Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft
File:                     Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft (raw, json)
Hash identifier:          6QmBYAzwkWg/PyEzQ6xWnmknFBY+VEtfLXnYXuJZT3o=
Subject key identifier:   B9:DF:1F:70:DF:FC:3E:05:11:A2:B8:AA:EF:72:71:D1:80:DF:B2:D0
Authority key identifier: 63:CB:81:A7:AF:13:6D:96:F0:C7:60:51:DA:6E:4D:05:D1:FF:63:3D
Certificate issuer:       /CN=63cb81a7af136d96f0c76051da6e4d05d1ff633d
Certificate serial:       019FAC75BD79FCCC69CCC7AABBB71E34FD14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:00:25 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:25 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:25 +0000
Files and hashes:         1: 7cTjsLRiYYSxjEiyyxvrM7VcUoM.roa (hash: 9oRDcj/n0yIWrTx9daAB6UyBKfL+1eMjORwY8HvJ18Y=)
                          2: Y8uBp68TbZbwx2BR2m5NBdH_Yz0.crl (hash: bD0KZNKbU8SLkwfUQ3KkedVPH7AP2Jn/p/2+NvT5Lg4=)
                          3: p0eoEVp2ZRfAFQIEeNZFFp6BKKo.roa (hash: 7ygvBpXf/4xZkV++cCRPOzyCKN66G0s7NhzA+lJoryE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:75:bd:79:fc:cc:69:cc:c7:aa:bb:b7:1e:34:fd:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63cb81a7af136d96f0c76051da6e4d05d1ff633d
        Validity
            Not Before: Jul 29 06:00:25 2026 GMT
            Not After : Jul 30 06:00:25 2026 GMT
        Subject: CN=b9df1f70dffc3e0511a2b8aaef7271d180dfb2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7b:71:1d:d0:77:69:2b:56:d8:46:15:99:99:
                    3d:14:70:02:c6:3f:61:c1:a3:d5:9a:f8:5e:9d:d2:
                    0b:c6:f0:aa:e3:02:9f:00:a3:01:72:de:09:56:e1:
                    98:b1:88:9f:b1:fe:08:b2:78:a1:d2:d1:3a:0f:9f:
                    3c:1a:77:c2:03:c3:46:6c:df:76:97:66:fc:8b:31:
                    b0:6e:30:ba:c6:55:34:3d:be:88:e4:2f:64:6a:2b:
                    fb:76:83:96:fc:3e:83:4f:1d:d1:b3:ad:60:86:69:
                    51:3e:77:13:24:20:6c:3c:03:c8:b1:1d:2c:58:35:
                    28:97:73:3b:77:59:c7:8e:68:9e:ab:03:12:77:81:
                    d4:a2:fd:f3:0d:af:1e:25:14:e0:72:4b:6e:e3:f7:
                    df:75:ab:17:d0:8b:33:f6:2d:ff:7f:f2:26:0e:cc:
                    9a:cc:6f:44:01:cc:31:63:50:40:e8:0d:3a:0c:1a:
                    fa:0b:52:90:4a:68:03:10:2f:e4:10:d8:35:d2:16:
                    88:eb:96:18:f6:b4:23:f6:6d:c2:9f:ed:db:26:8f:
                    b0:a1:63:04:23:43:95:90:04:f6:65:ba:c9:85:c7:
                    23:94:51:df:83:83:c5:6c:3f:7b:1e:24:86:74:98:
                    19:35:59:16:b7:dc:da:a4:c1:c9:4d:c6:0e:83:5e:
                    68:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DF:1F:70:DF:FC:3E:05:11:A2:B8:AA:EF:72:71:D1:80:DF:B2:D0
            X509v3 Authority Key Identifier:
                keyid:63:CB:81:A7:AF:13:6D:96:F0:C7:60:51:DA:6E:4D:05:D1:FF:63:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c7:af:aa:1c:d1:67:7e:90:d8:36:e4:a2:82:b8:9d:e5:08:
         bf:e2:ca:8e:a9:24:c9:fa:43:75:2c:16:d8:0f:e4:e9:c7:5d:
         c2:2c:5d:b2:ff:25:a1:14:50:35:de:d9:68:5b:fa:37:64:6f:
         78:47:62:5e:3f:17:1c:a0:2a:aa:d6:a4:b2:74:46:f0:26:39:
         30:39:20:56:ab:ca:d2:ba:8f:22:5f:86:c5:54:dc:e6:5f:da:
         15:ed:9e:2a:05:a6:3e:2e:55:89:28:22:a7:92:c3:f2:df:17:
         4d:38:0e:c0:13:01:e1:c9:d2:c6:ba:db:2a:8f:9c:f0:59:56:
         b1:45:d8:70:21:b2:ec:84:8c:8a:60:e3:11:02:29:ad:4b:b3:
         9d:80:ca:58:9a:73:9b:c9:c5:a1:f2:a0:ad:a4:bd:40:70:ff:
         1d:de:be:a5:40:a3:91:c5:74:69:b5:34:cb:ec:8c:d7:f5:09:
         72:4d:19:5c:32:94:46:7f:2c:64:8a:80:78:0e:46:1e:d6:78:
         9b:4d:09:0a:72:33:d9:0f:5e:1d:f2:9b:e6:f4:86:78:0f:32:
         4d:1a:a3:2f:35:1b:52:bb:8b:2a:84:f9:ab:4f:64:51:e8:f7:
         8a:91:e4:ec:46:f2:f3:0d:46:f9:15:7c:1e:ce:f4:08:07:58:
         47:55:47:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:23:33 2026 by rpki-client