Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
File:                     L_YYK-t7gshXPfi21RBE1sZyToI.mft (raw, json)
Hash identifier:          JM07O23eVRtdprXgky2AGFOkJEcqMa9or1ZaTWB/Zk8=
Subject key identifier:   41:7A:B9:BB:18:AE:A9:15:94:DC:BA:8D:E7:17:D5:CB:36:A2:72:BD
Authority key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
Certificate issuer:       /CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Certificate serial:       019F9248A3F23239DA1907CE44986C9D36BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
Manifest number:          08D0
Signing time:             Fri 24 Jul 2026 04:01:01 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:01 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:01 +0000
Files and hashes:         1: LMnW7BQw6VTniWIkmWbGGaakoOg.roa (hash: Xvh7VVkZUVV7AZo3Wz6W7iZLuuYv1DelOXPWWhTcB8A=)
                          2: L_YYK-t7gshXPfi21RBE1sZyToI.crl (hash: qz3CRmgkFIjDq6ibmJUyiCL6YOL2v1Z8DmoDkNoDinM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:a3:f2:32:39:da:19:07:ce:44:98:6c:9d:36:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
        Validity
            Not Before: Jul 24 04:01:01 2026 GMT
            Not After : Jul 25 04:01:01 2026 GMT
        Subject: CN=417ab9bb18aea91594dcba8de717d5cb36a272bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:71:e8:89:3c:72:53:20:74:53:05:61:ab:24:
                    c8:d8:17:97:cd:e2:71:3a:2e:63:8f:8b:08:4f:00:
                    29:80:48:8c:e4:e4:ff:92:dd:20:2b:84:f8:21:2f:
                    a3:0a:09:9c:39:ab:27:a9:4c:61:e2:ff:0c:e7:9e:
                    bc:45:1a:2d:30:59:b0:c3:59:c8:00:35:6a:40:66:
                    09:6c:73:bc:06:da:3f:42:bc:78:b4:78:40:12:fc:
                    c2:1c:c5:51:0d:cd:0a:46:3f:74:66:12:b0:f3:24:
                    3d:46:e6:e2:30:fa:7a:6e:a7:a4:8b:a5:13:e5:75:
                    c2:ad:77:85:70:af:ec:44:b9:70:eb:fc:9b:ee:ed:
                    fb:e6:06:91:11:a1:08:47:b5:37:6c:9c:1d:b7:9e:
                    3e:ed:62:86:58:22:6b:1f:1e:05:e8:2e:6a:7e:b2:
                    70:22:11:83:c2:ef:37:cf:db:cc:65:4c:f0:72:f7:
                    09:91:11:9c:ac:12:63:f0:ea:f8:e6:21:0a:cd:d2:
                    3e:14:f9:3a:3d:1f:32:68:fc:b5:d3:aa:c0:43:73:
                    be:2f:aa:73:86:8f:1e:e3:f7:c7:85:e9:7f:41:55:
                    d6:0d:d2:59:9b:29:7d:e1:92:08:bc:d5:ae:65:2c:
                    cd:2a:37:a7:66:72:94:56:d6:25:d6:09:49:61:57:
                    dd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7A:B9:BB:18:AE:A9:15:94:DC:BA:8D:E7:17:D5:CB:36:A2:72:BD
            X509v3 Authority Key Identifier:
                keyid:2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c1:d2:66:68:cf:14:9b:ec:ed:fd:c6:05:5c:68:3c:20:3f:
         41:c6:8d:f9:2e:9b:ef:a7:e4:af:52:5b:2c:56:42:bd:48:67:
         75:e6:85:cb:17:14:d3:d0:a2:3f:bf:e6:0d:98:23:a1:db:28:
         ba:2e:06:8f:61:ed:0e:11:a9:88:f6:18:a2:d0:79:99:5a:2c:
         84:26:0c:3e:a8:ba:8a:11:f5:6e:69:82:5d:51:05:63:1d:b8:
         bc:6d:06:a9:eb:31:2c:31:97:9c:f9:83:88:cf:f4:9f:09:6d:
         ad:d1:05:db:c1:5a:5b:90:7c:01:80:1c:57:a6:c8:a8:72:88:
         e6:0d:b5:7f:64:58:10:22:26:35:5b:e0:ef:2c:4e:1b:87:2e:
         b9:98:4e:75:6a:92:85:24:d8:ca:99:a8:9e:d6:09:96:9f:62:
         35:3a:63:a1:0f:7f:72:32:13:8b:10:b5:77:96:2c:43:9d:e6:
         43:39:6f:27:b9:c7:65:a7:d7:50:ee:a5:4c:f3:7b:51:c9:fb:
         75:f4:76:90:c4:a7:2d:74:72:51:ca:d6:e5:c3:c1:2d:10:0a:
         fe:d5:33:56:57:b6:a7:4a:16:ab:57:31:f5:5e:26:df:20:f0:
         0c:b8:3c:af:44:92:a3:f1:65:a3:cc:8f:90:b1:bf:4a:ec:3e:
         39:68:d6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:17:20 2026 by rpki-client