:54:e8:1c:39:d5:39:a5:61:
         a6:d0:42:3a:b8:48:76:ee:ec:72:5a:c8:71:68:dc:87:2b:aa:
         84:d0:79:51:22:18:ca:db:b1:ff:b7:ce:f7:0a:29:98:be:08:
         ed:e4:63:be:4e:8c:0a:24:0b:37:9b:31:05:c5:c8:1a:76:6d:
         bc:5f:fa:99:b3:81:eb:5f:6c:03:e3:2f:d3:95:6e:2a:46:65:
         42:2a:85:f3:2c:c1:45:15:82:c8:6a:84:6c:d8:50:b5:db:97:
         0c:41:3b:69:88:ed:8b:3d:76:25:dc:a4:1e:47:2d:65:fe:3d:
         a9:de:83:34:08:5e:ff:55:79:1a:49:6a:dc:1e:4b:34:f3:e7:
         26:5b:c1:21:30:ab:97:db:43:84:f2:72:2f:77:8c:61:72:64:
         36:7e:e7:b2:04:66:e0:11:15:a1:20:88:61:fc:39:10:75:f0:
         37:7a:5d:97:97:56:53:7e:00:8e:96:c5:13:c9:3c:30:e0:43:
         ce:d8:f3:18:61:f8:d4:17:cf:f0:70:96:17:70:d2:89:c8:0d:
         94:0f:bd:42:30:e3:95:5b:7c:a8:cc:b3:ea:09:06:cb:88:e3:
         f6:6f:3b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:37:47 2026 by rpki-client