Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
File:                     Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft (raw, json)
Hash identifier:          bJMdtAJqpOv9THWH0tc/B87KgUFUwGGsH3PlBxcdETA=
Subject key identifier:   3D:7B:B2:AC:55:13:A3:1C:A9:65:1C:04:AA:AF:E9:80:CF:C8:EC:2A
Authority key identifier: 63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
Certificate issuer:       /CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Certificate serial:       019F95B7831F97D4C79E38407215C552CBD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
Manifest number:          168A
Signing time:             Fri 24 Jul 2026 20:00:59 +0000
Manifest this update:     Fri 24 Jul 2026 20:00:59 +0000
Manifest next update:     Sat 25 Jul 2026 20:00:59 +0000
Files and hashes:         1: 614IUYG3gRvLH7wKp-4pxVgVM8s.roa (hash: dRzT8GkPgOG738tzI7AWfIU5a3zLHU58ogZFdTFRUqo=)
                          2: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl (hash: DUsHrSYL6+uor39qUUTlDgwPnf1XCMR75M0VE48kPJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:b7:83:1f:97:d4:c7:9e:38:40:72:15:c5:52:cb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
        Validity
            Not Before: Jul 24 20:00:59 2026 GMT
            Not After : Jul 25 20:00:59 2026 GMT
        Subject: CN=3d7bb2ac5513a31ca9651c04aaafe980cfc8ec2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:5f:e6:52:a8:54:e0:1d:72:50:f7:fc:cc:17:
                    f5:fc:8f:fc:43:73:af:57:2c:bc:d7:0e:73:b2:72:
                    38:62:a2:bb:59:a5:3b:08:b5:0a:f8:29:c8:60:cd:
                    9f:fb:61:77:98:10:2a:72:0e:b5:6e:fa:47:ce:b0:
                    50:f8:bb:d2:77:70:f0:87:e2:ee:8a:89:66:fa:a4:
                    20:89:f0:b3:aa:95:d0:c0:b0:b4:92:7e:5d:38:8c:
                    fd:32:1b:dc:d4:e8:cf:b4:e5:c1:d7:01:fb:09:e4:
                    a7:73:5e:cf:0c:7b:df:77:38:88:63:73:85:f9:01:
                    0f:6d:d9:b1:a8:4d:b1:0a:bf:d3:14:25:3c:3b:22:
                    08:c4:17:f7:ed:83:46:7c:85:0b:03:9e:46:da:cd:
                    a5:9b:c2:d9:40:f2:7e:d2:79:0a:e0:44:a2:62:9e:
                    b4:dd:e5:ef:ad:65:dc:15:32:cc:cd:16:ee:5f:54:
                    9c:2e:ce:94:ae:16:6a:ce:08:56:f4:a8:08:50:0e:
                    09:16:93:12:a8:29:d0:17:8a:c6:d1:70:ed:27:60:
                    5a:0b:f0:7c:f2:50:88:ae:c9:fe:c0:b7:25:78:e7:
                    f4:6c:6e:61:89:fb:6c:ad:e8:be:9e:92:89:82:ca:
                    ff:83:28:12:69:e4:65:92:b5:95:44:32:cb:5f:9c:
                    55:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7B:B2:AC:55:13:A3:1C:A9:65:1C:04:AA:AF:E9:80:CF:C8:EC:2A
            X509v3 Authority Key Identifier:
                keyid:63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:25:c6:eb:90:62:9a:ba:aa:89:41:58:fb:a9:d4:ee:7a:64:
         4e:5c:c1:7d:ba:00:1b:59:71:b1:0f:c9:96:70:a7:f6:e3:a9:
         e3:48:2a:af:22:dc:80:9a:6f:c4:1b:6e:48:0f:e1:1e:70:15:
         55:8f:8a:de:e6:23:b6:43:8b:fe:30:ea:9d:a0:40:43:5d:c9:
         45:a8:35:de:ab:52:73:c8:8d:e6:81:13:e7:8f:20:07:83:3b:
         76:bb:04:82:68:e3:2a:f2:45:d2:eb:9a:ba:6c:8b:26:39:e9:
         a4:f0:51:25:8f:56:8c:77:04:2a:b4:ff:e2:be:9c:a2:7d:e0:
         38:4d:ea:64:4d:c5:0e:20:6f:11:c2:d0:71:ba:bb:7f:8d:75:
         bc:e5:f6:85:18:f6:84:6e:97:fc:35:64:6c:07:c2:5c:31:c5:
         34:47:52:eb:cf:cc:97:03:61:e8:b7:47:ce:ab:61:21:43:d5:
         0e:bb:e1:50:e6:f0:69:fd:79:c0:41:bc:96:f9:a4:ac:05:f9:
         12:cb:29:2e:6f:c1:6b:37:a1:cf:ab:08:99:44:a7:7c:d4:1a:
         af:9e:49:29:85:3f:6e:54:16:65:c2:81:df:60:c4:cc:a9:98:
         a8:74:59:0b:24:01:d6:e2:03:a9:1b:19:40:51:79:00:00:08:
         0e:2a:cb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:53:29 2026 by rpki-client