Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
File:                     yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft (raw, json)
Hash identifier:          nMbcgR/pUKWJMWTEtxQm02o4Xm35udk7d/bGJL+lMMM=
Subject key identifier:   D3:EA:CC:BF:E4:40:07:F6:0C:21:6C:CB:67:A9:0F:37:C4:68:52:85
Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
Certificate issuer:       /CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Certificate serial:       019F91DADFFB731B587BD7F830EC83095FA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
Manifest number:          0938
Signing time:             Fri 24 Jul 2026 02:01:08 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:08 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:08 +0000
Files and hashes:         1: 97cc-LB3rG13dxTaENx-7JYBPe0.roa (hash: iCkgIpMzGk+/4CscuxSSD1lD7KaBFSyKku9u86QVkmw=)
                          2: EAaF92d1woQzsy8VU5JNPGG08e4.roa (hash: yp7GW+4ysZ0E3UGH2wQkfGf/UKQQDDnXTfR2I0ZupNk=)
                          3: KoSeXgfi6kdR60VA93UZ9REi_2M.roa (hash: VBbggabUlX8/caVzOmeZ8ptR/8qvA/cVBY2qiQj/eDc=)
                          4: gNO67GK1qIXcKgWQtr1Qlsfj3EU.roa (hash: 0NL39gDdKaZi0Q/uf08EWD/dEXGEVZqSIXvpRv/MWdc=)
                          5: gYxZPFksv4lSJcSXaTgYs67dhTw.roa (hash: Hl6M0EKBwCjHwIUsIeYI571biGIt0pR0cCNjY3LbJoU=)
                          6: iw7slNo1slt0urw_BCAUMgfe2b8.roa (hash: cT+hxmNlxZH6dKmkQNHvAP1HWpFqKzDkr41jDnNp5qM=)
                          7: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl (hash: o24nOYdi26qVdeXSYxVWFPr7kIwAR8aU6F1qrzKTFms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:df:fb:73:1b:58:7b:d7:f8:30:ec:83:09:5f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694
        Validity
            Not Before: Jul 24 02:01:08 2026 GMT
            Not After : Jul 25 02:01:08 2026 GMT
        Subject: CN=d3eaccbfe44007f60c216ccb67a90f37c4685285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:31:1c:4e:cb:f6:89:b5:a8:b6:cd:2e:e5:
                    e4:8f:45:92:a4:6c:c7:3b:fe:7f:1a:7c:2d:b6:fd:
                    8e:18:51:cb:22:6f:73:0c:3f:ab:34:60:cf:25:8b:
                    be:0d:bb:ef:82:2b:14:4c:97:a1:17:65:73:7b:a3:
                    1a:fb:da:e5:82:f0:81:50:70:23:4a:d2:c8:d1:5a:
                    2c:6f:d3:c7:51:69:0d:a7:ab:e0:d3:ab:43:f4:59:
                    b1:d0:2c:c5:f5:81:d7:29:09:2c:af:d1:6c:f7:20:
                    fc:ba:c1:89:77:86:5d:c1:63:d3:c1:5b:07:1f:9e:
                    a0:6e:c8:c8:b7:af:00:56:ed:6d:46:72:e0:a3:a3:
                    cd:ef:52:ce:60:b8:75:99:b6:83:27:56:a3:41:c6:
                    d7:82:dd:fe:4c:b9:1a:a3:a3:c7:61:db:2a:4a:6d:
                    86:74:66:87:5c:5f:c0:3d:6c:73:39:63:0f:16:73:
                    1d:ec:77:c1:f4:00:e1:7b:10:7e:4f:0c:6f:58:0d:
                    63:f0:56:15:84:9e:d4:05:6d:63:9c:e8:19:fd:c1:
                    fc:3e:c7:51:2f:ae:27:42:da:d4:a9:e8:ec:83:e3:
                    9a:30:93:98:9b:60:fa:38:7f:01:35:40:6f:68:5d:
                    58:f8:7b:93:e3:1b:f1:64:82:77:ef:5b:04:1a:ee:
                    55:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EA:CC:BF:E4:40:07:F6:0C:21:6C:CB:67:A9:0F:37:C4:68:52:85
            X509v3 Authority Key Identifier:
                keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:86:e7:48:4c:c4:91:3f:c9:75:37:e5:81:9d:31:cd:5e:8f:
         e6:90:c1:c5:0f:a7:50:ea:c8:88:c0:25:d7:03:52:20:e6:53:
         b1:da:1a:f5:09:be:f7:88:6e:72:be:87:b6:ca:a7:a6:5d:8f:
         db:ff:0c:93:69:c9:46:1b:1a:52:ae:39:80:f3:17:00:da:44:
         31:53:df:e9:9b:99:3e:a8:e0:5a:d0:91:25:50:22:a7:29:53:
         3d:37:75:8c:6e:da:0d:52:db:05:41:97:50:91:e6:4e:23:40:
         5d:99:29:08:04:8a:f2:a2:16:53:6f:26:97:c4:8b:b0:f4:40:
         f9:31:46:36:83:6c:07:1a:6c:24:97:d1:4e:e0:9c:19:93:45:
         0a:12:87:a9:dd:30:30:a3:4d:9b:75:64:ea:38:28:82:09:ec:
         11:91:ce:f3:5f:63:f9:85:a1:24:98:96:33:64:cd:2e:d9:23:
         06:da:39:be:43:eb:c5:5f:e6:6a:6e:30:df:6b:97:6a:f3:d2:
         8a:c4:e7:9b:cb:5d:93:5a:eb:fa:f8:29:fe:4b:58:ec:5d:2a:
         e2:60:58:4f:c8:14:47:73:f5:47:85:2b:93:92:1d:bd:16:db:
         d8:e6:b2:22:22:d2:94:53:8d:44:2a:8a:e0:d5:b4:05:e1:ec:
         ea:67:12:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:07:53 2026 by rpki-client