Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.mft
File:                     7YYRkV4WUa8X578ffKuQ1V3B3Yg.mft (raw, json)
Hash identifier:          bUK545NwNWx3f5sEiGBW+CF/eECp66xSmiXNZm6KADw=
Subject key identifier:   F7:D6:AB:57:CE:20:B8:A2:AA:84:DE:6D:20:3F:E5:54:6B:8C:02:31
Authority key identifier: ED:86:11:91:5E:16:51:AF:17:E7:BF:1F:7C:AB:90:D5:5D:C1:DD:88
Certificate issuer:       /CN=ed8611915e1651af17e7bf1f7cab90d55dc1dd88
Certificate serial:       019FAA8784BC01F4F26E4A57BA1B6C09C97B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YYRkV4WUa8X578ffKuQ1V3B3Yg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.mft
Manifest number:          4D
Signing time:             Tue 28 Jul 2026 21:00:35 +0000
Manifest this update:     Tue 28 Jul 2026 21:00:35 +0000
Manifest next update:     Wed 29 Jul 2026 21:00:35 +0000
Files and hashes:         1: 7YYRkV4WUa8X578ffKuQ1V3B3Yg.crl (hash: +FP134rz6jfhVnjGv32IqNF/gh61BdcZzFpR1bhO1x4=)
                          2: Df_oTOu_EP4d50D-2XA0QPqfKjk.roa (hash: +VGVc2qalWbQy0rJrmFcx94atdweW3ZFDDwOq9nPIVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YYRkV4WUa8X578ffKuQ1V3B3Yg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:87:84:bc:01:f4:f2:6e:4a:57:ba:1b:6c:09:c9:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8611915e1651af17e7bf1f7cab90d55dc1dd88
        Validity
            Not Before: Jul 28 21:00:35 2026 GMT
            Not After : Jul 29 21:00:35 2026 GMT
        Subject: CN=f7d6ab57ce20b8a2aa84de6d203fe5546b8c0231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1e:e4:ea:f6:3c:ca:87:d7:82:af:c8:df:57:
                    3a:c8:ee:93:01:8e:04:60:b5:01:e1:28:7c:d4:0d:
                    f1:d1:4c:d0:a0:ef:14:93:41:40:16:d4:83:ed:5d:
                    6e:3b:0e:a5:66:6d:d7:b5:e7:54:b0:fa:ac:40:6d:
                    ec:c9:69:7d:07:35:e6:73:48:2e:05:62:68:2e:03:
                    b2:be:1b:cb:c9:57:83:03:4a:77:9f:d0:9e:9a:20:
                    bd:b2:7f:1e:e9:78:7e:77:eb:f4:ed:18:3e:b7:2a:
                    57:f9:d4:6c:73:56:9d:57:c5:42:28:ab:9c:4a:0e:
                    b7:51:b0:87:57:42:c9:60:1c:63:59:69:81:fc:0c:
                    e0:39:1d:5c:6c:64:b7:4f:37:47:ce:bc:fe:65:6a:
                    55:d9:d8:fb:ee:b9:28:5f:39:eb:d8:3d:a4:0f:fe:
                    b4:00:19:21:b8:74:b5:e0:96:e9:48:bf:af:e6:95:
                    cc:20:97:03:61:77:8d:6c:97:7a:79:b9:32:d7:95:
                    0e:f9:00:34:ee:df:3f:bf:53:27:9f:a6:71:97:7e:
                    fd:bb:04:5f:57:c2:87:3d:db:04:30:dc:8f:75:82:
                    0a:fa:53:9d:81:5d:85:a5:ce:5e:ba:f1:d4:4b:80:
                    b3:a6:1b:50:f4:27:fc:2a:58:8b:47:a6:3b:db:55:
                    5e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D6:AB:57:CE:20:B8:A2:AA:84:DE:6D:20:3F:E5:54:6B:8C:02:31
            X509v3 Authority Key Identifier:
                keyid:ED:86:11:91:5E:16:51:AF:17:E7:BF:1F:7C:AB:90:D5:5D:C1:DD:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YYRkV4WUa8X578ffKuQ1V3B3Yg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:40:1b:97:be:c1:3e:6e:95:97:b4:9a:99:b8:0e:56:de:1c:
         a9:7c:68:7c:f7:1d:7e:88:8d:6d:66:a4:7b:39:38:7b:b3:b1:
         cf:61:32:99:73:7e:a7:62:94:85:70:e7:66:08:79:64:1a:b3:
         3e:f6:a0:c8:ff:1d:c0:ec:37:6d:96:c8:c2:99:b3:17:35:df:
         79:f4:5a:c3:8c:01:b9:9e:ac:4a:de:f7:1a:9e:53:6d:52:be:
         c2:7c:04:32:73:b3:5b:4e:bc:1b:dc:78:5e:48:6d:73:44:1a:
         ea:71:b6:bb:5d:ca:a4:97:05:c4:04:4c:f6:3b:e2:1d:bc:64:
         90:4c:8c:b7:94:69:2b:d7:f9:ef:e8:0a:36:33:bf:c9:84:59:
         a8:8a:38:ee:c1:5d:04:ac:78:0d:8d:18:d0:4b:c9:af:e4:42:
         12:b9:ac:65:cd:47:f9:95:4c:fc:ce:67:39:ab:1f:ae:56:ad:
         11:7f:6d:9c:03:9e:5f:9e:13:27:fc:44:1d:d8:8d:7c:88:d7:
         94:31:6c:8b:1c:20:a4:c8:69:b7:43:da:32:d8:87:8e:81:bb:
         07:a2:0b:2d:96:5b:38:6e:b1:bb:66:1d:ba:a6:96:71:ac:8b:
         6c:10:f9:f6:d1:fc:6c:b4:c7:9a:46:9f:3d:04:95:7f:d3:c1:
         c9:a9:4a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:57:11 2026 by rpki-client