Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
File:                     YJ6nq6_FLH_6IKemquSuLSYlIHY.mft (raw, json)
Hash identifier:          ylfoWVGLu0DJreLqeBKkQUTcM0onqZ6NBKW5B6gmtfY=
Subject key identifier:   C1:5E:31:3B:59:C7:76:E9:89:6F:F5:31:CA:23:6F:F5:B4:57:44:D7
Authority key identifier: 60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
Certificate issuer:       /CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Certificate serial:       019FAA88A1D074996EBE30D6E25A8305A4FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
Manifest number:          0442
Signing time:             Tue 28 Jul 2026 21:01:48 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:48 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:48 +0000
Files and hashes:         1: IPEVX9NburliCOkL_8My8KZEvxc.roa (hash: vKtzd4qXyz9EWKAKarv5HXYhJ7hA2jvu9rmJAemDTXw=)
                          2: YJ6nq6_FLH_6IKemquSuLSYlIHY.crl (hash: W/XBmjOZcZlX90ziKfxAPsXnbTLZxBGb4dq3XVmzPZs=)
                          3: g3UM-mxo9surPyGX-ua-Jw8Hwy0.roa (hash: rLTMTj/qJ9X8Z52HM7aUZCnlG5iT1wzURKa+BIyHlNY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:a1:d0:74:99:6e:be:30:d6:e2:5a:83:05:a4:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
        Validity
            Not Before: Jul 28 21:01:48 2026 GMT
            Not After : Jul 29 21:01:48 2026 GMT
        Subject: CN=c15e313b59c776e9896ff531ca236ff5b45744d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e7:3f:f6:48:0c:d9:8f:22:44:2d:29:9c:1f:
                    a1:e0:86:b4:03:5f:6a:7e:4b:11:a4:f6:cb:f0:8f:
                    7d:cf:73:9a:4b:26:af:ea:e4:62:65:39:3d:71:65:
                    11:c0:dd:d1:c2:d6:f9:10:8b:2a:3f:70:11:42:cd:
                    71:a8:e5:ff:bc:ab:ee:98:87:cb:45:1f:c3:58:84:
                    5c:bf:13:d3:2d:c4:c1:1e:fa:f5:17:5e:27:52:71:
                    76:9b:2a:54:25:7c:f5:a1:88:54:c5:a1:00:5a:3c:
                    4e:d5:a1:03:43:ef:00:5f:f1:04:da:30:8f:9b:22:
                    f7:c9:8b:ed:fe:dc:e0:6a:b4:5e:49:93:a5:0e:d3:
                    0c:d2:31:df:7a:f0:32:24:34:9a:14:b8:30:70:90:
                    4e:e8:d1:76:9a:b3:a1:11:57:6b:f9:ae:0e:32:e7:
                    21:f4:a8:a1:70:3f:7d:3e:4f:77:9f:67:10:31:bf:
                    04:29:c1:b8:4a:e0:c3:eb:8c:4b:ca:ee:0d:67:98:
                    67:48:6c:e9:45:90:f9:a7:0d:dd:df:83:4b:ac:e2:
                    16:86:2e:eb:f5:21:e0:a5:50:bf:c4:11:a7:e4:4f:
                    0c:f7:86:5f:b3:2e:d8:00:d3:a7:e5:83:13:6f:78:
                    6c:c4:a1:fc:65:1c:7b:8a:42:77:da:2d:e9:70:e7:
                    7c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5E:31:3B:59:C7:76:E9:89:6F:F5:31:CA:23:6F:F5:B4:57:44:D7
            X509v3 Authority Key Identifier:
                keyid:60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:a8:23:cb:68:2a:d7:e8:d2:e1:68:93:a8:92:de:a4:28:04:
         0e:f1:0f:6a:f6:2a:ab:d6:78:85:f0:b4:39:02:f7:80:fa:0d:
         95:d0:27:55:82:59:94:fe:52:92:76:c8:d8:8b:31:f7:fb:7a:
         bf:03:09:59:4a:52:22:f6:21:aa:b8:73:e0:56:39:c2:93:77:
         a5:a8:3b:10:f0:5f:fa:71:7f:3c:21:4a:ce:4c:9a:7e:c6:a9:
         69:c3:3d:bb:53:6c:b5:7d:4a:f6:a6:8b:26:44:44:e3:50:db:
         08:70:7b:b3:9f:e6:4c:e9:7a:1a:45:36:60:24:b9:d9:1f:06:
         ba:94:25:22:ff:b8:48:08:ab:71:0e:2b:96:58:b7:38:f7:0d:
         9b:ee:c4:de:1a:b5:d8:9c:be:07:d3:7a:62:12:47:5b:25:7d:
         67:3f:08:49:51:86:0c:5c:9b:75:ff:b4:92:66:7d:e1:ac:6c:
         99:fb:34:f1:23:a2:89:72:de:de:25:7a:fb:30:9b:08:58:8c:
         a3:95:8b:96:40:62:7b:72:7e:07:81:98:1a:3d:50:da:dd:45:
         14:4b:6b:9c:85:e0:6b:79:45:c3:7f:7c:01:90:66:eb:6b:1a:
         b5:25:0e:08:9c:da:8d:be:9f:90:1c:ff:e2:57:ef:a5:63:12:
         ce:d5:7d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:46:09 2026 by rpki-client