Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
File:                     Y14XDZsHxQ0bKa6GliBssUWk8fc.mft (raw, json)
Hash identifier:          XB+nfXw89OsLNEd0+voOMK81XxTfHdLdQ9ylz3Lz5Hc=
Subject key identifier:   FA:13:B1:67:39:38:A7:38:08:43:5C:11:B3:C0:DA:56:33:48:41:D2
Authority key identifier: 63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7
Certificate issuer:       /CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7
Certificate serial:       019F9211B8423BC98F2A418B9D7D633A1A62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
Manifest number:          031C
Signing time:             Fri 24 Jul 2026 03:01:02 +0000
Manifest this update:     Fri 24 Jul 2026 03:01:02 +0000
Manifest next update:     Sat 25 Jul 2026 03:01:02 +0000
Files and hashes:         1: Y14XDZsHxQ0bKa6GliBssUWk8fc.crl (hash: rR4LrP76F6qr8J5i0Nh0Tigazo88X1R0EnOYejdmbXQ=)
                          2: w5p1hXEjQ2Xz1V3bTFCKNXnxTbs.roa (hash: BkrEG8IgRqXV47SrXBW3QPf+J5iuuBWyqjvE+aHIr/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:b8:42:3b:c9:8f:2a:41:8b:9d:7d:63:3a:1a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7
        Validity
            Not Before: Jul 24 03:01:02 2026 GMT
            Not After : Jul 25 03:01:02 2026 GMT
        Subject: CN=fa13b1673938a73808435c11b3c0da56334841d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e1:4f:4d:0f:61:2d:38:76:c7:7f:33:a2:f7:
                    b5:38:97:7a:e0:2f:fc:6d:b2:18:59:61:c5:03:85:
                    74:99:b9:04:fc:7e:b1:b4:b2:90:f3:14:a5:2b:ff:
                    02:60:f9:b4:6f:97:68:b9:d8:dd:b0:a7:65:1d:7c:
                    3c:89:ee:66:66:d8:64:e3:75:48:a7:ec:88:fc:0f:
                    53:37:9d:be:5e:07:c0:2d:0e:d6:23:cc:48:fe:94:
                    4b:fb:5e:a7:64:f8:32:ab:2c:aa:64:bb:26:2f:c1:
                    76:60:d0:c6:4e:61:3d:e9:ed:80:c8:f3:43:0f:f1:
                    20:a7:81:97:a3:26:6f:3b:e5:42:31:05:78:fe:87:
                    c3:d1:02:ca:ec:03:4f:81:51:36:25:71:28:8f:44:
                    41:99:f0:e0:02:83:14:50:75:b7:41:e3:82:b5:99:
                    b3:b1:80:fe:67:d7:28:54:74:fc:d2:bb:82:ab:40:
                    11:9f:33:ac:14:2e:16:b6:cd:39:2c:0c:b4:03:e3:
                    c8:9f:4b:f2:50:af:5b:93:cc:24:90:f3:09:e4:ad:
                    84:08:eb:b4:4f:27:b3:34:fd:a9:18:e0:c7:5c:fc:
                    78:03:04:9b:f1:0b:71:f4:1e:37:5f:4f:e0:45:40:
                    ea:55:3c:37:80:bb:65:2c:d4:a0:6b:e3:1c:f6:ea:
                    64:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:13:B1:67:39:38:A7:38:08:43:5C:11:B3:C0:DA:56:33:48:41:D2
            X509v3 Authority Key Identifier:
                keyid:63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:f3:ed:fd:66:9a:c8:a9:a8:f3:23:49:0d:c1:4c:44:11:ec:
         8f:28:04:dd:4a:a0:b1:a9:58:fc:ed:73:fb:25:0f:92:f9:97:
         b3:fd:2c:57:b8:8c:88:f4:84:08:50:06:6a:f8:81:21:ef:2b:
         a0:b7:78:70:1f:6a:6c:e7:4f:fb:73:fd:cb:bc:00:8a:01:d1:
         1b:cc:c8:10:39:ab:1d:16:2b:eb:e3:ed:71:7f:23:f7:6d:60:
         b2:a3:8e:a2:69:b5:10:6a:cd:19:30:bf:3a:cd:6a:cf:8c:fd:
         37:e8:9e:bb:af:e4:dd:da:e3:0b:e8:7d:d7:76:70:4b:6d:ea:
         a4:af:28:e2:2e:af:4d:72:13:05:2c:d4:6d:2b:30:31:c5:1b:
         33:7c:bf:c3:b1:9a:b0:11:4e:f6:5e:d6:52:c7:22:0a:04:38:
         e3:2b:78:4f:80:4c:e9:c8:cd:9d:c5:65:7e:23:de:6d:d4:d2:
         56:de:cf:39:05:eb:bb:cd:ca:89:97:83:76:d6:5c:ad:92:48:
         16:d3:4a:52:81:1c:e2:3a:76:d1:0d:41:09:09:46:9f:65:fd:
         78:4a:ff:41:ce:a9:1e:03:d1:a1:e9:f0:74:f2:56:1d:88:d2:
         14:b0:b1:de:06:b3:c4:6c:3f:a9:37:cf:c6:8b:a3:91:cb:fb:
         15:0a:ca:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:08:04 2026 by rpki-client