Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
File:                     yteUrGAc4lBbZfl1p9UWovAKWzE.mft (raw, json)
Hash identifier:          9ASQu/BSzA5djMr0JsnWBeG33BoGJD9800ydsz0ThAg=
Subject key identifier:   01:31:6C:C7:FB:54:C7:6E:F9:45:0E:5F:01:64:C6:C3:37:6A:BD:A2
Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Certificate issuer:       /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Certificate serial:       019FA9075FD77A7A927AB066E603E667CD33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
Manifest number:          19DE
Signing time:             Tue 28 Jul 2026 14:01:00 +0000
Manifest this update:     Tue 28 Jul 2026 14:01:00 +0000
Manifest next update:     Wed 29 Jul 2026 14:01:00 +0000
Files and hashes:         1: PZTHXJOe6Rub2_B35Qp_XWm1nCI.roa (hash: ECesKQ6eT4CAViBPjtKG3epmntO2VSEJzUCQqkLEU1U=)
                          2: aFAces1pfL2Gf7A82Ua9HdY5M_8.roa (hash: ihoy12eYWp6w4F3+SZfOyRsI/MGwgD7ZEiY1ooLQCpo=)
                          3: hHr7Y0UynB44y_uXn0Cj4kqW7mo.roa (hash: wecTOMqFEhRZq5XHYAG33+1Fx0NIuyBCiv4Opf1IkrY=)
                          4: uTIU2_KvYO-tKnwpco0cinKSFwY.roa (hash: uuFCbk/LILXi8ySr2DhHYpylPUgn3apdlnG7AhOMN8k=)
                          5: yoOlkunfyIDQIpu8hSJPuV67N8k.roa (hash: 3vGjw6ITVAmFgqvDm6vNVM3T1UQ++9p2OwqdlJ0wKCw=)
                          6: yteUrGAc4lBbZfl1p9UWovAKWzE.crl (hash: X6MivyRt0AReri3yrpKK1U21QbEJZW96xuQzTTcLGqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:5f:d7:7a:7a:92:7a:b0:66:e6:03:e6:67:cd:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
        Validity
            Not Before: Jul 28 14:01:00 2026 GMT
            Not After : Jul 29 14:01:00 2026 GMT
        Subject: CN=01316cc7fb54c76ef9450e5f0164c6c3376abda2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1a:53:c5:ca:86:19:d8:0b:4c:16:68:8b:41:
                    34:df:9a:d1:04:8a:c9:b0:20:2a:4b:f9:f8:e2:e0:
                    b1:10:f7:ae:64:d3:d4:99:51:51:c1:b3:47:15:b8:
                    3d:48:2d:2f:e6:42:16:a6:2c:09:64:02:f1:68:19:
                    87:b3:89:d8:4e:d9:fb:0d:9e:05:36:fe:49:33:d5:
                    26:ca:96:b7:9b:c0:15:fd:27:b3:a3:b4:93:75:dc:
                    40:13:55:71:21:8b:55:96:e5:dd:eb:12:86:b7:8d:
                    87:8b:cf:f2:81:be:5b:3c:64:c9:09:45:66:19:65:
                    4a:a9:4c:5c:33:a6:f5:24:b9:ac:03:55:cf:4e:e6:
                    04:b9:04:e2:cb:4a:ee:95:02:cf:7c:8c:2e:fb:ac:
                    d9:02:7e:f6:7c:c2:c8:59:f6:d3:04:cb:75:26:50:
                    83:01:d9:e3:7b:13:99:30:4c:5f:3e:f6:4f:0f:e2:
                    17:95:ba:dc:68:47:20:43:a5:28:3a:21:68:22:fd:
                    e3:2f:44:e3:55:8e:ed:43:1a:92:09:e9:2d:01:04:
                    c4:4d:2e:dc:34:a0:e3:1d:92:0f:8d:8b:69:6f:af:
                    d6:91:23:45:4d:13:f4:7a:4e:07:34:25:fa:0c:7d:
                    5b:18:c2:8d:7d:23:aa:5d:cf:8a:08:6c:4f:26:48:
                    57:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:31:6C:C7:FB:54:C7:6E:F9:45:0E:5F:01:64:C6:C3:37:6A:BD:A2
            X509v3 Authority Key Identifier:
                keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:45:55:26:f7:86:a3:72:fa:a8:98:b6:b1:a4:47:10:28:71:
         22:95:cc:60:af:33:bf:c3:86:a6:d1:f5:b1:ef:98:ce:3b:54:
         c6:2f:e2:6f:34:5c:b4:d0:00:b9:e9:67:10:c8:6c:1a:0f:3b:
         1b:8b:f8:42:a8:51:b0:2c:71:e0:71:80:84:fe:fd:c0:82:d0:
         a5:2e:82:28:fe:7c:ad:45:38:a7:0a:84:21:5c:54:bf:98:7f:
         3f:9d:1e:ef:50:84:77:47:cd:c8:67:c1:ca:0a:3a:ce:5c:d2:
         c7:8e:b1:bf:79:2b:63:51:26:2e:87:3f:d2:de:42:4f:7a:82:
         99:06:da:25:79:85:5f:de:c7:38:76:4e:ac:f9:30:c7:33:6f:
         2a:f6:87:c0:1d:aa:11:59:57:48:97:30:f4:c8:f0:3d:ce:ab:
         19:1c:15:f7:9b:d8:0a:d7:08:9a:87:73:56:74:79:2c:36:58:
         14:00:2b:58:5e:f4:75:e3:7a:b6:ce:9e:37:c0:30:7f:fd:0c:
         d1:90:de:cc:a0:5c:74:71:92:c0:6f:6b:81:de:91:32:6c:1a:
         0a:a4:bb:10:d1:f1:60:a2:3f:e2:39:32:9e:0b:e0:85:c2:a7:
         c6:b4:79:a2:20:fc:bd:67:c2:af:5a:ce:4d:23:e5:51:5c:7a:
         2d:eb:de:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:38:53 2026 by rpki-client