Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
File:                     YDgxphvIqPTLhYhwIvtvhjlzRdw.mft (raw, json)
Hash identifier:          s4bTuL1PCeMJbx1BoemUxXOXJRIPlrwWeTQY5JwiNBQ=
Subject key identifier:   90:97:0A:48:99:60:C5:DE:01:B2:48:C6:B9:99:FC:19:AD:23:F3:02
Authority key identifier: 60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
Certificate issuer:       /CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Certificate serial:       019FABD0CFC49A7BC551D0633B1793C3E622
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
Manifest number:          10E7
Signing time:             Wed 29 Jul 2026 03:00:16 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:16 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:16 +0000
Files and hashes:         1: PItnMttIkdeuTPXavmvPG7wEEmg.roa (hash: g8vhWp9yKKoH5MZ8w1k35uUTgUFMBWzylaX6sR0nuqk=)
                          2: Y5fNbXlu-919bEGmzzCTqLKe4UE.roa (hash: Xsn3mIF6IxJP4Pj8lk0nwBSrm5qnIHW3nv1qCBDI+Z4=)
                          3: YDgxphvIqPTLhYhwIvtvhjlzRdw.crl (hash: Fvdrs8FL1pLggWiXS5fMvnO97lmRZjlyLOYFEvGhbLA=)
                          4: iReKhZ_-E04pzg8ir_i-KAVJTug.roa (hash: JcLEmoPP4jSyDJ+Og5UHxUBX28l4cJMP5KxpG/1AnsE=)
                          5: nUQG3vVMD7WFpDWiG0W1IymBVlU.roa (hash: EHlmhx+RyBOq9teHa0Af8FNOADjMaSQN2EK+hlsZ4oQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d0:cf:c4:9a:7b:c5:51:d0:63:3b:17:93:c3:e6:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=603831a61bc8a8f4cb85887022fb6f86397345dc
        Validity
            Not Before: Jul 29 03:00:16 2026 GMT
            Not After : Jul 30 03:00:16 2026 GMT
        Subject: CN=90970a489960c5de01b248c6b999fc19ad23f302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:76:9d:e4:6d:5b:59:04:06:d9:6c:7c:97:fb:
                    2d:2d:a4:44:de:0a:8e:bc:9c:b2:75:ba:d0:27:d6:
                    2a:f3:3f:6b:78:5a:19:96:18:a7:d9:a6:ca:c8:42:
                    9b:47:c1:9e:f1:74:bc:ac:4f:95:d2:02:56:7e:b0:
                    8f:20:49:a5:54:ec:22:b4:c0:61:6a:c2:61:58:d0:
                    27:bb:1e:82:ec:3c:1a:9d:e7:e9:6a:1e:c9:8e:96:
                    01:e5:aa:ec:e5:de:3e:c8:b0:88:b6:9b:9c:83:55:
                    e3:63:85:6c:48:a4:91:28:ef:ce:a5:96:f5:1a:73:
                    87:58:3f:4a:c9:eb:c6:51:42:35:88:f9:6e:d3:d0:
                    b5:e0:15:16:5d:88:6a:30:c6:f2:f3:97:41:20:fd:
                    40:f3:9c:b8:c4:43:d2:a5:86:bf:16:f5:21:f6:12:
                    0b:00:3a:6b:c9:e0:3d:d3:83:e3:79:7b:89:64:fd:
                    a4:12:c6:ee:36:ff:1f:a2:55:96:a2:14:76:e0:ed:
                    5f:ab:f7:c9:43:6a:d6:e1:59:b3:17:0d:cf:a0:50:
                    d5:22:da:d5:d7:25:c1:6c:88:d3:74:80:1a:8c:d8:
                    91:96:24:14:e7:a0:4b:53:b9:f5:07:0e:cc:d0:e9:
                    9f:6a:c8:35:9c:0d:bc:6c:37:77:1a:97:70:f5:f9:
                    49:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:97:0A:48:99:60:C5:DE:01:B2:48:C6:B9:99:FC:19:AD:23:F3:02
            X509v3 Authority Key Identifier:
                keyid:60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c0:ba:02:30:d8:92:fc:83:30:92:b4:c0:28:d2:48:f1:57:
         34:bb:5b:fd:85:e5:a9:2f:7f:a7:b6:c5:4d:fe:ed:d7:30:f1:
         fc:a3:a4:89:c0:d1:4b:38:f2:75:08:c6:00:3f:80:81:b9:02:
         27:01:7b:40:1a:b0:a2:b2:8f:c9:55:23:ac:84:6a:86:47:54:
         37:84:6f:ce:5b:3a:98:7d:1f:d8:f9:0a:82:29:c9:2d:da:97:
         41:46:75:78:a1:84:3f:ac:28:e5:ba:48:41:53:32:0f:98:91:
         2f:51:9d:76:4a:a0:6e:70:2b:6c:0a:57:86:b0:b0:f2:b1:f5:
         db:f5:9a:06:26:71:5c:07:72:ff:86:f2:af:c0:82:62:86:28:
         3c:7a:d4:7f:8b:9e:ac:e2:7e:7d:0e:4e:51:7a:93:ae:22:c7:
         23:fd:87:32:19:5b:3c:8f:d4:29:70:c0:73:9b:eb:b4:18:67:
         22:06:07:57:6e:c5:c6:b8:f9:42:1a:fc:27:b7:4d:13:bf:6a:
         09:09:a0:c3:61:2e:c9:88:fb:5d:ec:b0:f3:dd:4c:ef:b8:56:
         a7:31:84:8b:ce:62:2f:81:16:cd:04:0b:c1:16:e1:c2:99:b0:
         6c:00:bd:9d:e5:44:67:08:e5:ea:57:a0:64:60:ee:e4:23:00:
         70:a4:6a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:18:16 2026 by rpki-client