Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
File:                     yJwsxInr5I9JBYSshm_jYsQRfnU.mft (raw, json)
Hash identifier:          W+qB9DcwhN7GhulhEFN+UtDHaHmeNauMHZyiag3fsl4=
Subject key identifier:   F8:F1:BB:5A:DE:0E:DA:04:F7:D8:60:69:21:8E:C1:A3:C7:4D:DD:50
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Certificate issuer:       /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial:       019FA906F8942F64153DA4EEA5516251DB28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
Manifest number:          16EF
Signing time:             Tue 28 Jul 2026 14:00:33 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:33 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:33 +0000
Files and hashes:         1: F71lf1rO3_j_YrGDLp8vXCnWwNQ.roa (hash: 2T6cEG+G6vR7CgItj3CD3tb1JHo1M1LaioFUbAKMaFQ=)
                          2: KbGZziqCA41JgOpe8AUOSiv8rIM.roa (hash: MBAhT/6sVckMLfrlu1S3S4sTHwbcNuOAQSyBUhp+xNk=)
                          3: Lr_Xbb1THDKqD6RwPgUdUA9h3EY.roa (hash: cfMlImvmxi+0oJBR3nteg7NdpbusKTlCxQY6ByRViVA=)
                          4: Wgv3nP3KPCzK8Vc3Ujwc5tCZFEY.roa (hash: sZiUtGsuan8lIISLSvNoUUBLxQveJeIACDPYwQFWZys=)
                          5: ZkNagawyRZ70RDIXLqeICJ_NWvA.roa (hash: 1+wxgjSOWcm3+O0IK2qUtncsQ8Yyn6qzh3/LjTc9BqU=)
                          6: ba1PPFUfJQPbN0qUaPYUh_lra00.roa (hash: io880q/jxrQW2nbvQeP7+TanhHJv6EExV9pj2tnHEls=)
                          7: fotaW3reFeI2SLYUxkvM2Rp9oWU.roa (hash: 6ry4szc/4WpgdCqU6mLC/W0kQtFV5fQ4EQEyOj83ctw=)
                          8: yJwsxInr5I9JBYSshm_jYsQRfnU.crl (hash: KvXvlw0W8BJnHNEsINjFcFyvsklV9BfvNGswmJBPcP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:06:f8:94:2f:64:15:3d:a4:ee:a5:51:62:51:db:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
        Validity
            Not Before: Jul 28 14:00:33 2026 GMT
            Not After : Jul 29 14:00:33 2026 GMT
        Subject: CN=f8f1bb5ade0eda04f7d86069218ec1a3c74ddd50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ac:be:2e:ff:2f:a7:a7:42:d3:af:06:8c:bd:
                    9e:9b:b5:80:57:78:a8:39:c0:e0:39:a2:b8:07:ff:
                    53:b8:95:62:40:b7:3b:c0:44:d8:4b:0b:d3:d9:39:
                    45:b9:81:a2:0c:21:3a:a6:e0:eb:f8:3f:98:3e:cc:
                    6f:6f:3c:15:76:32:d1:5f:cf:57:11:29:e9:e9:f9:
                    18:d6:57:06:97:97:5e:4a:c0:14:d5:3a:06:9a:95:
                    dc:e2:c4:74:94:86:ef:c2:8d:5e:65:0e:a4:49:fb:
                    88:85:0e:9b:a8:b6:7c:58:72:cd:94:41:62:e6:81:
                    c9:e0:2d:e9:e4:b9:29:db:85:a1:21:9b:67:75:24:
                    a0:56:34:78:49:ab:7b:e4:3e:12:c3:db:bf:3d:ab:
                    17:bd:a7:12:42:dc:ca:c1:21:36:3a:b7:79:d2:fe:
                    22:bd:30:18:df:f4:ff:46:6f:64:83:44:26:5e:93:
                    92:e8:fd:2a:31:da:e1:cc:9e:ae:43:ca:ad:92:05:
                    8e:27:55:f5:ff:50:44:de:b4:65:8d:7d:f0:18:1d:
                    fe:93:dc:4c:fa:eb:e7:b6:df:e4:a7:91:f3:3c:b3:
                    86:e9:99:ad:9d:a1:40:dc:d5:93:1c:89:10:e9:32:
                    59:59:6b:fa:6d:9d:89:1d:f1:17:02:93:33:79:d7:
                    ee:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F1:BB:5A:DE:0E:DA:04:F7:D8:60:69:21:8E:C1:A3:C7:4D:DD:50
            X509v3 Authority Key Identifier:
                keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:4d:98:a9:ad:bf:97:a7:e3:e9:a6:c1:97:9f:f1:3c:49:17:
         b7:c0:24:89:dc:1d:c9:44:ae:d6:f4:d5:49:20:1c:b8:19:97:
         52:5b:df:1a:91:c0:8d:73:f4:24:71:1a:fd:62:22:4a:43:2b:
         a8:81:81:20:48:a8:b4:f5:d1:23:66:be:e9:07:89:d8:5d:2a:
         35:c0:ce:30:c1:ad:71:dd:9a:de:2b:9c:96:1c:fa:b8:72:57:
         18:87:aa:3a:5e:6a:bb:ae:ad:aa:38:02:c7:d1:db:83:88:fc:
         25:65:ba:db:62:a4:0e:ab:2b:93:4f:91:dc:70:41:58:a5:ff:
         50:d6:02:25:2e:f0:08:f0:45:7d:c1:32:cc:99:bc:3e:2f:90:
         15:2b:3f:94:98:9b:53:8f:21:25:93:38:d1:28:9b:14:b7:2b:
         9b:70:70:27:45:78:70:7a:96:f3:17:65:9a:7f:26:3c:a8:29:
         5f:6e:e5:42:24:b4:b9:5c:ff:f9:b6:e4:d0:9f:b0:42:db:87:
         88:6b:6e:78:a5:92:c1:87:e4:e9:4d:fe:8f:77:bb:81:fe:29:
         c3:2c:24:94:79:08:7a:26:10:6d:1f:f1:ce:36:dc:93:cc:86:
         b8:e6:05:77:cb:d1:da:b9:41:1d:23:66:93:a0:17:9b:a1:8b:
         a3:15:d0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:49 2026 by rpki-client