Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
File:                     YlDmLARIEp9jWJGKccM0TiWoLZs.mft (raw, json)
Hash identifier:          gR/ohp+EjUMBQoEkRfKwAKmUY9BhBBp7mbRoIMjopJY=
Subject key identifier:   A3:1D:B3:4C:0C:73:56:CC:A9:19:81:38:94:A9:19:41:22:A4:B8:14
Authority key identifier: 62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B
Certificate issuer:       /CN=6250e62c0448129f6358918a71c3344e25a82d9b
Certificate serial:       019FAB635EEFF6DEE0946069F701F308950A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
Manifest number:          0381
Signing time:             Wed 29 Jul 2026 01:00:44 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:44 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:44 +0000
Files and hashes:         1: DRO3tCTePWIvKHPgw6pmaXwU0JU.roa (hash: nsXU89cmKGMuchI2BpERlyONOF3QYxV+4FYWi2CIuFY=)
                          2: YlDmLARIEp9jWJGKccM0TiWoLZs.crl (hash: XjfQXGtLIf5ZiWLjtKjjEL51Rf+LVJC6CflEUCvIwPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 01:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:5e:ef:f6:de:e0:94:60:69:f7:01:f3:08:95:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6250e62c0448129f6358918a71c3344e25a82d9b
        Validity
            Not Before: Jul 29 01:00:44 2026 GMT
            Not After : Jul 30 01:00:44 2026 GMT
        Subject: CN=a31db34c0c7356cca919813894a9194122a4b814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:06:f1:90:31:06:b5:86:bf:f5:a2:4d:49:3a:
                    51:2b:d1:84:d9:1b:67:80:db:1b:1e:69:6e:01:14:
                    1f:2e:70:46:74:6f:e8:d4:ac:6d:02:75:f0:ea:09:
                    b6:ae:f3:2e:51:88:ba:0b:09:70:f8:a5:9e:f9:00:
                    6c:f8:b1:a4:fb:51:f8:df:06:da:cc:39:7b:15:82:
                    d8:65:59:e7:7b:02:62:71:a8:54:d8:94:90:eb:f6:
                    95:4f:e1:21:67:82:c6:21:36:3a:e5:96:ef:3a:d9:
                    65:c0:25:06:25:f2:5d:59:c0:e2:f4:cc:1f:28:87:
                    c1:a0:d8:37:ce:61:cf:67:6d:42:b5:26:54:db:d8:
                    ba:c0:dd:0d:67:9b:55:93:a4:58:33:90:ea:68:d4:
                    b2:48:19:a6:4d:22:36:19:27:9b:80:51:72:f5:26:
                    46:81:0b:9e:cb:b2:72:df:32:66:41:3f:bd:04:5e:
                    17:1b:07:8f:c6:f1:56:f1:76:22:71:fb:c9:7e:56:
                    a3:8b:ff:22:f5:e5:d4:c3:d8:06:8b:82:04:32:30:
                    57:06:7a:88:23:a2:48:e5:7d:95:db:8c:a8:81:07:
                    93:4e:b4:6c:17:cc:42:9f:d8:8f:a3:12:76:75:32:
                    72:01:35:2d:5b:f0:8e:a2:81:4c:4f:83:73:4c:71:
                    47:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1D:B3:4C:0C:73:56:CC:A9:19:81:38:94:A9:19:41:22:A4:B8:14
            X509v3 Authority Key Identifier:
                keyid:62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:90:aa:02:68:f9:2c:79:2c:b9:67:a4:61:cb:b4:2f:9e:5b:
         78:cb:4b:21:38:28:1e:c5:e8:2e:38:8c:93:6e:29:6a:14:23:
         ef:8c:d2:bd:2f:ef:55:de:95:0b:9e:1e:ab:03:27:2f:4d:3d:
         86:df:12:83:70:78:84:fb:e1:fb:bc:b3:56:40:2b:13:5d:6f:
         a8:1c:50:3b:55:8e:8a:56:f9:79:25:b6:9f:21:7f:cd:67:f5:
         15:7d:22:79:63:d3:47:c8:32:b1:5e:37:ad:02:46:8b:d4:20:
         6d:fb:95:4b:d0:9f:7a:bd:f0:ab:45:2b:9b:80:05:89:c6:dd:
         49:5b:24:c0:2f:96:6c:3d:9c:21:f6:bd:42:49:27:c6:63:1a:
         b1:a4:c2:41:44:7e:68:70:59:57:70:d8:54:7a:2e:47:75:04:
         13:d4:78:37:45:d4:2b:5c:22:f5:60:22:bc:78:d3:08:f0:0c:
         56:65:a0:84:58:48:cb:6f:c2:ee:34:76:cb:7f:7e:c3:26:46:
         43:67:fb:fb:79:30:f5:d8:a3:4f:8e:f6:01:8f:e5:a2:0a:ac:
         2d:6c:9d:dd:cf:e2:5d:c2:81:9b:3d:7e:1e:b4:43:96:ad:7d:
         ea:a2:02:09:f3:f7:5f:37:62:73:46:0c:a7:06:1c:63:31:32:
         c0:30:ac:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:01:17 2026 by rpki-client