Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
File:                     yZE15YfLs4vh63tt6cSAKdBF0nM.mft (raw, json)
Hash identifier:          4IyIj/LTVmE3bK+kblTjzD8Yl7b6GtX3J/Yudli45KQ=
Subject key identifier:   96:4F:E4:48:61:99:37:83:85:17:4E:2F:82:13:53:EE:52:B8:8F:CD
Authority key identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
Certificate issuer:       /CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Certificate serial:       019FAA1A089B75FAEAC2D03B8ACCE362B894
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
Manifest number:          0727
Signing time:             Tue 28 Jul 2026 19:01:00 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:00 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:00 +0000
Files and hashes:         1: Y5vED9_-DcGMaaxbEGOZus8MwVQ.roa (hash: G2iq16qjDO2AmE19u6Mdnenb3I/Kvxji/seB7NO5CFY=)
                          2: gKtjzQMB06yDauEd9zVELt-Geqk.roa (hash: ON0aCx2enNugObjEPugyFFI494d+5BTaKTrArKDjsJI=)
                          3: sLC5YO5xONWk4v-wyFAtQfaIubc.roa (hash: RnXdiuhlkryBeMlrPXhg5Tc0W7BvyjnuvWyXURl030k=)
                          4: yZE15YfLs4vh63tt6cSAKdBF0nM.crl (hash: aWIfMUa8HiX3/5b9wYlgnfwOn1CPGoZQ9RBP1SLsvOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:08:9b:75:fa:ea:c2:d0:3b:8a:cc:e3:62:b8:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c99135e587cbb38be1eb7b6de9c48029d045d273
        Validity
            Not Before: Jul 28 19:01:00 2026 GMT
            Not After : Jul 29 19:01:00 2026 GMT
        Subject: CN=964fe4486199378385174e2f821353ee52b88fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d6:f9:8d:3d:0c:aa:a2:fb:0d:5c:3d:46:2c:
                    2e:b4:86:8c:16:c1:e5:15:a3:d0:e2:18:7f:fa:b8:
                    ce:60:7b:bc:4e:59:46:69:3d:f0:f1:16:ab:04:25:
                    8b:28:a0:5a:53:3d:24:0d:7a:d7:ad:ba:d8:38:f7:
                    1b:a3:30:0f:1c:ad:51:fb:08:07:b3:26:3d:d7:52:
                    af:c3:ca:12:99:5c:aa:ab:bf:ce:17:63:5c:9a:9a:
                    0c:3e:0d:ab:a6:fa:fb:d5:29:f8:06:43:ee:4e:6f:
                    bb:83:a5:55:e1:47:d1:cd:0e:80:2d:56:aa:88:a4:
                    f8:89:d5:9d:ae:43:2c:7f:74:28:be:92:c6:88:82:
                    f7:bd:37:3b:9a:f5:bf:6e:28:15:e8:c5:4d:c0:d8:
                    d5:56:6b:f3:bb:a7:cf:b5:40:c4:73:08:44:eb:31:
                    ec:76:4c:52:97:08:cc:7b:33:ea:b8:11:4b:94:8d:
                    0f:22:ba:05:ee:c2:a7:a9:d1:11:d0:cd:2d:7f:d3:
                    a3:c3:6f:97:b1:64:0f:bd:ab:5f:cf:30:b0:36:29:
                    3f:23:5c:a5:ab:d9:33:25:23:ce:be:66:f3:59:45:
                    45:15:41:db:85:40:3e:ae:1d:79:62:dc:2a:05:52:
                    02:91:49:90:da:65:7e:28:36:9d:42:c3:d3:16:19:
                    2a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:4F:E4:48:61:99:37:83:85:17:4E:2F:82:13:53:EE:52:B8:8F:CD
            X509v3 Authority Key Identifier:
                keyid:C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:95:39:73:9f:e9:74:0a:3e:e4:d1:53:05:c1:8a:49:c8:a7:
         43:70:03:c9:24:ae:f9:95:7e:62:42:22:d2:51:f7:7b:61:79:
         87:8d:4e:78:d0:b7:11:eb:c7:25:0b:f7:68:c7:c1:42:57:11:
         c2:c7:f9:f9:a9:4a:82:7a:9b:5e:c6:c6:be:9d:ab:14:56:cb:
         41:c4:b4:37:71:ad:64:ec:dd:ea:9e:8b:81:fe:56:dd:31:b8:
         ae:ae:be:db:d9:50:00:f0:ab:86:20:74:4e:f3:77:d7:90:02:
         ba:88:66:b7:4e:b9:81:e7:e9:40:fe:d7:24:2b:bb:80:7a:3a:
         fe:5e:cd:53:10:94:38:c5:07:62:14:17:15:0b:5c:6c:f4:91:
         95:88:2f:d2:b6:e2:07:06:8c:78:ed:37:f1:b3:aa:74:8f:7a:
         24:1f:ab:7e:3f:3f:b1:9e:f6:6d:de:e2:e0:d1:19:2f:95:cc:
         65:50:ef:32:c6:f5:f8:8b:17:00:f3:38:9c:1c:d5:7a:c5:47:
         7e:29:74:88:f5:8c:0a:4c:40:e3:76:61:6d:ba:96:1f:ee:c3:
         fb:92:66:23:f6:01:ee:19:97:30:c6:8e:69:75:66:cd:f3:b1:
         fd:f8:a1:52:cd:66:c2:bd:8c:e9:3d:17:42:a6:c2:e0:be:5f:
         4e:f5:04:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:11:47 2026 by rpki-client