Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File:                     Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier:          DfyKXZADwft0J4zDISD60NJVMmbXqV+FhDcyNdB4js8=
Subject key identifier:   01:AB:1F:70:FE:D6:7F:98:A3:D5:79:0B:14:F3:CE:2F:2A:EA:ED:23
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer:       /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial:       019F8EA2921B20CFB3972724FCCCFFD06431
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number:          19CE
Signing time:             Thu 23 Jul 2026 11:00:46 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:46 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:46 +0000
Files and hashes:         1: XZ3sAdabDoOYfBZeEJolsMalQgs.asa (hash: XHuxusmmi3am2aFGs60mmc2MCFL+zmd66reyxUPLwTI=)
                          2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: ufZ82C73H2gYn+qv6oMcfhwMq3PmNOxcDdyK3D/Zxl4=)
                          3: nibctkm7wr91rBA37l_8PQxYVLc.roa (hash: VamjklOdSeVjkVgODzUFUtdlbnnylLnD0/pDvfa31T8=)
                          4: t8mVoTfmckCvsyVdwBCx2WY3_SU.roa (hash: punRHqDIXE83AX4muw8qvjP6n1JcfvmchVlgv85rsL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:92:1b:20:cf:b3:97:27:24:fc:cc:ff:d0:64:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
        Validity
            Not Before: Jul 23 11:00:46 2026 GMT
            Not After : Jul 24 11:00:46 2026 GMT
        Subject: CN=01ab1f70fed67f98a3d5790b14f3ce2f2aeaed23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:31:ef:3d:5d:85:14:72:4b:0e:b4:15:9a:46:
                    8f:4e:2b:68:5e:01:a3:2e:fe:32:b0:4d:48:8a:73:
                    39:a0:a5:86:ba:1c:f9:16:1a:7a:28:99:26:55:f7:
                    81:43:a7:1a:95:df:69:15:35:7b:13:72:55:13:c3:
                    5a:d1:c8:30:af:cb:3e:1c:d4:34:40:f4:c1:02:dc:
                    60:5a:38:52:a0:d4:02:db:97:43:98:ce:0d:49:a7:
                    49:92:ee:c5:93:3a:13:a5:2b:68:26:72:f7:3f:d7:
                    37:b7:06:6f:ee:b3:a8:b3:0f:d7:4a:cd:5f:2f:d9:
                    21:fa:05:67:65:80:60:70:1e:db:9f:36:fe:99:b6:
                    a4:80:df:f2:be:0c:6f:7e:bb:56:74:0f:40:dd:04:
                    bf:2d:b9:54:20:41:67:d6:5b:4c:54:c1:e0:5e:47:
                    d9:ed:f7:1a:89:6c:ef:4c:e0:d4:8b:13:eb:2a:43:
                    f1:2e:65:9d:38:34:7d:e0:63:ba:f2:8a:0b:a3:4d:
                    2c:f5:3a:cc:1c:5a:13:ea:4b:30:62:4d:89:13:b9:
                    16:cd:3c:e2:65:ca:6d:23:b4:c1:8b:72:e2:c0:c4:
                    0f:4a:8e:fd:33:9e:12:46:b3:cd:a9:46:e9:62:64:
                    0a:66:ec:2e:71:f1:df:29:ea:20:8a:d3:f1:6c:b1:
                    e6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AB:1F:70:FE:D6:7F:98:A3:D5:79:0B:14:F3:CE:2F:2A:EA:ED:23
            X509v3 Authority Key Identifier:
                keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:8c:eb:bf:69:15:01:53:02:77:6d:ed:07:db:9a:6b:77:fb:
         67:27:fe:39:85:cf:ed:14:0b:78:f9:f5:34:f1:1f:5b:70:33:
         f0:25:eb:74:d5:b1:36:5c:49:a6:7e:30:48:33:b0:7a:1d:c1:
         57:c8:8f:a7:bd:89:48:f7:62:05:6d:7d:e3:40:af:d5:26:89:
         e7:59:9b:8b:be:69:64:8f:db:f8:9c:2a:91:eb:41:6e:f3:b3:
         5d:6f:01:8d:6c:13:53:7e:f9:0c:00:46:8a:fd:fa:57:b0:7b:
         99:ed:79:69:c9:4c:4b:66:db:17:fa:c1:e8:0f:6f:69:f8:23:
         e1:2c:33:3a:eb:06:08:96:34:97:5a:f8:9e:66:f7:d3:6f:df:
         8d:f0:0a:38:23:a6:1d:a3:6c:3c:ac:4d:cc:1c:4d:c3:c8:47:
         f4:6c:fb:9b:c9:b6:9b:25:dd:da:c7:57:4c:de:77:57:dc:2b:
         55:d9:57:4c:9d:b4:2c:2b:76:cc:2d:4f:f2:ed:22:32:64:57:
         95:7d:30:ba:88:9a:ff:42:ad:1b:18:4f:0b:7f:cf:85:63:d2:
         d0:1d:b6:38:1a:c1:9c:d8:c6:70:83:f7:40:31:c1:b1:94:45:
         1e:dc:b9:12:27:43:aa:44:72:c4:a9:d2:4d:94:30:45:df:c1:
         08:89:0e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:15 2026 by rpki-client