Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.mft
File:                     yPZn5ggTAzhfE_1MttPaTYyxtsE.mft (raw, json)
Hash identifier:          PrYpHdGwQybQbDGBmnuCwOhEITq1IRad+uMdJwyHHAk=
Subject key identifier:   93:39:8E:73:58:75:2F:BD:4E:16:B3:CF:7A:B1:37:5B:B1:3E:C7:0D
Authority key identifier: C8:F6:67:E6:08:13:03:38:5F:13:FD:4C:B6:D3:DA:4D:8C:B1:B6:C1
Certificate issuer:       /CN=c8f667e6081303385f13fd4cb6d3da4d8cb1b6c1
Certificate serial:       019FA9ABD2C71BEA99BEB8F28A928DBF1784
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yPZn5ggTAzhfE_1MttPaTYyxtsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.mft
Manifest number:          A3
Signing time:             Tue 28 Jul 2026 17:00:37 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:37 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:37 +0000
Files and hashes:         1: 2Z6IYH5r9rEHXyb6yaUAQh53_hk.roa (hash: iFsFHaHiOwiJNWh0rDjxLKPBB1FTnSIyeAFgavIf9wA=)
                          2: yPZn5ggTAzhfE_1MttPaTYyxtsE.crl (hash: LDd68FGosklU7UqxoRfxAcLPTanAuDnKNBIuuhV7SoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yPZn5ggTAzhfE_1MttPaTYyxtsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:d2:c7:1b:ea:99:be:b8:f2:8a:92:8d:bf:17:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8f667e6081303385f13fd4cb6d3da4d8cb1b6c1
        Validity
            Not Before: Jul 28 17:00:37 2026 GMT
            Not After : Jul 29 17:00:37 2026 GMT
        Subject: CN=93398e7358752fbd4e16b3cf7ab1375bb13ec70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:5f:a0:47:15:28:fb:26:ba:5e:f2:ea:68:
                    bb:3f:f8:1e:f5:d7:60:76:60:dd:f2:09:01:df:79:
                    32:2d:98:5d:83:65:b2:75:70:ba:7f:19:e9:43:68:
                    8b:7f:3e:89:a6:79:3e:bc:71:61:26:c7:b5:be:11:
                    9e:53:71:32:ad:c9:18:3f:93:c8:9e:94:0a:4f:6c:
                    55:fb:6b:13:02:10:66:8f:c6:29:fa:f3:08:7c:79:
                    cd:9b:37:38:ba:c7:4f:10:20:80:96:c5:26:5a:74:
                    8f:ae:23:b3:18:dc:17:e3:e0:b9:78:67:9a:35:6a:
                    21:2e:0c:a8:8d:2d:4a:32:09:d9:de:77:2a:34:bf:
                    f1:f0:d3:8f:71:f3:9d:29:da:d7:fb:f7:90:5f:08:
                    8a:cb:31:e0:dc:5f:a9:b1:c4:6e:20:c9:4c:45:1e:
                    97:99:83:7e:99:90:d5:6c:cf:4e:34:4c:02:82:96:
                    2f:10:f5:ac:85:2a:84:39:db:c2:3d:31:63:61:e6:
                    b6:d8:c5:42:7a:43:38:69:3c:ff:c7:b2:b9:19:34:
                    a1:ac:b4:b5:ed:ba:9f:fe:f4:0b:74:6a:5f:94:04:
                    70:1e:aa:f5:ed:5b:14:06:25:38:1a:42:20:aa:a3:
                    a6:82:e5:19:f8:5a:1d:d0:68:cf:9a:4c:98:1f:39:
                    f8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:39:8E:73:58:75:2F:BD:4E:16:B3:CF:7A:B1:37:5B:B1:3E:C7:0D
            X509v3 Authority Key Identifier:
                keyid:C8:F6:67:E6:08:13:03:38:5F:13:FD:4C:B6:D3:DA:4D:8C:B1:B6:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPZn5ggTAzhfE_1MttPaTYyxtsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:df:89:60:93:f8:51:d0:de:61:cd:db:6c:3a:cf:1b:8f:a9:
         4c:65:1a:ba:b8:56:26:cb:64:d3:62:69:64:2e:ca:6d:f9:4d:
         7d:72:79:45:a8:ca:d7:85:91:94:9d:91:fe:f0:2d:d8:dd:18:
         24:08:d9:d1:75:5b:22:f2:0f:9c:0c:67:82:ac:29:5c:3d:2b:
         6b:27:04:96:9d:c0:cf:e6:3e:16:aa:fc:e4:c1:20:05:be:25:
         15:bd:ac:0c:ef:96:a0:e4:82:5e:e2:a1:94:5d:a5:6a:b7:f3:
         1d:d6:74:dd:d3:02:7a:08:ae:23:73:42:ff:55:de:ff:71:4c:
         7b:14:e8:4a:bb:41:24:c8:37:35:8a:b6:d4:b4:37:97:eb:33:
         e6:dc:b9:1c:f8:9f:b3:52:d7:f9:aa:9b:62:98:28:a9:93:f2:
         91:d1:ed:88:4c:48:21:e5:8a:de:0c:54:d1:3a:06:35:6d:33:
         c9:16:3a:38:ac:3b:d8:d8:b5:64:c1:35:d5:f1:b3:a2:5f:64:
         05:12:9f:c3:9f:04:9b:93:c6:90:d2:17:be:a8:60:fd:ca:dc:
         6d:7d:65:62:69:c5:df:1b:62:9f:70:a4:22:d2:01:ab:24:f3:
         2b:94:35:b5:77:d4:ec:2d:71:be:b6:0c:22:b5:98:49:81:40:
         5e:89:1f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:44:11 2026 by rpki-client