Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
File:                     sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft (raw, json)
Hash identifier:          G71SjaYU8tW+5sSATCRCZJdo6gQ7y9dlaHBCtqarkb8=
Subject key identifier:   0C:3D:74:08:3F:FD:F9:FC:51:DB:77:1B:2B:C2:F4:38:19:A1:CC:54
Authority key identifier: B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
Certificate issuer:       /CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Certificate serial:       019F8F7DF9B779E06D37E41CD51DEEB62DBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
Manifest number:          12D0
Signing time:             Thu 23 Jul 2026 15:00:25 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:25 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:25 +0000
Files and hashes:         1: 1ZD-5sWPvLvF_F5r7aK4sjXeBa8.roa (hash: 9g3E8L94O35utFKdVj/OF7X+jv2TAGMuo7bfCk2FBWk=)
                          2: Jgh8TRgca-Yzk4zbDo1y-y8oAjA.roa (hash: 1YiIe3dsEVG85vOw2eS5VT5pNrhUblvJwxJsfNgGFh8=)
                          3: kpO4RG28fYYVmBuJSIXGaHvSxU0.roa (hash: i8inyU2Y1UbsH+wXnBk66d0sVuBHQPuFEaJpwKKuPzA=)
                          4: sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl (hash: RnalsEJu65rF/rt0tfTmlDp55wS9g8gcDxnNAsWRIfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 15:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7d:f9:b7:79:e0:6d:37:e4:1c:d5:1d:ee:b6:2d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
        Validity
            Not Before: Jul 23 15:00:25 2026 GMT
            Not After : Jul 24 15:00:25 2026 GMT
        Subject: CN=0c3d74083ffdf9fc51db771b2bc2f43819a1cc54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:28:41:19:88:ff:57:d5:81:35:6c:25:ae:0e:
                    1f:b9:df:60:1c:70:bd:0e:62:51:1f:10:de:f3:0d:
                    a3:a2:0a:32:ff:d0:f7:56:25:53:d9:fe:60:fe:6b:
                    7c:d4:a4:b3:c6:c6:05:fd:ed:8e:c8:2f:ca:e0:3a:
                    01:80:8b:fa:42:63:71:19:04:c0:b5:50:04:fb:10:
                    92:41:85:62:09:8d:0b:56:d2:29:25:c6:22:9e:c4:
                    cf:d2:7e:52:39:dc:50:db:b1:87:d0:f6:6a:b5:4e:
                    54:7d:5e:5f:03:2e:ef:b3:f8:5f:4f:73:b1:3f:53:
                    4d:1e:7c:60:a9:17:d3:0c:d6:a0:18:29:32:7f:f2:
                    c3:d2:21:d4:83:0e:5f:d5:ea:af:d3:b7:26:1d:4d:
                    7d:3d:a7:d4:59:4f:ce:44:c4:4a:f7:06:a8:16:32:
                    9c:6a:ef:21:cb:db:ed:ac:1d:b2:e9:31:a6:25:15:
                    81:f4:78:f0:06:35:b8:e4:54:c3:e7:2d:0b:17:db:
                    10:48:15:0f:b4:7a:b5:02:12:ad:8f:bc:4e:b2:3f:
                    92:1a:89:49:ee:fb:48:18:9d:66:7f:62:f6:b0:de:
                    ed:14:77:cc:6e:c2:d0:a4:07:89:b1:db:b4:9e:c3:
                    80:bc:e2:53:58:db:5b:07:93:e0:35:33:82:25:fb:
                    9e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3D:74:08:3F:FD:F9:FC:51:DB:77:1B:2B:C2:F4:38:19:A1:CC:54
            X509v3 Authority Key Identifier:
                keyid:B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:15:7a:3b:3b:a9:2b:a5:04:18:17:59:40:90:1a:a9:13:39:
         2d:f9:bf:45:00:7f:2a:06:ad:dc:3b:3d:57:e0:f2:34:4d:9d:
         9f:d1:b6:5b:fb:31:c8:4f:1d:ec:ba:55:37:43:bb:84:a0:83:
         b4:a9:a9:83:57:58:42:41:0b:f0:7c:69:30:e3:e6:36:46:f8:
         0d:56:4f:53:d0:26:5e:3a:ce:8a:08:0e:81:09:dc:77:63:63:
         27:87:b5:d7:f2:83:5b:3b:a4:9f:2d:5d:54:7d:ff:52:07:9f:
         2c:b2:6e:af:e4:fe:d3:95:02:94:24:b3:a7:b4:52:11:6c:53:
         c1:13:7a:98:bb:52:a7:e2:88:7b:b8:26:9f:7a:f6:45:ed:2b:
         b7:52:4b:2e:cb:67:66:f9:a3:cc:96:03:5e:f5:5e:76:c6:33:
         b5:87:4f:28:b5:ae:ff:e2:fb:37:37:2e:7b:29:8e:32:87:d0:
         d2:e8:bf:26:ca:84:4c:e1:57:24:93:eb:f0:97:b0:0a:f1:34:
         73:f8:09:fe:00:57:b8:5a:ef:15:4d:39:fb:04:82:30:fa:df:
         34:74:ec:8f:d9:02:6a:28:9f:07:db:f3:b1:51:1a:e9:20:9b:
         4a:61:c6:a8:77:8e:3b:71:33:f5:b2:6a:d3:2d:e9:83:d9:14:
         ef:f2:a4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:40:49 2026 by rpki-client