Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
File:                     rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft (raw, json)
Hash identifier:          /dhqNBlwV9jQaB3imlMtdCudvBa6MyjY2L+2ONa1aak=
Subject key identifier:   3F:21:D3:7F:31:7C:DA:B2:E5:09:8C:AE:F4:15:7D:8F:13:AF:65:F1
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Certificate issuer:       /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial:       019FAA50B7F26811B39B2470B2DA1250B009
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
Manifest number:          19DC
Signing time:             Tue 28 Jul 2026 20:00:44 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:44 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:44 +0000
Files and hashes:         1: 1DSUQ0jxs6dG0EoFqfG91mFQyMw.roa (hash: iINHWWjQ7Nsnh6T5r2HUf93qqcUOuSqMNkps61w8OX0=)
                          2: BdsuDRm80ULk9aLfJ7zh20INiU8.roa (hash: 0BqcT0T81e3M/0LPrL5e9ii3yguHiKnmLWj00gesJkU=)
                          3: KLak6E7XOaljYL7i0cSZlIlCEqg.roa (hash: mJGksFMnjfzfVrg/g8a4mJkgqFzUtmtGPX7OdhiTIDg=)
                          4: VSskXdqgKe7CaDWuoatQnI_9KiE.roa (hash: ZdbXSqyDrBgEKdzaBPZgWnFmAfBPFOOQn34nK2NZEnk=)
                          5: rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl (hash: IjCM2dB3PUONqAmjpbaUWMiJfhqoO6EJfvJDSyHTFCo=)
                          6: vPgoZptW0KavIK_Hg1kzkfOF1WE.roa (hash: j7J2y1HSuKj72l6kVGUrAtD78gxcoUd5XdyBbZEybuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:b7:f2:68:11:b3:9b:24:70:b2:da:12:50:b0:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
        Validity
            Not Before: Jul 28 20:00:44 2026 GMT
            Not After : Jul 29 20:00:44 2026 GMT
        Subject: CN=3f21d37f317cdab2e5098caef4157d8f13af65f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ea:c3:65:63:07:03:33:94:c4:e6:c2:3d:71:
                    37:73:90:81:54:69:34:5a:ec:8a:a1:0e:bd:91:76:
                    a4:cd:03:a0:60:33:d3:9b:82:c0:9c:b8:a9:a0:2f:
                    6c:f2:2a:87:c8:d5:ce:67:bc:01:7a:78:e3:88:04:
                    94:6e:cd:76:06:65:6b:66:98:ab:8a:5a:39:49:a7:
                    33:64:30:29:cc:20:1f:b1:af:18:d6:86:03:9f:6e:
                    3b:f3:e7:c0:9b:05:30:90:b4:d0:53:23:7b:ad:74:
                    20:25:77:25:e5:f9:46:96:a8:5b:eb:2e:ff:80:b0:
                    bd:26:c9:87:ea:6e:5d:32:1e:1c:55:28:df:3a:16:
                    2c:c3:4a:d2:db:d9:e2:e8:f6:ec:9e:b1:b2:ad:68:
                    2e:2b:29:58:b2:7a:4d:8b:93:69:3f:bd:5f:34:2f:
                    e9:3f:ec:bc:bf:f3:fb:b5:a8:82:99:67:42:fb:c4:
                    1f:65:4b:f2:34:d7:05:8b:33:f2:4f:09:cf:db:a6:
                    2a:6b:95:2b:09:84:34:35:ae:2c:cb:b7:cb:6f:0f:
                    98:4a:e3:59:7e:02:fa:77:4c:1e:de:48:00:dc:78:
                    22:93:41:d5:b7:1d:af:38:6d:8f:02:2a:62:40:6d:
                    6c:f2:a3:5c:64:b6:d9:1c:66:d0:72:08:f4:79:19:
                    09:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:21:D3:7F:31:7C:DA:B2:E5:09:8C:AE:F4:15:7D:8F:13:AF:65:F1
            X509v3 Authority Key Identifier:
                keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:f3:9d:ee:76:de:ad:6b:69:10:b2:16:6e:e6:3d:54:17:7f:
         24:09:c3:0b:54:68:75:f1:90:9a:dd:ee:1c:0d:fb:97:7c:c1:
         47:8a:54:a2:85:81:1e:6f:d8:72:a7:ab:25:7e:b1:95:9b:9d:
         f4:5d:10:41:e4:bd:ee:a4:2e:a9:ed:d4:2c:b5:a2:6d:8b:a3:
         f6:e8:87:db:26:ba:cc:4f:80:43:76:85:87:3c:de:d2:eb:1a:
         7d:3c:9c:cb:ed:ca:9f:0e:a6:29:56:42:c8:60:e3:26:bd:67:
         75:f9:57:80:41:51:ea:51:3a:17:3c:d3:69:dc:05:8f:28:a0:
         b1:cf:83:35:2a:fe:cd:95:6f:a3:fd:20:5d:e7:b4:07:5e:fd:
         6b:a7:8d:f6:9d:d5:b9:6e:97:d9:26:3b:38:41:67:0d:cc:98:
         3f:53:7c:f4:19:94:f8:c3:38:44:7d:eb:af:20:f8:76:17:1b:
         81:6f:c7:27:c9:90:46:09:4a:c5:4c:52:24:71:a5:ef:a6:27:
         80:a1:59:b8:1e:4f:66:a6:1d:82:d7:3c:f5:4f:16:7e:4b:0b:
         ba:b8:b3:84:7a:f9:95:1b:c3:73:3b:17:e9:f2:4d:06:34:81:
         25:3b:e0:37:e7:52:9f:1e:4f:c6:0b:2c:f4:f1:94:46:1c:45:
         2e:b1:68:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:26 2026 by rpki-client