Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
File:                     yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft (raw, json)
Hash identifier:          7eZ3Z/kXmcIqAN63TzxYu5ljyMBRK8IfSAF2LRC43Xo=
Subject key identifier:   07:B1:14:AB:C4:49:70:BA:06:FA:71:06:82:8C:A6:0D:96:D2:FD:13
Authority key identifier: C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
Certificate issuer:       /CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Certificate serial:       019F951226099BC4C32B9076AED161C9EA09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
Manifest number:          164D
Signing time:             Fri 24 Jul 2026 17:00:22 +0000
Manifest this update:     Fri 24 Jul 2026 17:00:22 +0000
Manifest next update:     Sat 25 Jul 2026 17:00:22 +0000
Files and hashes:         1: xJ9oLhi0jZ3bx5rEVTQJ-Dbq8Ic.roa (hash: 8Hl158eCXhXx4gFRUokLsBxI0i7haKKmOz5b/bBgdPg=)
                          2: yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl (hash: 45NtYjXFuJTdth0Mue77qbD230aFZO9O1Essne1+En8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:26:09:9b:c4:c3:2b:90:76:ae:d1:61:c9:ea:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
        Validity
            Not Before: Jul 24 17:00:22 2026 GMT
            Not After : Jul 25 17:00:22 2026 GMT
        Subject: CN=07b114abc44970ba06fa7106828ca60d96d2fd13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d5:37:52:28:9f:dc:4e:df:51:01:a8:1e:0c:
                    27:3c:3a:af:dd:8e:61:06:c4:20:90:b6:1c:72:e4:
                    61:8c:22:59:d7:f2:bb:ee:41:1c:c1:3d:d6:ee:09:
                    3d:a9:c1:73:e4:93:4f:a9:74:2d:91:3f:1c:cc:a3:
                    1b:1c:4a:29:4f:8e:43:be:eb:c6:0d:23:90:ac:c7:
                    be:fe:33:56:69:eb:44:91:35:e3:9e:dd:a7:84:d4:
                    e4:9c:58:a4:48:df:eb:37:cb:ca:34:6e:41:37:5d:
                    fa:4b:80:2a:42:b5:20:0e:17:f7:72:49:e7:88:3c:
                    23:e2:44:2b:1c:e5:13:45:28:01:f5:68:db:f2:90:
                    fc:eb:2a:56:3f:c4:5f:28:05:a9:85:d8:32:bc:73:
                    70:15:5f:9c:c8:40:8c:b9:5e:97:ec:62:74:20:ec:
                    d2:0d:bf:85:60:87:54:a7:4d:a0:d1:b4:74:fd:c6:
                    8e:00:8d:75:45:e8:0f:f8:28:2e:1c:29:ef:ce:57:
                    02:2c:4e:ec:e5:a5:6a:68:b4:29:a1:bd:ea:c4:a4:
                    8b:7e:92:13:00:bb:ca:4d:b0:6e:d4:47:dc:81:72:
                    b5:a3:b6:4d:a3:e8:31:bd:8b:84:32:fa:ae:60:4b:
                    bd:41:e1:7f:a3:6a:04:7d:83:16:56:94:75:5c:97:
                    ee:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B1:14:AB:C4:49:70:BA:06:FA:71:06:82:8C:A6:0D:96:D2:FD:13
            X509v3 Authority Key Identifier:
                keyid:C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:6b:0a:bc:4a:82:3f:ac:1c:f5:d8:0b:80:0f:bb:72:1a:7e:
         49:e3:55:b2:f9:53:c0:2b:44:47:5e:e1:bf:4b:01:41:42:9a:
         f6:f1:82:29:d4:a2:b8:e8:10:00:b8:a7:c0:58:45:63:51:ea:
         0c:08:11:ff:ca:31:97:75:d4:ce:b8:9f:47:87:ab:5f:56:c9:
         9f:88:09:d8:56:97:17:16:7a:95:7e:2f:f5:dc:1e:43:f0:9b:
         aa:58:85:76:ea:2b:6c:75:02:27:11:e2:9c:52:0d:1f:05:42:
         c6:17:71:af:54:97:6d:6b:66:0d:e8:92:26:18:e2:c6:ef:7d:
         5a:9f:9a:24:4b:98:85:bc:fd:31:d9:99:4b:cb:4e:d2:0a:f5:
         fe:22:01:e3:09:1d:bf:a5:bb:2a:79:3d:6d:99:86:4e:bb:b6:
         12:48:f9:57:0e:d1:44:e0:ac:55:23:0f:6a:cf:90:73:57:bc:
         30:d1:b9:fe:5d:ee:10:65:1b:9c:d4:fa:26:95:e1:b4:a4:87:
         94:7a:61:50:91:51:64:11:a6:0f:60:8d:d7:da:22:8f:18:96:
         89:cd:0c:9c:94:b9:f5:c4:9c:33:03:ef:d6:d2:46:26:c2:4d:
         95:f5:b2:59:a3:5d:71:60:7a:c5:5c:78:21:bd:5c:fb:16:ea:
         fa:67:7a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:05:18 2026 by rpki-client