Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
File:                     ymFHjk1lm-zoIDxei6jo-C8EcNc.mft (raw, json)
Hash identifier:          uosABlcqwARSQr4uZmsGWNEvwsHG92T4xzzV9fi/00I=
Subject key identifier:   E2:CD:CA:FA:A7:76:44:4B:E1:B1:33:E3:59:EC:7F:67:78:E4:E8:73
Authority key identifier: CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7
Certificate issuer:       /CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7
Certificate serial:       019FAB63B7436B03249D4DE36932A924CF02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
Manifest number:          0401
Signing time:             Wed 29 Jul 2026 01:01:06 +0000
Manifest this update:     Wed 29 Jul 2026 01:01:06 +0000
Manifest next update:     Thu 30 Jul 2026 01:01:06 +0000
Files and hashes:         1: OT57yXSbDNvvHun6s7sHVisvfQk.roa (hash: 3pa538tOYg66gGxDb3UhtAM2x4zp7Zx6CRCpsE/DupM=)
                          2: ymFHjk1lm-zoIDxei6jo-C8EcNc.crl (hash: Z1DGoW/5+LlNhQqk6+OowFag2qlv25zXb8/vVCOe2ZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:b7:43:6b:03:24:9d:4d:e3:69:32:a9:24:cf:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7
        Validity
            Not Before: Jul 29 01:01:06 2026 GMT
            Not After : Jul 30 01:01:06 2026 GMT
        Subject: CN=e2cdcafaa776444be1b133e359ec7f6778e4e873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8f:43:23:c6:d3:b8:70:74:8b:c9:60:3a:2e:
                    ba:a6:dd:85:75:1b:bb:7e:2b:4c:dd:4a:3a:27:1d:
                    3f:3b:49:ea:ab:e9:1d:3b:df:72:8d:4f:50:e1:e3:
                    82:af:db:d8:b7:08:bc:f9:ae:a7:fc:a2:37:02:97:
                    d7:1e:08:14:e0:e5:57:d2:99:6d:68:c3:1a:11:01:
                    5f:46:54:5c:4a:58:2c:d3:6d:03:2c:1a:96:3b:a4:
                    6e:a3:0f:02:6f:de:7e:3d:89:92:6f:24:0a:f7:4d:
                    cf:cb:3d:c7:28:53:c9:2e:59:7b:e8:ca:79:42:17:
                    be:93:37:28:88:ee:45:a7:bf:db:c9:66:ed:ba:2c:
                    28:b9:92:e0:af:dc:34:14:77:69:c6:d3:1c:d4:63:
                    28:7e:f4:4b:50:31:2e:96:b4:23:56:c7:7e:be:4b:
                    c2:f6:3d:5f:f5:ee:1e:29:38:91:af:92:be:74:52:
                    6f:9a:cd:47:a3:e8:a7:0d:41:58:02:99:d8:d7:f1:
                    e5:31:f7:46:03:13:ca:07:90:3e:be:8d:d8:9c:2e:
                    3e:c4:49:d1:f3:00:49:f3:a1:bc:0c:5e:3c:6a:54:
                    98:ca:bf:c9:39:03:1d:51:c5:ce:2c:26:fd:ae:3d:
                    76:0b:9a:ec:9d:6d:e0:91:f9:95:55:24:04:97:ce:
                    d8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CD:CA:FA:A7:76:44:4B:E1:B1:33:E3:59:EC:7F:67:78:E4:E8:73
            X509v3 Authority Key Identifier:
                keyid:CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d2:43:06:46:6e:bf:de:8a:32:d8:0e:51:ad:cb:3b:87:09:
         62:64:98:32:d6:d1:74:6f:d2:2b:28:11:67:29:22:19:b6:62:
         f0:b1:44:52:bd:31:7a:4d:b1:ff:f1:1b:42:c6:7f:b1:67:91:
         76:10:62:fb:89:16:79:91:35:e9:b3:dd:52:f7:e3:97:35:f5:
         24:ac:a4:ce:f5:e3:25:0c:db:be:b3:61:90:e2:ac:36:08:a2:
         c2:8f:43:a1:0a:2f:b9:7f:c4:aa:ba:15:17:65:06:a0:cc:1b:
         76:61:b3:14:86:14:1b:26:14:7c:6c:e1:ae:2a:b4:86:ea:8a:
         b2:f5:e7:5f:e8:37:92:80:74:90:7a:d0:46:d2:0d:af:a4:00:
         ca:63:ed:88:81:aa:96:44:64:e4:96:59:bd:c0:c2:87:72:e7:
         a0:c9:51:15:ef:a8:4a:9b:ac:cc:4e:d6:8d:40:9e:41:57:fc:
         5d:e8:ae:34:66:d6:7f:a3:e2:ea:34:b8:c4:58:2f:ab:4f:ca:
         22:a6:1c:8f:c8:e7:57:98:67:9a:b3:b0:35:78:d3:de:66:2c:
         d4:42:d4:55:a7:56:af:90:6e:60:c9:12:c3:82:f1:22:94:bb:
         32:e9:73:80:f3:b9:c1:3b:8e:82:d5:f0:25:16:a8:36:0e:b3:
         1a:b1:ba:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rY7dDawMknU3jaTKpJM8CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNjE0NzhlNGQ2NTliZWNlODIwM2M1ZThiYThlOGY4MmYw
NDcwZDcwHhcNMjYwNzI5MDEwMTA2WhcNMjYwNzMwMDEwMTA2WjAzMTEwLwYDVQQD
EyhlMmNkY2FmYWE3NzY0NDRiZTFiMTMzZTM1OWVjN2Y2Nzc4ZTRlODczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmo9DI8bTuHB0i8lgOi66pt2FdRu7
fitM3Uo6Jx0/O0nqq+kdO99yjU9Q4eOCr9vYtwi8+a6n/KI3ApfXHggU4OVX0plt
aMMaEQFfRlRcSlgs020DLBqWO6Ruow8Cb95+PYmSbyQK903Pyz3HKFPJLll76Mp5
Qhe+kzcoiO5Fp7/byWbtuiwouZLgr9w0FHdpxtMc1GMofvRLUDEulrQjVsd+vkvC
9j1f9e4eKTiRr5K+dFJvms1Ho+inDUFYApnY1/HlMfdGAxPKB5A+vo3YnC4+xEnR
8wBJ86G8DF48alSYyr/JOQMdUcXOLCb9rj12C5rsnW3gkfmVVSQEl87YLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLNyvqndkRL4bEz41nsf2d45OhzMB8GA1UdIwQY
MBaAFMphR45NZZvs6CA8Xouo6PgvBHDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW1GSGprMWxtLXpvSUR4ZWk2am8tQzhFY05jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNzliNjYtMzhmMS00MWE1LTkwZTIt
OTQ2ZGE1ZjVlZmJiLzEveW1GSGprMWxtLXpvSUR4ZWk2am8tQzhFY05jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yNzliNjYtMzhmMS00MWE1LTkwZTItOTQ2ZGE1ZjVlZmJi
LzEveW1GSGprMWxtLXpvSUR4ZWk2am8tQzhFY05jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjNJDBkZu
v96KMtgOUa3LO4cJYmSYMtbRdG/SKygRZykiGbZi8LFEUr0xek2x//EbQsZ/sWeR
dhBi+4kWeZE16bPdUvfjlzX1JKykzvXjJQzbvrNhkOKsNgiiwo9DoQovuX/EqroV
F2UGoMwbdmGzFIYUGyYUfGzhriq0huqKsvXnX+g3koB0kHrQRtINr6QAymPtiIGq
lkRk5JZZvcDCh3LnoMlRFe+oSpuszE7WjUCeQVf8XeiuNGbWf6Pi6jS4xFgvq0/K
IqYcj8jnV5hnmrOwNXjT3mYs1ELUVadWr5BuYMkSw4LxIpS7MulzgPO5wTuOgtXw
JRaoNg6zGrG6EA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:02:39 2026 by rpki-client