Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft
File:                     YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft (raw, json)
Hash identifier:          6+KfAjhOjehdF7JD2hQu5uZSAlSXLVqU/DufAI5BKWU=
Subject key identifier:   11:1C:12:A2:58:8A:35:FA:B5:90:5B:F9:C7:F2:81:7A:FC:78:6F:07
Authority key identifier: 62:3C:52:CC:DA:E5:62:9F:CF:70:C1:91:DB:FE:A3:AB:6D:54:97:44
Certificate issuer:       /CN=623c52ccdae5629fcf70c191dbfea3ab6d549744
Certificate serial:       019F8EA2F585533834E7BF6BDC4985CB4A32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft
Manifest number:          01A4
Signing time:             Thu 23 Jul 2026 11:01:11 +0000
Manifest this update:     Thu 23 Jul 2026 11:01:11 +0000
Manifest next update:     Fri 24 Jul 2026 11:01:11 +0000
Files and hashes:         1: YjxSzNrlYp_PcMGR2_6jq21Ul0Q.crl (hash: VSv7pTz/Ly8TBPmMHlr2n7VG3nReLYyb8YwXJ8k/e4c=)
                          2: qLtdjMaYYUHUKpxEyfvu-Lg0bgk.asa (hash: J2X18n3waDdkd9hEMyPEI6UzN5Mlccq2mc0wjMIT8Og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:f5:85:53:38:34:e7:bf:6b:dc:49:85:cb:4a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=623c52ccdae5629fcf70c191dbfea3ab6d549744
        Validity
            Not Before: Jul 23 11:01:11 2026 GMT
            Not After : Jul 24 11:01:11 2026 GMT
        Subject: CN=111c12a2588a35fab5905bf9c7f2817afc786f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6b:98:93:8e:8a:08:48:72:d4:6f:08:c9:34:
                    52:90:85:50:4f:fc:b7:73:15:08:c4:d2:e3:b0:a7:
                    6f:56:d9:3d:00:42:26:72:f3:88:e6:87:da:55:42:
                    b9:24:fa:7f:f0:f3:c9:e0:a7:2f:b5:05:85:f9:fc:
                    57:4e:c3:9a:6b:42:97:06:4b:f0:a9:6f:6b:a3:a8:
                    5c:9e:f5:98:4e:53:6b:6b:b9:02:1c:45:33:4c:0e:
                    37:5e:17:22:ce:35:b2:87:9a:08:5f:a6:58:89:36:
                    16:35:91:67:7a:fe:1e:68:2e:4f:25:f8:81:02:fa:
                    ae:89:b8:db:6b:2e:eb:f2:d4:40:f9:be:bf:2e:e9:
                    36:0b:c9:b0:63:9b:fc:73:91:5b:46:50:f2:91:b1:
                    bc:e5:3a:d8:36:8c:38:cd:58:23:3f:cf:46:48:6d:
                    28:f3:58:38:b7:8f:da:94:ab:dc:2c:67:74:85:1d:
                    9b:23:20:e3:97:4f:7d:07:08:d6:8d:9f:33:4e:5b:
                    f1:82:bb:79:a2:73:16:ed:7d:a7:75:c8:77:fa:ec:
                    83:bb:bf:d6:11:60:b8:2f:99:d8:9c:c3:f0:b3:80:
                    42:67:20:b4:03:20:68:c8:98:80:0e:b5:1c:e0:86:
                    33:cd:ad:47:40:ea:59:fa:91:47:64:ef:43:b1:1d:
                    6c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:1C:12:A2:58:8A:35:FA:B5:90:5B:F9:C7:F2:81:7A:FC:78:6F:07
            X509v3 Authority Key Identifier:
                keyid:62:3C:52:CC:DA:E5:62:9F:CF:70:C1:91:DB:FE:A3:AB:6D:54:97:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:a2:b1:22:7b:88:4d:62:0b:06:2f:6f:19:0b:47:3b:81:b0:
         6b:1c:d0:a7:78:d0:9c:aa:d6:b4:c0:ee:37:e9:ac:4a:78:ea:
         85:96:4f:cc:6c:91:31:b6:aa:30:63:24:3a:53:be:9a:22:99:
         98:b7:3d:e1:a0:83:8e:41:50:10:6d:ef:c3:39:50:7c:6f:84:
         3f:4a:cd:f7:6e:70:58:93:e5:22:d4:15:a0:56:b9:58:e2:24:
         8a:b0:95:f4:9f:de:66:16:2e:48:00:9a:1c:fa:14:95:37:c0:
         81:75:23:84:1c:64:d6:5d:fa:21:42:80:d1:c2:31:27:e2:21:
         6a:e5:c0:ad:01:55:a6:a7:8d:c5:7c:fc:2f:19:c9:d7:cd:bf:
         b0:9d:60:cc:72:3b:60:03:95:aa:cc:d0:a8:df:e6:3c:a1:37:
         6f:a0:6b:21:20:6d:d5:66:0f:b5:99:0e:a7:1c:92:bf:5c:17:
         56:be:a8:e9:5a:30:aa:93:8d:7d:70:48:62:8e:e4:85:fb:67:
         6e:27:8d:08:34:45:9e:94:92:bb:d5:88:70:b0:85:76:70:80:
         eb:ca:15:0b:15:f6:77:e5:d8:72:bd:e2:a4:c3:51:72:75:3d:
         0b:3d:a6:d6:3f:6d:34:ef:09:0b:29:46:7f:16:9a:77:9d:cd:
         b7:f3:1d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:29 2026 by rpki-client