Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
File:                     YbU0Q3UDZogVrdk80X0K0-GxqHc.mft (raw, json)
Hash identifier:          sx7iCvYyXpSenDAcVfhM4thuPWq8plcc/ZVHU2YbgN0=
Subject key identifier:   55:46:64:E2:E3:3E:B6:FF:C3:34:9A:75:7A:A5:1F:4B:BE:DC:34:B2
Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
Certificate issuer:       /CN=61b534437503668815add93cd17d0ad3e1b1a877
Certificate serial:       019F93241BB4081257E2446A13DB4E393243
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
Manifest number:          19DC
Signing time:             Fri 24 Jul 2026 08:00:44 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:44 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:44 +0000
Files and hashes:         1: 2v3v91RFQjN6l9mWptJO680RMkc.roa (hash: JpKAIgf5dUOG27b3V6ypmirRGf/czS7D9Bc0AguM208=)
                          2: 7eIzHvINnFqHZBOWvru0J6FjDb8.roa (hash: Dv2FZyAGPdsQN62gOmL7jMpfdjwxeMKFTL1oAf/BKfc=)
                          3: 8l0-rbUJJ5yl_F5t1WGOySUsQOI.roa (hash: 065Qj+kRYJW5mj1KN/1Un/hhPcBtSTaJS6BwFg5mPWw=)
                          4: QTFye-32ZtubZYZVN0cCrwUzz_s.roa (hash: Ou06XDdFUhQ2dykgxmyAA0EVBWVZBiN7PQ/FvfPl2a0=)
                          5: UsJrUy2UuzGGDnQa-en_vet84IU.roa (hash: anygphX/NHAj2pg72RtTsBDk/dlZBM2mWyxRgOxxXzo=)
                          6: YbU0Q3UDZogVrdk80X0K0-GxqHc.crl (hash: Zj7OOlt06fCi5yEmqKknE1nzRCyg4BlI7V0gBCaKE4c=)
                          7: o2wMPqpUwKK3k92hqD5HvK3oiiI.roa (hash: 0YGmH3GBpSNDcIwjVr7t8Bv7qy4ZPt0Vk2HKaZcbgtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:24:1b:b4:08:12:57:e2:44:6a:13:db:4e:39:32:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877
        Validity
            Not Before: Jul 24 08:00:44 2026 GMT
            Not After : Jul 25 08:00:44 2026 GMT
        Subject: CN=554664e2e33eb6ffc3349a757aa51f4bbedc34b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8a:be:4a:81:b4:57:83:e4:dd:bb:d1:13:c1:
                    61:48:5e:fc:2a:ae:3f:83:d9:c9:36:5a:91:9d:1b:
                    33:09:57:31:19:4a:72:0d:a7:3c:65:a9:c9:5f:13:
                    95:cf:73:af:c1:c4:7b:70:1c:6d:ee:5e:61:6a:ee:
                    6d:98:17:4a:88:b9:ee:d9:88:82:22:fd:d6:fc:8a:
                    56:02:c5:24:2b:a4:41:56:22:58:b0:a0:05:a0:56:
                    36:39:34:9c:7d:6e:c8:24:92:90:61:95:2f:02:0a:
                    24:bf:1f:e6:2b:55:a3:0a:e1:ac:30:be:66:17:72:
                    23:1f:8c:4a:4b:4c:95:4e:db:6d:68:c3:a3:bb:3d:
                    66:2c:96:d2:5a:5d:ef:96:fb:c5:3a:f5:2b:fb:11:
                    b4:21:f6:22:2c:3b:d2:6f:5a:21:6d:0d:24:16:b8:
                    48:07:59:ed:8e:8d:e7:a7:0b:09:cc:c7:9a:55:48:
                    e4:18:5b:a8:ba:65:50:61:0a:03:d8:8d:22:f7:ca:
                    dc:03:2f:8f:01:bf:9d:34:1d:04:2a:e8:b4:6c:ed:
                    a0:9f:d3:6c:96:c5:a9:db:8b:52:e4:aa:ac:8f:e4:
                    5f:c6:e6:09:61:4c:c8:9b:5d:b7:ef:a2:9d:20:f4:
                    81:ae:c3:76:cb:92:d0:19:ec:6e:35:34:20:57:23:
                    7c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:46:64:E2:E3:3E:B6:FF:C3:34:9A:75:7A:A5:1F:4B:BE:DC:34:B2
            X509v3 Authority Key Identifier:
                keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:6d:15:5d:c5:46:0f:e1:7c:e4:85:00:bf:78:ef:e6:e2:75:
         f8:27:b7:b8:16:74:12:a6:82:8a:00:21:63:50:46:6e:0c:91:
         d5:3f:fe:61:47:5a:3c:d0:a6:91:28:dd:9e:17:02:bb:24:d7:
         f4:51:8b:c9:43:97:8b:5c:63:ca:47:01:96:e2:6a:59:ae:da:
         84:c3:3b:9e:f6:32:c6:66:aa:96:31:01:86:bd:f2:8e:85:ad:
         c0:8b:00:0f:ef:3e:6a:c1:76:b5:b2:32:18:3a:b5:f6:fc:cd:
         90:34:93:d4:48:7c:71:03:94:86:7f:fd:e0:26:ff:16:1f:2e:
         5c:7a:f0:8b:af:83:e6:a2:5b:a0:12:f5:34:56:e0:35:fa:d1:
         7f:86:67:20:24:0d:f4:aa:3a:55:b1:5c:44:8a:f3:71:65:53:
         5a:9c:fa:17:f3:c5:fc:c8:65:4f:25:84:b9:91:fd:cd:fc:37:
         7e:aa:42:99:15:0f:3e:22:97:b6:8d:e2:7a:e9:aa:91:d1:2a:
         f8:fa:26:76:30:d5:1f:11:91:c2:cb:2d:aa:0b:34:7d:3d:b4:
         34:85:8a:c6:6b:79:54:14:45:05:b1:19:6e:61:d5:41:40:13:
         92:35:f1:3d:8d:f0:55:be:c4:02:34:77:58:a9:e6:63:59:d6:
         25:a1:a8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:42:44 2026 by rpki-client