Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
File:                     yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft (raw, json)
Hash identifier:          CtD8uz0l7LQj1JIgi2V05cbeWTOHutl/gi9crpPbaKI=
Subject key identifier:   31:70:01:E3:18:9B:B8:78:B3:10:3C:84:AA:E3:CC:43:48:DB:9A:91
Authority key identifier: C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
Certificate issuer:       /CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Certificate serial:       019FABD113405DDFCB45DFBB8C9E338257B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
Manifest number:          0F8E
Signing time:             Wed 29 Jul 2026 03:00:33 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:33 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:33 +0000
Files and hashes:         1: cN4RDtGLM5l2DvX_T4i1shDStCU.roa (hash: yvuehCFR0SYwl9RZeEUmpN0/FZZPNS0ZYV+AhmYhkto=)
                          2: yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl (hash: VCtUmHq8U1WQ44jnmS97fIswBvlDt9LY1Iui6NIVDH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:13:40:5d:df:cb:45:df:bb:8c:9e:33:82:57:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
        Validity
            Not Before: Jul 29 03:00:33 2026 GMT
            Not After : Jul 30 03:00:33 2026 GMT
        Subject: CN=317001e3189bb878b3103c84aae3cc4348db9a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:ee:f1:d6:07:85:ee:75:05:a5:7f:fa:cb:
                    a3:99:35:7c:13:67:3b:e9:57:fe:50:01:26:59:76:
                    ea:64:fa:af:d8:4e:d8:ab:be:c2:f8:d7:a3:50:6d:
                    55:d1:60:ed:bc:0f:fe:a0:d9:17:73:51:c2:8d:8c:
                    52:2b:3b:1c:8a:eb:f0:fe:ab:80:53:47:b3:ba:b9:
                    28:5a:89:bc:98:20:b5:82:53:82:0a:af:77:2a:fa:
                    82:ad:3b:8d:3e:d6:d6:93:3b:44:2c:be:f6:22:60:
                    9a:d2:4c:9f:b6:7e:39:88:e6:34:79:f2:b0:ab:f0:
                    9d:d0:74:5b:fd:fe:f3:c1:d9:d9:c9:2b:71:f0:92:
                    c4:f8:f2:c5:3d:c7:d6:6b:54:e0:5a:36:b1:2c:a6:
                    5a:70:7c:dc:72:81:d7:49:74:ee:63:59:ad:15:78:
                    f0:54:fe:23:5d:1f:24:63:f0:a3:1b:e9:9b:81:8a:
                    1f:75:04:9a:32:0d:92:4c:90:1d:3e:0b:60:bf:d6:
                    76:1f:09:6a:70:69:a5:41:ae:7b:c6:39:23:cd:e8:
                    f7:ac:4d:fc:a9:e9:e9:d2:04:75:dc:75:eb:a9:ed:
                    f7:09:31:83:58:48:7a:25:fd:be:e7:0a:46:60:4a:
                    7b:29:51:43:ee:66:81:de:7b:80:75:e0:4f:d4:52:
                    30:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:70:01:E3:18:9B:B8:78:B3:10:3C:84:AA:E3:CC:43:48:DB:9A:91
            X509v3 Authority Key Identifier:
                keyid:C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:75:3e:18:85:1a:91:a6:f7:b4:e0:d9:22:de:27:c4:fd:27:
         32:10:74:a0:8e:20:de:35:37:18:6e:55:f6:0b:3b:da:af:c7:
         b6:8e:fd:8a:5e:54:7c:25:e9:71:35:dc:7a:2c:0a:0d:34:35:
         ee:22:b9:f9:79:3f:be:76:54:a8:cf:2c:d6:7d:bc:89:13:d7:
         82:57:58:ac:30:69:0c:0d:f6:7e:5b:95:8b:60:a9:a8:f9:76:
         48:4b:29:92:72:a0:d4:99:04:82:92:c1:91:53:c7:63:d6:b4:
         81:2a:32:99:3d:d1:09:cf:3c:c1:fc:2a:61:a2:83:c5:20:68:
         38:98:73:6b:20:00:ab:2d:da:b3:83:e9:c5:73:35:61:38:a2:
         63:96:b2:e1:ef:29:0d:d1:b3:b0:67:1b:34:d7:5f:9f:c0:af:
         f0:81:8c:a8:c0:16:f0:fa:ce:a9:34:d9:3a:ab:4c:34:27:27:
         54:f5:65:56:ea:31:9c:17:4f:41:31:7b:9a:b8:5c:6b:47:ce:
         a6:b8:b0:18:3f:75:11:e0:45:26:fa:46:9d:a1:24:25:50:9f:
         38:82:f2:23:eb:01:50:ac:37:0c:d8:28:4a:ee:4f:9c:07:91:
         0d:9e:5e:02:c4:e7:bc:67:f3:8d:f9:52:fc:40:07:e5:68:54:
         a7:1e:f4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:06:45 2026 by rpki-client