Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
File:                     YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft (raw, json)
Hash identifier:          Kgby0uMuyGuenfeHnm1yrWEPMU8QctQ5Esp+d9hRxUs=
Subject key identifier:   EC:21:F4:04:4F:9A:60:27:F5:2C:A2:C7:37:47:40:6C:97:31:47:0C
Authority key identifier: 60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C
Certificate issuer:       /CN=60c44dff71879863ea71442023b7f354dc3dad7c
Certificate serial:       019F916DA9F7A9A5BD055D724FE5F584A03A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
Manifest number:          0A2B
Signing time:             Fri 24 Jul 2026 00:01:50 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:50 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:50 +0000
Files and hashes:         1: CJowFgb4ICGp3Wfh7jHnULJU2M0.roa (hash: bL65BGdIxVmyrRBt+KdvOpVuUTY76scln+WxP6WN3rg=)
                          2: T5IQ4IhshTRiFenVlDb9H-uzNG0.roa (hash: 6i4yB4JY7PrncdZg9kkNq7TpPmD1RLEzHYX4D9lyu0U=)
                          3: YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl (hash: wZ2fNsHGdx7REmBf1HUvd9siQA/8nbUrxnc49rijDNY=)
                          4: yWjq8tMegtSp646tNouua0rKzbg.roa (hash: dzGbAHT2B+kr637o2+fV8atD4a06Lybf+LGMSMU8Kl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:a9:f7:a9:a5:bd:05:5d:72:4f:e5:f5:84:a0:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60c44dff71879863ea71442023b7f354dc3dad7c
        Validity
            Not Before: Jul 24 00:01:50 2026 GMT
            Not After : Jul 25 00:01:50 2026 GMT
        Subject: CN=ec21f4044f9a6027f52ca2c73747406c9731470c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0d:bb:18:f9:b2:19:73:f3:2b:f3:4e:57:32:
                    07:d9:c1:22:bd:b1:40:b1:d7:9b:e9:fe:e2:45:ae:
                    1b:e2:65:92:3a:05:ee:5e:f9:32:f0:9d:18:bb:c0:
                    c1:79:a0:ef:bd:e1:b8:bd:2a:0d:21:ff:14:4d:81:
                    c6:3a:dc:07:d7:72:c3:2a:15:98:2e:32:79:7b:3c:
                    d9:6f:54:6c:0f:5f:36:18:9e:63:6a:ba:eb:37:87:
                    e1:b1:b7:62:2a:5c:02:60:89:f8:69:7c:05:14:a0:
                    0f:8a:76:c0:20:bf:f3:a3:b4:92:bc:46:27:92:14:
                    4a:88:f8:d6:4d:40:31:69:ea:98:e8:fa:11:04:25:
                    90:4a:53:2b:01:d9:e6:7c:52:b0:d5:82:3c:04:63:
                    ca:b2:e7:62:0d:cc:67:62:4a:22:76:85:7a:59:9e:
                    07:79:d2:2e:e3:c5:a7:84:33:38:34:ed:d0:4f:41:
                    45:48:08:76:9d:71:71:29:18:48:03:0e:48:df:77:
                    53:98:d4:d0:11:71:0b:b8:fc:49:cf:e6:d9:f7:dc:
                    17:2c:ec:84:e1:f4:6f:5c:ab:cc:fb:99:a6:92:5d:
                    20:0b:ed:34:64:1e:1d:22:12:26:21:9a:b3:4d:43:
                    54:07:f1:c3:83:3b:d2:92:51:20:e1:35:f4:83:3e:
                    77:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:21:F4:04:4F:9A:60:27:F5:2C:A2:C7:37:47:40:6C:97:31:47:0C
            X509v3 Authority Key Identifier:
                keyid:60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:78:07:ab:b1:64:a1:5c:fa:5b:cf:3d:35:fe:2f:4f:0f:8f:
         75:bd:90:36:e4:1e:15:e1:3f:df:1b:9d:0c:8c:33:d3:e5:4a:
         ff:13:aa:3b:b8:07:f8:8f:fa:9c:15:9e:5d:57:d1:62:a2:3c:
         a8:dc:ee:f1:36:6a:ce:1f:75:36:c9:ce:e7:be:0b:87:87:35:
         6d:b6:1e:d2:db:60:d0:71:ad:f0:11:db:c0:cd:08:e4:5c:df:
         87:1e:67:4e:ae:eb:a0:ec:9f:4d:76:f4:6a:b5:c7:82:81:ce:
         06:15:69:3c:5f:b4:8a:1d:14:72:91:9e:87:12:b3:f5:d2:e0:
         73:40:cf:a0:df:37:6b:9f:10:d6:fa:76:43:77:3c:81:04:77:
         7f:fd:54:eb:fd:b9:0f:2d:66:26:97:0e:ef:91:38:e2:df:59:
         8a:c2:ee:49:2e:4b:b5:05:f0:f5:55:d8:64:b5:e3:42:10:95:
         b6:f7:fa:1d:35:b7:59:f5:37:e4:f4:a0:2a:4f:8f:21:ca:0d:
         0a:72:e5:e1:f7:71:52:f2:f7:28:67:58:7a:7b:65:4a:43:7a:
         09:2f:4c:42:2a:3b:ee:a1:d1:6d:a8:23:36:f8:e9:7f:b6:38:
         86:a5:9f:0e:b6:c4:7b:f5:39:07:3d:4e:c0:bf:73:6a:4a:96:
         38:dd:99:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:13:57 2026 by rpki-client