Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
File:                     yMLHMUWTBCz3QhD38DvnEGwiT4k.mft (raw, json)
Hash identifier:          Dx9xct9+doCuFEGJWz8mMN56GbP7a9cE2dU+OdsrBVU=
Subject key identifier:   E4:3E:59:E1:F5:D7:4C:64:C3:73:22:4D:6A:82:B0:02:EC:B9:97:A7
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Certificate issuer:       /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial:       019FAA880D07D9A4184DB1102C7702A7764E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
Manifest number:          17DE
Signing time:             Tue 28 Jul 2026 21:01:10 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:10 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:10 +0000
Files and hashes:         1: 23wcH8L7dVH0Qu_LmR1lf4KTI60.roa (hash: ZASstFoClWzggMDa2W+x7rdpIoMG853uqXTJ54y76xQ=)
                          2: AXFjpDXCpejxYVRyegcQY_lgsRM.roa (hash: Sa96eMd8qKDmCn/rVwKHcrgoDa7IBUJYs80RqrdQZIQ=)
                          3: Izyp9PlbDb7SEOFmf79W4IySogU.roa (hash: Gvc/OfVfbB6iQcaQfhbaTBFzazD+ndUcgMplwft/fIU=)
                          4: hxGvu-IScN-_hKbmojPRTU_qNno.roa (hash: ahzGwiWSxhQfKuYeEu+Wyoh/XK6bY7UKu+vDiNdhn8A=)
                          5: xpX8qu7gtSlTMLKM8RNsSENreoM.roa (hash: 6bwqH3IsERgfQGTI2ktBpw6N1RbIGeWD0+vqqsDzaLM=)
                          6: yMLHMUWTBCz3QhD38DvnEGwiT4k.crl (hash: QN8WYX6QWhEXlyEKV/A6PS9NBrgZ3oz2XrLQcfbflxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:0d:07:d9:a4:18:4d:b1:10:2c:77:02:a7:76:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
        Validity
            Not Before: Jul 28 21:01:10 2026 GMT
            Not After : Jul 29 21:01:10 2026 GMT
        Subject: CN=e43e59e1f5d74c64c373224d6a82b002ecb997a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e9:56:cd:8f:7d:15:bf:0c:45:1c:0f:b1:22:
                    33:11:53:ea:5e:21:3b:bf:cd:b6:6a:40:0b:1b:e2:
                    83:22:4c:9d:c3:12:43:af:c0:5a:80:ff:1f:d1:36:
                    1c:2d:91:bf:ff:7c:d8:33:d4:f7:0a:f5:8e:02:63:
                    cb:03:21:6c:e0:a5:98:19:1d:86:5d:bb:6f:3a:01:
                    49:0b:78:77:66:1a:73:9a:7b:6b:42:1c:6b:f7:73:
                    2b:15:47:f8:68:c2:f8:7d:88:75:ed:41:39:b0:91:
                    ed:86:36:7c:68:78:f4:57:46:63:5a:1d:62:10:7b:
                    95:9c:61:ea:f8:f6:f4:59:e7:b5:38:08:32:15:6e:
                    0e:44:2a:ea:27:df:58:ec:15:b7:bb:aa:ee:50:2b:
                    5d:e4:c0:d3:44:7f:e4:2e:d0:78:4b:af:f0:09:d9:
                    95:cd:8d:f5:f5:ec:e8:de:e8:09:3e:ec:2a:5b:8f:
                    61:64:66:8f:42:c9:68:04:96:63:0c:2e:90:9f:6f:
                    48:74:de:7c:2a:e8:06:d3:1f:a3:ad:3f:b5:5f:a4:
                    31:a0:28:0b:2d:c1:75:7c:4a:c7:09:c0:04:6b:77:
                    cf:8b:99:35:bb:2d:eb:8e:62:c2:5a:8a:8f:b3:d8:
                    f6:63:05:ec:e0:8c:66:31:1d:bf:1c:f3:99:7a:62:
                    65:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3E:59:E1:F5:D7:4C:64:C3:73:22:4D:6A:82:B0:02:EC:B9:97:A7
            X509v3 Authority Key Identifier:
                keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:65:9b:1c:23:50:f0:ea:26:19:b9:ea:f5:05:2f:6d:2d:58:
         ba:75:4f:26:5f:6d:10:13:7c:b0:d4:b9:91:76:41:13:9f:b9:
         bc:01:65:fd:0b:d9:c9:7a:a1:d5:9a:5a:6a:1f:e0:dd:5e:a3:
         13:e7:b5:19:25:90:50:56:37:33:41:98:10:1b:7a:04:3c:10:
         77:1d:ec:f2:f3:d5:ef:cc:87:24:d3:9a:bc:f9:1e:82:c7:52:
         7e:69:87:cb:dd:83:85:8c:01:ac:40:83:20:b1:2a:ec:d7:0b:
         8c:48:d1:ec:dd:09:75:1d:5f:17:22:5d:03:09:5c:3a:8a:ff:
         3c:e3:dc:bf:9a:2b:cd:43:ed:82:3f:91:6a:b2:f1:d0:f1:ed:
         b3:26:c3:e7:e9:fc:ba:3b:7c:dc:83:54:03:ee:ac:c4:05:29:
         17:f9:cc:4a:bb:1e:48:5d:b8:13:a6:1c:09:67:33:58:b5:52:
         9e:6f:01:3c:82:0d:6d:82:3d:3f:76:9f:c0:c2:16:32:d9:e0:
         dd:11:09:72:8b:3d:58:6b:9c:57:2a:f7:c9:b1:b9:9a:ee:6b:
         c2:4c:03:19:26:ea:fd:99:aa:fa:83:69:c8:e5:26:0b:d6:54:
         9b:10:73:c1:b2:e5:e1:d7:1e:66:46:6f:eb:05:85:ea:47:dd:
         2d:75:57:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:00:39 2026 by rpki-client