Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
File:                     ybWfQXeebyQ19Z8aFxwIClp6RNI.mft (raw, json)
Hash identifier:          QFxh7zbHWPRwzHIX9vzJ9hVyop3ujhXCGJ1tCqAWSrU=
Subject key identifier:   6B:4B:93:98:65:6E:0F:76:90:FB:E5:B6:64:48:2C:D0:93:CB:3B:1D
Authority key identifier: C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2
Certificate issuer:       /CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
Certificate serial:       019F93FF88535B5D8D8BC50F799CB9C50E74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 12:00:25 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:25 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:25 +0000
Files and hashes:         1: mDqresBCjx5tB2O9064HotHQuTM.roa (hash: VNWcNf8Sdt3FuYIE0VhCUYSxFFyBe4BxXJfzVVJjUDM=)
                          2: s_AKvxWCsACkF3KVOQOZnp7oWW8.roa (hash: 49Z2BVMcidGjzi+D5MSkcRcdFDX2/JcSVY9r82t0hoI=)
                          3: ybWfQXeebyQ19Z8aFxwIClp6RNI.crl (hash: l35j3/OKlVow069JhvDR9rFn0NoZiCg6H+hr/J87i0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 12:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:88:53:5b:5d:8d:8b:c5:0f:79:9c:b9:c5:0e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
        Validity
            Not Before: Jul 24 12:00:25 2026 GMT
            Not After : Jul 25 12:00:25 2026 GMT
        Subject: CN=6b4b9398656e0f7690fbe5b664482cd093cb3b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bc:8e:0a:fe:9f:8f:ec:46:d3:36:11:6a:16:
                    a1:c9:14:58:95:c0:4f:62:1c:8c:cc:31:1b:ed:aa:
                    40:ac:c4:4a:dd:61:0f:fc:44:1b:62:a8:bb:ff:52:
                    e7:f4:ea:8a:f8:59:03:6c:5b:3a:d8:5f:07:b1:f6:
                    b8:1b:54:dd:3c:9f:bc:20:1a:81:fd:1e:b7:3a:a9:
                    0a:b7:08:84:ac:44:8d:08:77:86:68:97:9e:bd:c8:
                    6b:23:db:e7:a2:d9:75:9e:00:df:f2:8b:cf:57:71:
                    7f:23:9b:6c:d5:f8:c5:84:3f:11:4a:09:fd:de:36:
                    2a:65:2f:62:a6:de:65:68:c4:20:d8:72:c9:88:b8:
                    df:6d:19:4b:a3:36:06:ff:5f:72:5e:58:80:18:24:
                    ca:3e:e5:e1:b0:13:e0:db:f7:80:9e:84:92:94:bf:
                    1f:1a:57:7b:a9:35:bd:80:30:66:be:21:2e:31:98:
                    6d:5a:82:35:58:57:94:6d:5d:d3:44:2f:a0:47:ae:
                    59:78:fe:17:63:51:80:e7:1f:ab:1a:8f:d1:7e:6d:
                    ce:88:6b:fe:7f:b7:0f:31:73:e8:29:e2:43:9c:21:
                    89:5c:69:e3:cc:0d:60:63:a7:b9:2d:8b:3b:a1:28:
                    f8:9f:de:35:aa:aa:6f:77:9c:db:4d:23:71:66:e3:
                    6f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4B:93:98:65:6E:0F:76:90:FB:E5:B6:64:48:2C:D0:93:CB:3B:1D
            X509v3 Authority Key Identifier:
                keyid:C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:35:96:f4:7e:64:52:ac:59:a7:9e:3d:e0:d2:28:51:c5:f5:
         1f:a2:e6:be:79:f7:ae:6e:a7:ee:2a:8c:61:f1:67:f6:fd:2d:
         bc:71:1d:ee:c2:c3:44:5a:1f:b4:65:b3:29:ee:23:cd:27:69:
         83:49:49:7e:b4:a7:b1:f4:b3:37:76:28:24:55:55:15:50:73:
         32:b2:c8:b4:5a:1d:22:e9:7f:94:3f:cf:4b:c5:85:44:8c:bc:
         22:c9:ac:a9:ee:7b:54:32:75:3e:f1:c6:87:88:ff:f4:0f:05:
         03:5f:ba:9a:19:26:e6:a5:7a:fd:e0:2a:e5:a9:9f:06:3b:6b:
         69:e1:ac:72:7b:6b:93:16:a2:30:3f:9d:f2:1b:80:1b:a3:32:
         ba:89:cc:92:04:8d:85:10:b9:e2:0f:82:0e:a2:f3:db:04:11:
         a2:49:58:86:1b:b1:48:b0:13:95:ac:4b:3e:aa:a9:c2:73:ce:
         ae:b0:81:72:f3:a4:30:26:98:33:78:06:2f:8f:2c:97:48:ef:
         b0:70:79:20:96:a2:00:8a:46:56:13:80:fb:1e:7f:0a:f4:36:
         ce:d8:d5:9d:46:f3:01:04:f6:fb:e6:15:17:8f:f9:35:4b:46:
         5f:e0:62:00:6e:fe:6c:d5:a9:b5:53:d5:a7:92:bf:f2:19:17:
         d2:cf:6f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:03:14 2026 by rpki-client