Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.mft
File:                     Rych442ItIUuLgmCd6L7IKsMgbM.mft (raw, json)
Hash identifier:          5YCx4VYBh9RGNy+LV0FIAEQzKYepVBzyeYcrZ/8w3Yo=
Subject key identifier:   25:38:0B:61:67:7C:2D:EF:65:DB:21:E1:58:C6:05:72:DE:10:DD:1E
Authority key identifier: 47:27:21:E3:8D:88:B4:85:2E:2E:09:82:77:A2:FB:20:AB:0C:81:B3
Certificate issuer:       /CN=472721e38d88b4852e2e098277a2fb20ab0c81b3
Certificate serial:       019F916D22CC315E59246680B35AAE6CEBA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rych442ItIUuLgmCd6L7IKsMgbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.mft
Manifest number:          40
Signing time:             Fri 24 Jul 2026 00:01:16 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:16 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:16 +0000
Files and hashes:         1: Rych442ItIUuLgmCd6L7IKsMgbM.crl (hash: w37VkbsNR/DWyxePqH85A2zEF15aSbVJdt6ODpOPHKA=)
                          2: Sh6wUutUQFoAhZbyc9mJ5TkoVys.roa (hash: jlA4qWWIetKLdd6pQUmLfLeRwFINjNkS5gKXoUmiZho=)
                          3: ZsYV7B7rXiV9Sd4d1WORwRKLc0M.roa (hash: ZZC9xuQEACqHh/6sNaCAxnay+gwuPiQeRofUXPKfCak=)
                          4: ndXtEXhaQsCV3FdMrXZs6wJq0fw.roa (hash: AhakacNqL0L3QNvTgK4DkPjXfP1L2yY1VMxHtjyhGWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rych442ItIUuLgmCd6L7IKsMgbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:22:cc:31:5e:59:24:66:80:b3:5a:ae:6c:eb:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472721e38d88b4852e2e098277a2fb20ab0c81b3
        Validity
            Not Before: Jul 24 00:01:16 2026 GMT
            Not After : Jul 25 00:01:16 2026 GMT
        Subject: CN=25380b61677c2def65db21e158c60572de10dd1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b1:03:38:27:02:e9:e2:1f:7e:15:ef:0d:45:
                    42:39:e3:34:07:f7:5b:a3:04:2f:28:41:49:9c:e8:
                    14:01:9d:d8:f3:2c:48:23:fe:08:ea:b9:e2:66:bf:
                    8f:fc:2f:ce:e7:82:ec:ca:31:be:9f:bb:a3:93:a4:
                    80:de:fd:52:b4:82:0d:b5:f4:23:1b:c9:f6:85:a7:
                    c3:dd:02:c5:91:a9:d1:80:93:42:86:eb:46:49:b7:
                    07:48:e6:74:7e:82:54:43:d8:71:50:82:12:52:27:
                    eb:4d:14:09:3d:b3:b9:fb:13:bc:ed:8f:24:14:04:
                    72:94:7c:76:d0:7b:eb:2e:4a:ba:47:a7:b8:2c:c2:
                    e4:b8:e4:ca:52:03:cc:4e:70:fc:2f:97:a8:7c:b3:
                    78:06:c7:f0:62:d0:73:8a:2b:99:6d:8b:5d:e6:1b:
                    c5:4d:d7:f7:42:b3:b5:e0:14:71:df:6a:83:6d:d1:
                    7e:3e:58:09:04:7d:e9:f3:51:cc:39:ec:0d:9b:91:
                    ed:64:15:27:53:00:db:39:15:77:85:98:33:61:6d:
                    7d:84:a7:88:47:8b:94:b9:07:bc:58:38:82:12:90:
                    9a:61:27:24:ce:86:b9:f9:12:be:e0:ad:b7:d7:d1:
                    eb:0a:a7:14:33:c9:29:37:a8:d6:97:fc:d2:9d:9f:
                    4f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:38:0B:61:67:7C:2D:EF:65:DB:21:E1:58:C6:05:72:DE:10:DD:1E
            X509v3 Authority Key Identifier:
                keyid:47:27:21:E3:8D:88:B4:85:2E:2E:09:82:77:A2:FB:20:AB:0C:81:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rych442ItIUuLgmCd6L7IKsMgbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:71:25:f2:13:94:ca:bc:1c:85:fa:4b:1c:33:e8:99:89:bb:
         bf:c9:d7:4b:52:cd:40:d2:f5:1f:9f:7e:75:b2:4f:51:91:b0:
         a3:08:14:33:40:9d:52:de:61:42:c0:a7:ef:77:be:9e:a4:3e:
         b1:05:3f:0f:8b:67:47:77:56:5b:70:c6:06:a1:8c:0f:9f:a3:
         a6:9f:4f:cb:6f:ca:0d:fc:66:0c:23:4f:c9:e3:d0:59:c0:60:
         14:2d:cf:94:54:b2:41:48:19:b8:e2:14:c4:a7:82:d2:e5:7b:
         7e:44:1c:e3:f2:81:37:d1:1f:e8:14:4a:83:8f:89:cb:05:50:
         1c:16:00:fd:06:f4:46:31:b7:94:5f:3d:d4:2e:d8:e2:98:9b:
         d9:9f:f4:52:64:ed:fe:3e:01:f9:9d:8a:8f:ac:71:9c:70:df:
         67:8e:e5:14:2b:f0:70:6c:4f:58:ea:de:3f:fd:9a:d2:f6:0b:
         a5:d5:da:7d:5f:5a:05:f1:37:56:30:6a:b8:98:11:4b:af:93:
         60:b2:6f:8c:9b:b9:14:a1:4e:c7:79:e2:05:2b:92:44:0a:0b:
         94:f4:78:3c:f3:db:4c:e0:4a:6b:21:59:fd:11:ef:d2:7e:57:
         d0:aa:76:c5:85:2a:51:6e:03:d2:25:21:71:d1:11:56:73:da:
         0c:1b:1d:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbSLMMV5ZJGaAs1qubOuoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MjcyMWUzOGQ4OGI0ODUyZTJlMDk4Mjc3YTJmYjIwYWIw
YzgxYjMwHhcNMjYwNzI0MDAwMTE2WhcNMjYwNzI1MDAwMTE2WjAzMTEwLwYDVQQD
EygyNTM4MGI2MTY3N2MyZGVmNjVkYjIxZTE1OGM2MDU3MmRlMTBkZDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bEDOCcC6eIffhXvDUVCOeM0B/db
owQvKEFJnOgUAZ3Y8yxII/4I6rniZr+P/C/O54LsyjG+n7ujk6SA3v1StIINtfQj
G8n2hafD3QLFkanRgJNChutGSbcHSOZ0foJUQ9hxUIISUifrTRQJPbO5+xO87Y8k
FARylHx20HvrLkq6R6e4LMLkuOTKUgPMTnD8L5eofLN4BsfwYtBziiuZbYtd5hvF
Tdf3QrO14BRx32qDbdF+PlgJBH3p81HMOewNm5HtZBUnUwDbORV3hZgzYW19hKeI
R4uUuQe8WDiCEpCaYSckzoa5+RK+4K2319HrCqcUM8kpN6jWl/zSnZ9PxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCU4C2FnfC3vZdsh4VjGBXLeEN0eMB8GA1UdIwQY
MBaAFEcnIeONiLSFLi4Jgnei+yCrDIGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnljaDQ0Mkl0SVV1TGdtQ2Q2TDdJS3NNZ2JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wMWE3M2EtOGRhMC00OGI5LWFhZWQt
YTIzYzEzMWMwZDM4LzEvUnljaDQ0Mkl0SVV1TGdtQ2Q2TDdJS3NNZ2JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8wMWE3M2EtOGRhMC00OGI5LWFhZWQtYTIzYzEzMWMwZDM4
LzEvUnljaDQ0Mkl0SVV1TGdtQ2Q2TDdJS3NNZ2JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApnEl8hOU
yrwchfpLHDPomYm7v8nXS1LNQNL1H59+dbJPUZGwowgUM0CdUt5hQsCn73e+nqQ+
sQU/D4tnR3dWW3DGBqGMD5+jpp9Py2/KDfxmDCNPyePQWcBgFC3PlFSyQUgZuOIU
xKeC0uV7fkQc4/KBN9Ef6BRKg4+JywVQHBYA/Qb0RjG3lF891C7Y4pib2Z/0UmTt
/j4B+Z2Kj6xxnHDfZ47lFCvwcGxPWOreP/2a0vYLpdXafV9aBfE3VjBquJgRS6+T
YLJvjJu5FKFOx3niBSuSRAoLlPR4PPPbTOBKayFZ/RHv0n5X0Kp2xYUqUW4D0iUh
cdERVnPaDBsdag==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:30:04 2026 by rpki-client