Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
File:                     YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft (raw, json)
Hash identifier:          EJUeXhRzcopazlR+6JZcf3smrnsCV6X1fZFJuTGUjfU=
Subject key identifier:   5F:C2:FC:F4:D1:C0:5F:13:34:94:FC:13:DF:00:C3:5F:C1:04:BF:1B
Authority key identifier: 62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
Certificate issuer:       /CN=62927b36b138f086358938e3acfda4638e56a792
Certificate serial:       019FA9AC46D402C3990D3494F6D4C47E9DE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
Manifest number:          1714
Signing time:             Tue 28 Jul 2026 17:01:07 +0000
Manifest this update:     Tue 28 Jul 2026 17:01:07 +0000
Manifest next update:     Wed 29 Jul 2026 17:01:07 +0000
Files and hashes:         1: 2dNlCcYTwuLwzsnBQLcW5azrUC0.roa (hash: LdCokJaoTg0Ayv8WOg6znK8za4O+cYZSIl7zsI7HgqI=)
                          2: MMwhBGW76MVn4Dg5EbZwOtE-V9k.roa (hash: hEekmWExVpRk8yl5uIiicxfMKJpS9Azptnbba7Lmq4g=)
                          3: PJSHdZS95adkLNWcV4sGR1iLw40.roa (hash: 6w7h78uytxCAdBP54QlwzbmDu/qnNv60V+P+VcQ00lk=)
                          4: YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl (hash: C/KiKQft6zgicMKmJMm45ORVYa+WLdrxsp7mju93T/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:46:d4:02:c3:99:0d:34:94:f6:d4:c4:7e:9d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62927b36b138f086358938e3acfda4638e56a792
        Validity
            Not Before: Jul 28 17:01:07 2026 GMT
            Not After : Jul 29 17:01:07 2026 GMT
        Subject: CN=5fc2fcf4d1c05f133494fc13df00c35fc104bf1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:97:77:4a:d3:87:0f:67:c7:a0:be:f4:87:f1:
                    e6:49:32:c6:2d:25:3e:cb:90:48:c1:a8:49:3e:e1:
                    2d:de:f0:4f:09:72:af:6e:41:e4:4e:a5:78:a5:29:
                    cc:b5:28:99:d3:9e:8c:b1:14:1b:74:07:7f:d3:37:
                    d0:59:ea:02:61:18:15:9c:cc:7a:da:f0:f6:9e:d9:
                    cc:b6:cf:5b:04:c9:01:23:03:f2:c1:c2:7e:ea:5f:
                    10:64:72:6f:29:ee:c4:e4:38:93:b0:35:55:87:66:
                    7a:6b:e6:5e:df:6b:95:62:d9:b3:dd:97:5a:0e:f2:
                    69:5d:ab:8e:cc:40:ad:ee:e2:20:3f:0c:04:38:97:
                    9b:6e:39:5f:2e:f8:cd:ff:21:1e:d0:90:dd:15:83:
                    9d:f8:10:48:2f:c8:4a:a0:6c:6a:b1:27:fa:43:b2:
                    5d:19:8a:34:ee:1d:72:a2:a5:17:92:74:4c:d9:1d:
                    1c:c6:43:48:33:90:f1:24:78:4c:b6:ee:a4:35:0b:
                    e8:0a:68:18:a0:5d:61:9e:91:2a:4e:07:61:8c:3f:
                    56:16:31:5b:3c:d5:46:a4:13:2b:de:a7:ff:44:c9:
                    11:c5:17:f2:38:ca:b2:cf:4a:b1:3c:b6:63:35:69:
                    d3:27:ab:72:98:f0:24:6b:6c:90:59:81:0e:5d:0e:
                    14:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C2:FC:F4:D1:C0:5F:13:34:94:FC:13:DF:00:C3:5F:C1:04:BF:1B
            X509v3 Authority Key Identifier:
                keyid:62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ed:12:43:e0:48:b9:92:2c:c6:db:9e:af:c5:1f:67:f6:f4:
         fc:1e:34:71:cb:89:4e:75:70:96:4f:96:d0:e6:32:ea:89:a9:
         90:f6:d0:d2:59:81:6c:f6:63:17:75:b2:b0:a5:3a:ee:ca:a4:
         89:2d:0d:c6:8c:a8:70:37:54:af:5a:3a:b1:2e:f8:83:23:0d:
         08:14:73:f2:54:71:1a:8c:64:6d:b5:04:ad:8d:42:16:c6:b3:
         ee:3e:ae:14:2b:10:e5:f1:2c:53:bd:8c:e9:09:24:bc:06:89:
         21:1b:20:a2:39:b3:f2:e2:4b:ee:0f:b7:c3:c8:fa:c6:aa:2b:
         8f:af:b7:7b:c6:01:5e:13:c4:81:e3:cb:89:99:99:6d:04:13:
         a9:3e:93:33:42:53:69:24:c1:9a:67:0e:ab:44:80:d9:c4:6d:
         17:44:9b:dc:3d:e7:57:94:e9:69:cc:8a:40:8e:59:4b:96:b4:
         87:2f:46:a8:17:59:d2:28:f5:57:13:9a:56:3b:76:18:c8:bf:
         04:49:19:72:d3:fa:b7:90:00:26:75:fa:dd:f8:40:d5:9f:39:
         60:ee:cc:6a:17:96:4e:df:65:88:db:2d:2d:86:d4:7e:e2:34:
         7b:ab:81:41:ad:0f:d6:f1:48:41:1a:6e:95:95:f9:e2:dc:b3:
         63:66:8d:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+prEbUAsOZDTSU9tTEfp3pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyOTI3YjM2YjEzOGYwODYzNTg5MzhlM2FjZmRhNDYzOGU1
NmE3OTIwHhcNMjYwNzI4MTcwMTA3WhcNMjYwNzI5MTcwMTA3WjAzMTEwLwYDVQQD
Eyg1ZmMyZmNmNGQxYzA1ZjEzMzQ5NGZjMTNkZjAwYzM1ZmMxMDRiZjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZd3StOHD2fHoL70h/HmSTLGLSU+
y5BIwahJPuEt3vBPCXKvbkHkTqV4pSnMtSiZ056MsRQbdAd/0zfQWeoCYRgVnMx6
2vD2ntnMts9bBMkBIwPywcJ+6l8QZHJvKe7E5DiTsDVVh2Z6a+Ze32uVYtmz3Zda
DvJpXauOzECt7uIgPwwEOJebbjlfLvjN/yEe0JDdFYOd+BBIL8hKoGxqsSf6Q7Jd
GYo07h1yoqUXknRM2R0cxkNIM5DxJHhMtu6kNQvoCmgYoF1hnpEqTgdhjD9WFjFb
PNVGpBMr3qf/RMkRxRfyOMqyz0qxPLZjNWnTJ6tymPAka2yQWYEOXQ4UawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/C/PTRwF8TNJT8E98Aw1/BBL8bMB8GA1UdIwQY
MBaAFGKSezaxOPCGNYk446z9pGOOVqeSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXBKN05yRTQ4SVkxaVRqanJQMmtZNDVXcDVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZDI0MWYtNzFlYS00YTFiLTk2ZWEt
YTk5YzdlZTVjMjg0LzEvWXBKN05yRTQ4SVkxaVRqanJQMmtZNDVXcDVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZDI0MWYtNzFlYS00YTFiLTk2ZWEtYTk5YzdlZTVjMjg0
LzEvWXBKN05yRTQ4SVkxaVRqanJQMmtZNDVXcDVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYu0SQ+BI
uZIsxtuer8UfZ/b0/B40ccuJTnVwlk+W0OYy6ompkPbQ0lmBbPZjF3WysKU67sqk
iS0NxoyocDdUr1o6sS74gyMNCBRz8lRxGoxkbbUErY1CFsaz7j6uFCsQ5fEsU72M
6QkkvAaJIRsgojmz8uJL7g+3w8j6xqorj6+3e8YBXhPEgePLiZmZbQQTqT6TM0JT
aSTBmmcOq0SA2cRtF0Sb3D3nV5TpacyKQI5ZS5a0hy9GqBdZ0ij1VxOaVjt2GMi/
BEkZctP6t5AAJnX63fhA1Z85YO7MaheWTt9liNstLYbUfuI0e6uBQa0P1vFIQRpu
lZX54tyzY2aNMQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:56:06 2026 by rpki-client