Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
File:                     YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft (raw, json)
Hash identifier:          pYXecSMmdrp8YKzK3c4P5sAUMlv+VZS1rpkZsb6NPW4=
Subject key identifier:   AC:3B:AB:96:81:37:69:B9:45:C2:A5:0F:1A:73:5A:10:D2:42:83:CB
Authority key identifier: 60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
Certificate issuer:       /CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Certificate serial:       019F946D4D2B1E65EE1BE3081418396A2F32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
Manifest number:          158B
Signing time:             Fri 24 Jul 2026 14:00:18 +0000
Manifest this update:     Fri 24 Jul 2026 14:00:18 +0000
Manifest next update:     Sat 25 Jul 2026 14:00:18 +0000
Files and hashes:         1: ET5vMhLbSdWsUS7cNiMD0Da89x0.roa (hash: +AkKc2WCnmOlPOxnIiAKu7no0yZQrgr6+XgFHwBRgZU=)
                          2: YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl (hash: Lh1yzBlUoutE2ZMNG8Hv21+GTznrxmtO4M9/fWAQc2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 14:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6d:4d:2b:1e:65:ee:1b:e3:08:14:18:39:6a:2f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
        Validity
            Not Before: Jul 24 14:00:18 2026 GMT
            Not After : Jul 25 14:00:18 2026 GMT
        Subject: CN=ac3bab96813769b945c2a50f1a735a10d24283cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e3:74:0b:7d:c7:c4:3d:48:6b:98:38:e9:36:
                    e2:df:4a:7b:06:7f:2d:a3:d3:07:56:41:6e:35:a6:
                    83:d2:05:05:f5:d9:5b:ad:a4:ea:11:ce:a0:45:36:
                    d1:77:bd:39:29:2d:4e:5e:59:01:5e:9c:2c:c0:36:
                    87:ed:d7:e1:32:c4:89:8f:c2:b4:d5:2a:28:38:c1:
                    08:5f:9f:a4:ee:44:a3:e1:2c:6c:38:23:da:0a:b6:
                    ad:f0:b5:b3:18:91:26:4b:a6:29:bc:e9:e0:5a:aa:
                    2f:bb:73:7c:6a:6b:dd:8b:42:74:fb:f4:f9:23:db:
                    d9:fb:e2:96:74:14:b7:83:3a:23:9a:20:d4:eb:f0:
                    5b:d4:59:25:48:e8:69:b9:09:41:1d:ca:b9:e6:0c:
                    f5:e3:59:ba:d5:b2:5e:26:1f:2f:f7:96:14:bd:8a:
                    b0:90:b6:c7:20:1a:f9:e5:7c:48:12:2f:af:dd:5a:
                    ed:13:57:eb:b0:84:54:18:a1:d6:e8:18:35:08:c8:
                    66:24:6d:33:05:cf:e3:c7:d5:4e:39:d9:cb:9a:c2:
                    17:e4:28:6b:b8:8f:21:7b:27:37:8e:5c:a8:7d:06:
                    f2:a7:70:66:7b:ec:4a:12:e7:b9:ff:27:57:98:89:
                    25:66:24:35:ed:72:7a:72:32:b0:ad:ba:46:7c:d6:
                    e8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3B:AB:96:81:37:69:B9:45:C2:A5:0F:1A:73:5A:10:D2:42:83:CB
            X509v3 Authority Key Identifier:
                keyid:60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:0b:12:4b:f4:1a:56:d8:59:a3:06:78:6e:9e:a9:ff:45:aa:
         cd:25:e5:6f:5f:5b:21:af:f3:8b:4e:71:1f:5b:43:a7:74:ad:
         c9:ab:3c:97:6c:5c:93:e2:b0:13:8f:c4:70:50:50:1a:88:c5:
         37:d9:32:93:2e:5d:06:e2:8c:5f:f5:36:b1:a8:74:6f:5d:90:
         d0:48:bf:8d:2d:d9:c9:fa:bd:f5:b5:87:0c:75:3c:06:2f:14:
         98:f7:3e:e8:0c:22:01:fa:5b:ba:f1:75:90:1f:cf:3e:e8:2c:
         52:fb:ad:70:24:24:06:51:88:73:cf:f7:c2:53:13:ca:ad:1c:
         dc:ee:cc:0d:fb:21:40:47:e1:5e:fe:75:6c:ce:87:3e:ea:56:
         c9:33:a2:60:96:4e:10:d2:c0:c1:9f:31:9c:da:a6:ff:4e:0e:
         95:bf:f4:ac:8f:76:01:4c:46:c8:8f:26:4e:fc:63:51:7b:86:
         b6:66:e7:f9:7d:c9:8a:0b:61:8f:2b:5a:ca:6f:5d:31:bb:16:
         77:f1:1a:ed:1e:2f:41:2b:83:61:2f:c4:43:14:b2:e0:4c:b5:
         63:16:d2:74:8a:5d:0a:5a:79:af:b6:da:ca:5f:86:99:e6:6c:
         48:9f:4e:7e:35:7a:80:23:a0:1a:54:be:af:06:90:b1:73:b5:
         33:a9:72:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:10:56 2026 by rpki-client