Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
File:                     yMLHMUWTBCz3QhD38DvnEGwiT4k.mft (raw, json)
Hash identifier:          N8ayrvxL76uADUzVU4N1QjGeXWGwAiOjAk1gHiY0ISE=
Subject key identifier:   4B:D0:7D:8B:15:48:CE:A7:43:CD:26:79:F8:93:99:19:C1:AE:40:FB
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Certificate issuer:       /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial:       019F916C776D0E8B0AF001EBB279FE67E757
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
Manifest number:          17D1
Signing time:             Fri 24 Jul 2026 00:00:32 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:32 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:32 +0000
Files and hashes:         1: 23wcH8L7dVH0Qu_LmR1lf4KTI60.roa (hash: ZASstFoClWzggMDa2W+x7rdpIoMG853uqXTJ54y76xQ=)
                          2: AXFjpDXCpejxYVRyegcQY_lgsRM.roa (hash: Sa96eMd8qKDmCn/rVwKHcrgoDa7IBUJYs80RqrdQZIQ=)
                          3: Izyp9PlbDb7SEOFmf79W4IySogU.roa (hash: Gvc/OfVfbB6iQcaQfhbaTBFzazD+ndUcgMplwft/fIU=)
                          4: hxGvu-IScN-_hKbmojPRTU_qNno.roa (hash: ahzGwiWSxhQfKuYeEu+Wyoh/XK6bY7UKu+vDiNdhn8A=)
                          5: xpX8qu7gtSlTMLKM8RNsSENreoM.roa (hash: 6bwqH3IsERgfQGTI2ktBpw6N1RbIGeWD0+vqqsDzaLM=)
                          6: yMLHMUWTBCz3QhD38DvnEGwiT4k.crl (hash: XE9817++3obYx3tDbrL/PkduHFat18WU3awPJBMVefs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:77:6d:0e:8b:0a:f0:01:eb:b2:79:fe:67:e7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
        Validity
            Not Before: Jul 24 00:00:32 2026 GMT
            Not After : Jul 25 00:00:32 2026 GMT
        Subject: CN=4bd07d8b1548cea743cd2679f8939919c1ae40fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:69:b3:70:78:c8:d6:61:23:a9:6f:80:e4:bb:
                    32:a6:98:84:15:70:84:2e:37:9e:7c:28:31:bd:a6:
                    1a:77:51:b1:90:09:80:48:8c:7f:01:66:fa:8b:6c:
                    fa:57:b6:4a:21:87:e2:d7:71:e5:f0:31:fa:9f:04:
                    8e:1c:56:0a:04:7a:01:f9:b7:ce:3c:12:4e:47:1f:
                    fd:43:c1:d5:41:88:e3:3e:35:84:8e:ab:14:93:46:
                    f8:51:50:c3:dc:2b:0f:4c:42:ad:61:10:3d:05:49:
                    d8:93:76:90:26:a8:1f:88:09:6c:ca:28:33:73:89:
                    f1:b8:7d:b9:6b:87:00:96:8f:c3:d7:8f:f5:8d:ba:
                    70:39:39:96:f3:c5:f0:51:ff:6b:62:1f:14:23:ce:
                    c7:be:79:9c:39:6d:2a:8a:00:50:2b:d9:9d:19:84:
                    c8:18:ae:d0:c3:2c:b6:d9:19:1b:72:85:7e:a0:c5:
                    85:08:81:13:03:13:e6:78:70:57:f9:a3:3c:03:b6:
                    2d:a1:dc:b9:4e:6d:07:7b:15:54:54:47:87:51:5f:
                    56:c5:96:8e:ed:35:93:d6:5a:84:79:2f:0d:82:55:
                    21:af:f8:40:35:db:29:6e:6a:b8:51:d3:0d:b1:b6:
                    8d:48:3f:16:32:8c:41:15:cf:08:2c:7d:fa:76:5f:
                    6f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D0:7D:8B:15:48:CE:A7:43:CD:26:79:F8:93:99:19:C1:AE:40:FB
            X509v3 Authority Key Identifier:
                keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:5c:55:75:3c:59:62:9a:ba:76:b6:a6:60:35:01:17:e7:5c:
         fb:29:38:75:00:ba:d5:9f:ca:bb:12:62:aa:d9:4c:40:71:59:
         83:ba:2d:a2:47:fc:26:d6:1e:9d:2d:1b:b9:dd:be:5b:4e:30:
         f3:70:1a:f6:ea:25:71:d4:7e:f0:4e:23:93:13:8a:4d:98:5e:
         06:e7:da:84:a1:a7:cc:57:51:ec:2a:37:c4:9e:f9:bb:93:37:
         19:6d:17:4a:e0:03:b6:98:ed:0e:47:7f:a7:2c:78:bd:4b:ce:
         fe:c5:8f:66:67:47:a0:96:b5:75:07:c1:5c:4d:5b:26:72:23:
         63:95:54:83:51:2a:4a:4e:e3:aa:2b:02:25:8f:53:86:a5:53:
         ae:df:3e:13:45:a8:3f:e6:bb:b5:07:10:00:b4:8c:c9:8e:86:
         cd:30:4c:35:4f:a2:0f:40:9f:69:f5:92:e4:f3:52:f2:ff:4a:
         51:21:ee:ae:7b:c0:96:28:af:18:f6:84:f4:1e:9e:66:97:5c:
         4b:f1:29:a7:45:88:ba:2f:61:80:76:e2:f1:74:44:e7:0e:94:
         dd:37:36:07:8a:5c:99:17:22:0f:bd:46:51:0f:3e:18:b7:92:
         e0:00:15:fd:8e:51:15:9b:b2:41:06:45:dc:dc:9d:5d:f9:22:
         9b:f0:5e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:09:14 2026 by rpki-client