Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
File:                     syycJt98zYrTjYm9XUk4C5Ox4Ak.mft (raw, json)
Hash identifier:          O89A4nmL++ITyM3RL3VwU2sh1y5T/ygne4x6RijZ39c=
Subject key identifier:   D2:62:26:6D:A7:90:A0:90:CC:ED:80:00:49:1E:76:25:05:38:08:29
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Certificate issuer:       /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial:       019F92ECB68DC7BD95EE9009705D0970A0A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
Manifest number:          1721
Signing time:             Fri 24 Jul 2026 07:00:14 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:14 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:14 +0000
Files and hashes:         1: RlS65Cu5Blyp3Iau42L7pgdKTKs.roa (hash: 97DlafVkmODbtHq2Ke3+XAuFETCB6P1vgnc6KUW2Tw0=)
                          2: TtF2-5jlTeNtomtDsnLXaVfZZQs.roa (hash: bOFctgKhUglT+7Rnoc8CMHSaJ6gExTqm2TI5PVgaKVs=)
                          3: cxrYDYRve-AK30Fn1TQ9Kqrsm3M.roa (hash: omj5Dxmbd1CeguDg9OXaZDFdwZG6Smx/H+Y39YrtYK8=)
                          4: pXNasJuntOJO3N3kw1g3qivG7zE.roa (hash: PUJOhFOIFE0veiyjg18+xEvek2lGrnIE0OMgbz8VFw4=)
                          5: syycJt98zYrTjYm9XUk4C5Ox4Ak.crl (hash: kAuXkYYavZvuBkiP3zYKIXo+8YD5L7DpeRXuFFgWfvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ec:b6:8d:c7:bd:95:ee:90:09:70:5d:09:70:a0:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
        Validity
            Not Before: Jul 24 07:00:14 2026 GMT
            Not After : Jul 25 07:00:14 2026 GMT
        Subject: CN=d262266da790a090cced8000491e762505380829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:1f:66:29:9e:cb:64:06:ef:04:cf:96:98:
                    85:e8:5a:58:59:fc:26:ee:a3:21:fb:5a:8b:2c:86:
                    75:df:3f:a2:fd:65:23:99:c4:46:f6:3d:0b:15:c6:
                    34:f6:02:94:14:24:fc:e5:94:aa:da:75:cc:c2:f3:
                    d7:05:f0:54:cd:c1:e4:aa:a4:2c:bb:91:07:2d:55:
                    49:10:bc:73:f0:e4:2f:39:cd:5e:b1:7d:53:66:91:
                    c1:a4:80:ea:d0:b2:24:62:33:48:8e:3d:51:6e:ac:
                    64:24:17:81:c9:e0:bd:c5:3c:88:db:35:19:e2:da:
                    ee:04:ed:08:67:a1:06:a5:24:f3:a0:74:16:21:77:
                    b9:91:c2:c1:96:f6:01:da:3f:24:46:dc:28:4c:1d:
                    6c:51:76:3b:e9:f5:a1:0e:46:3c:e9:11:c0:d0:d2:
                    49:86:9f:e0:99:42:bf:e2:6e:c8:c6:df:2c:4e:1e:
                    96:a8:89:3c:9d:73:a2:a2:95:ea:f1:90:9f:da:4b:
                    a3:a8:25:a7:90:7f:13:97:c4:46:4a:41:87:44:37:
                    f5:a6:fd:75:6a:c2:f7:bf:8f:0d:6d:50:da:7f:16:
                    b8:89:84:e1:32:77:09:d2:b8:3c:04:2e:41:ec:db:
                    1c:cf:c5:f5:80:a0:f8:9a:dd:a6:12:11:a3:52:d1:
                    55:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:62:26:6D:A7:90:A0:90:CC:ED:80:00:49:1E:76:25:05:38:08:29
            X509v3 Authority Key Identifier:
                keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:60:6e:80:f6:0f:8e:63:24:56:59:dd:e8:4a:73:d1:60:42:
         a4:7c:04:49:04:6c:c4:4d:f6:15:9e:45:6a:61:0b:dd:54:7a:
         ce:3a:b8:3f:ac:e7:2a:61:1e:0c:98:52:13:e1:f7:de:be:34:
         94:6b:39:20:be:82:de:93:f4:29:a9:d5:d6:9b:f3:3f:97:4a:
         68:10:dc:66:ee:a8:70:b6:e5:10:71:ea:87:4f:5c:a9:bf:21:
         c9:d2:22:2c:92:5d:ee:e7:c3:d3:e3:8f:94:b1:ab:7e:01:c6:
         39:cb:ea:3a:fa:89:55:5c:f3:67:a1:00:08:da:92:3a:7d:12:
         9d:9a:a8:8f:7c:f2:b0:fb:9c:dc:65:91:98:ef:91:fc:dd:9d:
         1d:bb:15:3c:0e:b2:95:a5:4d:19:15:dd:d4:ce:62:ff:62:2d:
         51:58:41:a9:0e:38:fd:8c:41:79:7e:d5:ec:e3:3b:2f:29:e7:
         62:2d:e4:be:68:f5:bd:1d:c8:b1:45:1a:eb:ef:5d:0d:24:16:
         4a:9b:16:bc:ef:b2:6e:cd:ea:c4:07:70:43:b4:6c:f0:dd:99:
         e9:bf:19:1d:16:f8:00:ef:e1:8f:34:43:fb:8d:7f:aa:3d:c1:
         dc:6c:6f:e9:08:be:01:c1:94:a6:28:3d:80:2b:b9:c6:37:d3:
         15:69:c2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:15:50 2026 by rpki-client