Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
File:                     ybssFI7w7gD_WiIa8bxhx-GKpLw.mft (raw, json)
Hash identifier:          kvrBtmMKmmus6g/+CRAjrBAfoX9iLLqOW/+A/cIioEg=
Subject key identifier:   FF:1A:1A:A3:EB:63:C0:F3:FD:FD:DB:3F:74:71:28:53:EC:DF:78:32
Authority key identifier: C9:BB:2C:14:8E:F0:EE:00:FF:5A:22:1A:F1:BC:61:C7:E1:8A:A4:BC
Certificate issuer:       /CN=c9bb2c148ef0ee00ff5a221af1bc61c7e18aa4bc
Certificate serial:       019FA9AC5F8C51DA9FBEF04536CF8768ED44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
Manifest number:          01E5
Signing time:             Tue 28 Jul 2026 17:01:13 +0000
Manifest this update:     Tue 28 Jul 2026 17:01:13 +0000
Manifest next update:     Wed 29 Jul 2026 17:01:13 +0000
Files and hashes:         1: 2vfd_kX6R8_1pSce-qH7ueF_CFI.asa (hash: gyU2q6SGexsT0na8dPH6q8my1zwHUMQLEgtgSUYyBL0=)
                          2: ybssFI7w7gD_WiIa8bxhx-GKpLw.crl (hash: qnsWHe3P2pdeXN70jJIz4xTopiSTc7G1XLoOLb/FSfA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:5f:8c:51:da:9f:be:f0:45:36:cf:87:68:ed:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9bb2c148ef0ee00ff5a221af1bc61c7e18aa4bc
        Validity
            Not Before: Jul 28 17:01:13 2026 GMT
            Not After : Jul 29 17:01:13 2026 GMT
        Subject: CN=ff1a1aa3eb63c0f3fdfddb3f74712853ecdf7832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:07:cf:67:f2:24:7c:59:08:da:b6:c5:02:9f:
                    6f:64:98:1f:b9:81:3e:e6:18:6c:3d:5d:e2:eb:b2:
                    35:c9:61:e8:fa:be:8e:67:b6:c9:c1:19:f0:f8:4c:
                    fc:af:5c:1c:db:77:82:2c:03:08:33:87:63:83:63:
                    85:eb:b0:ee:0e:8f:22:98:1b:e9:9c:75:27:da:eb:
                    84:5f:85:37:7d:b2:6b:f3:55:03:c1:13:73:27:32:
                    80:94:ca:8d:3c:fd:a7:89:ba:df:62:eb:8e:db:7b:
                    8c:e8:84:dc:81:15:0c:1c:57:5b:27:7b:bd:4f:74:
                    f7:0b:dd:ae:8b:1f:b4:3d:8a:46:7b:d5:ed:d9:b5:
                    d7:9a:bf:eb:4c:e9:4a:b5:11:7d:88:98:d0:50:75:
                    ca:57:be:ca:ca:ac:f6:79:28:d3:b9:08:f0:e2:f2:
                    94:bd:e1:86:df:8b:0e:ad:8b:86:7d:d9:07:4b:89:
                    d8:26:07:9d:b2:f8:fe:c3:30:99:3c:65:bb:84:14:
                    03:9e:92:79:87:84:6e:b3:7b:59:75:e3:cc:89:ef:
                    fa:2f:bf:51:14:44:b8:16:2f:5a:92:f4:95:cd:24:
                    07:7f:96:8b:ac:e5:61:ae:20:48:79:b4:db:30:6a:
                    79:b0:72:90:fe:1f:4b:df:d0:36:f6:5d:fb:53:6a:
                    08:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1A:1A:A3:EB:63:C0:F3:FD:FD:DB:3F:74:71:28:53:EC:DF:78:32
            X509v3 Authority Key Identifier:
                keyid:C9:BB:2C:14:8E:F0:EE:00:FF:5A:22:1A:F1:BC:61:C7:E1:8A:A4:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:4e:5b:88:73:9b:55:0e:6a:4d:96:d1:4e:11:b7:d0:fd:05:
         09:b4:76:da:a5:bd:b6:21:48:5b:a2:47:66:96:d9:0d:4c:1b:
         44:a7:dc:14:35:4a:8a:02:0c:27:4f:bd:c9:4d:26:0a:bc:cf:
         56:29:ec:6f:00:a2:25:07:c9:65:c6:4f:7b:19:75:6a:f3:8e:
         b5:2a:76:13:5f:15:fb:ca:0c:ae:8a:d8:be:39:01:40:c1:5b:
         c3:64:14:8f:75:cb:47:9f:f3:b4:b4:be:1b:06:d5:08:c4:7a:
         4a:87:6f:b9:e9:90:31:bc:3d:df:88:65:d6:3b:b2:93:c7:2a:
         52:ba:dc:3c:7d:4f:e8:99:16:fe:a4:15:5c:37:a7:91:b5:3f:
         6e:c5:ca:39:ce:2e:14:ca:3d:3a:ed:00:fb:53:bd:26:cc:f8:
         30:07:51:08:0b:62:a9:f1:18:8b:cc:68:22:cc:48:f7:92:ba:
         a0:8f:31:0c:e6:28:64:6a:16:f3:df:d2:a2:0f:43:2f:84:0c:
         09:79:b6:0a:92:9b:0c:8e:c8:91:5b:a7:54:28:45:a9:d5:e9:
         41:26:cd:55:80:c0:a9:04:69:77:d8:4a:b2:4a:ff:18:d5:69:
         4e:09:61:c9:e5:d2:66:49:4f:cd:20:e7:83:1a:61:5e:bc:70:
         01:c5:5e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:54:56 2026 by rpki-client