Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.mft
File:                     lYs6eEkk73mV168fvRdniKbCt1Q.mft (raw, json)
Hash identifier:          HOAAY0R4rvtCdt4iydwa8CrSIbkvlq2wE5nSQwDsIas=
Subject key identifier:   FE:E8:ED:5F:13:55:98:8F:EF:AE:EE:24:97:26:89:D6:D6:4E:BB:F5
Authority key identifier: 95:8B:3A:78:49:24:EF:79:95:D7:AF:1F:BD:17:67:88:A6:C2:B7:54
Certificate issuer:       /CN=958b3a784924ef7995d7af1fbd176788a6c2b754
Certificate serial:       019FAA88867D830C41C1B47CA22A6E16AA08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.mft
Manifest number:          4D
Signing time:             Tue 28 Jul 2026 21:01:41 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:41 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:41 +0000
Files and hashes:         1: BPt6RAa7ENrJmkVCFGkolciZ5ow.roa (hash: Qu8fUjGy1xxsRwZtDqrZ7qwLZ/hB6gVPADzDVKSoBIk=)
                          2: CuVc4PF5d3AMtHwH59bi3KpoEcU.roa (hash: YY5JT2rh1l3bec5cvOqTSnBQtzBt2nClBilF97d7XCU=)
                          3: aRQ9uwskWeFhYTdPjO7Okig-UjE.roa (hash: BkfwV9uzeeugOlyi0Sysa2EHfE+nO+JpIDCMPMrtqUc=)
                          4: lYs6eEkk73mV168fvRdniKbCt1Q.crl (hash: xYSNDmQfVNlVSpoFLTb1RJafL+0Tix6y8s5ZP1G+okk=)
                          5: liKRFliJG9HmzqpkhjZr0nxWozg.roa (hash: /xPWEbs1m0lm+Et8vhC1fCxdl4sfLjj/5sEcemF1W1k=)
                          6: ytZvKlFnz1qSthhK5jm3iOrymuU.roa (hash: SEmRdwSemsDohtKTnRpE/p/H3uUMSjqwrsy6C4xgDao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:86:7d:83:0c:41:c1:b4:7c:a2:2a:6e:16:aa:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958b3a784924ef7995d7af1fbd176788a6c2b754
        Validity
            Not Before: Jul 28 21:01:41 2026 GMT
            Not After : Jul 29 21:01:41 2026 GMT
        Subject: CN=fee8ed5f1355988fefaeee24972689d6d64ebbf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a4:5c:e7:76:aa:d2:31:9f:b3:64:ca:c9:fb:
                    14:85:fb:29:ec:58:fb:72:55:d5:bf:64:dd:94:60:
                    8a:20:ab:ec:20:df:f9:dc:e7:8c:2c:c8:4c:80:c9:
                    f3:5e:c9:b1:a2:a7:8a:75:36:78:93:ab:bb:e2:40:
                    63:a3:92:bc:e8:93:98:b0:7a:d2:65:8b:70:3a:5d:
                    28:02:bf:1c:10:99:bd:0a:1a:2f:02:0d:bb:93:ad:
                    90:3c:5d:86:a0:5e:a8:24:38:9c:f8:14:1c:39:c0:
                    0e:8d:57:32:ee:1f:6f:93:d5:88:de:96:16:5a:fc:
                    4f:57:a8:13:e2:09:9c:a2:0a:14:0c:35:fd:a8:5f:
                    88:7a:1b:4e:2d:21:e9:51:8e:01:2c:4d:9d:f4:2e:
                    f8:dc:22:b2:01:de:42:8e:8b:c3:75:fe:6b:95:92:
                    9c:ac:c0:42:00:9b:e4:24:fd:32:ae:0a:ba:ec:f0:
                    e5:f5:29:b7:ec:00:9e:e7:fc:56:c5:49:e7:34:0c:
                    e3:e5:ad:aa:3f:68:6b:fa:d9:96:a4:69:1d:8e:6b:
                    ab:2d:67:49:8a:27:98:e1:84:36:77:b5:16:5f:c2:
                    a6:02:c0:fc:af:ef:d7:9c:28:ba:15:da:41:9e:f6:
                    5d:d8:31:d6:ab:94:1b:ba:65:58:82:08:7f:a2:0f:
                    57:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E8:ED:5F:13:55:98:8F:EF:AE:EE:24:97:26:89:D6:D6:4E:BB:F5
            X509v3 Authority Key Identifier:
                keyid:95:8B:3A:78:49:24:EF:79:95:D7:AF:1F:BD:17:67:88:A6:C2:B7:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:2e:b9:0c:2e:a2:2d:7c:d5:a2:f9:9d:20:34:c3:e5:4a:88:
         b9:5f:f1:d9:e9:64:eb:1d:c2:f9:c3:c4:d4:e5:bb:36:91:f6:
         cc:78:f5:e2:5e:85:94:8b:e4:94:91:4c:45:6d:da:d5:dc:d1:
         3f:50:04:2a:82:9a:1f:31:6a:68:84:dc:64:38:c5:0e:9b:d3:
         9c:04:fc:eb:5a:0d:ca:4d:73:3b:20:21:d6:67:b4:67:d3:6e:
         21:c4:a5:22:69:07:a1:76:c2:cd:fd:1d:e0:8f:38:a3:bd:66:
         10:35:92:ab:32:34:b2:85:6d:e5:45:18:57:dd:08:35:2f:ef:
         ec:79:a2:fe:d1:e1:53:03:d0:8a:3e:0b:9e:e7:82:05:33:25:
         fd:6a:3b:3d:2a:53:1c:9a:9a:56:46:c5:f1:f0:ea:1f:cb:24:
         07:22:c1:74:04:78:5c:bd:29:6f:4f:19:ba:93:eb:5d:02:75:
         fb:19:ca:e6:f1:67:6d:6d:1a:28:24:27:96:57:88:2c:56:2c:
         4a:57:47:1c:6b:8b:b2:2b:fe:0e:9b:9d:22:96:2f:f5:ac:ea:
         54:d9:df:ae:e0:e5:d3:ad:21:20:17:c2:d6:fa:9b:e0:65:07:
         d3:1b:79:bc:75:d0:fa:fb:96:4d:83:1a:da:e0:12:e4:e9:9c:
         a7:e3:c7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:20:24 2026 by rpki-client