Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
File:                     yjevCVET2t1bxRveu_CtNNbu22Q.mft (raw, json)
Hash identifier:          rnpo/a8B4/3paYD/VuHhE+99GV6eZz4V+OIGncESrdY=
Subject key identifier:   4F:A4:08:49:AE:AD:F6:11:99:1B:BC:68:BD:3D:6E:12:1F:8D:8B:A1
Authority key identifier: CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64
Certificate issuer:       /CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
Certificate serial:       019FAA510F86FCB06BEA331710147B5DC073
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
Manifest number:          15E4
Signing time:             Tue 28 Jul 2026 20:01:06 +0000
Manifest this update:     Tue 28 Jul 2026 20:01:06 +0000
Manifest next update:     Wed 29 Jul 2026 20:01:06 +0000
Files and hashes:         1: F44bKH9OXVnCIoILdhGNkCfhXGk.roa (hash: tP7jtATuTlTRwvEpnqA6Mbeq855NS1jjX+L/+eC+Juk=)
                          2: yjevCVET2t1bxRveu_CtNNbu22Q.crl (hash: q35Q/k+nWfju6F9/uvWGCCzOnMiJQlWhinP3+zmETFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:51:0f:86:fc:b0:6b:ea:33:17:10:14:7b:5d:c0:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
        Validity
            Not Before: Jul 28 20:01:06 2026 GMT
            Not After : Jul 29 20:01:06 2026 GMT
        Subject: CN=4fa40849aeadf611991bbc68bd3d6e121f8d8ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:36:8f:cf:01:d9:3e:1e:5f:f2:f1:09:7b:ab:
                    57:da:7c:42:e2:1d:37:eb:2b:53:59:34:9d:82:98:
                    ba:20:54:12:b9:54:e8:2e:62:79:c1:38:6a:53:14:
                    0b:4b:05:cc:cb:fc:53:ba:35:ee:bf:50:3a:48:37:
                    ee:ae:3d:4a:13:d1:a7:d2:e7:3b:76:e9:0f:f1:1c:
                    43:e6:71:b4:29:d4:77:17:19:32:e5:11:94:e2:40:
                    6f:cc:56:22:be:87:37:64:45:00:23:fe:5a:d8:af:
                    6e:73:a6:55:76:be:8c:22:3a:ed:da:55:6a:16:5d:
                    8b:3c:b3:e7:ca:84:03:26:92:24:b4:4f:a2:08:2d:
                    5b:88:f7:b5:e3:2d:b2:3b:64:09:8c:7e:9c:79:1a:
                    e8:1b:3b:f5:e2:01:e1:5b:7b:b2:b7:8c:63:7b:83:
                    7a:f0:77:34:44:0a:d0:ff:21:75:2c:e0:0e:6e:e8:
                    9e:73:62:55:72:a0:22:2d:b9:54:e7:34:9a:80:fb:
                    8c:bb:22:73:f9:9b:fa:ed:d5:7f:17:4a:66:93:22:
                    bf:31:46:24:d7:e8:30:d7:1d:a5:2c:70:7d:0c:79:
                    7c:e7:33:97:54:35:f3:39:d1:6c:4f:6f:38:0b:11:
                    b3:49:6c:de:fc:52:7c:93:e0:43:42:55:ac:dd:ec:
                    19:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A4:08:49:AE:AD:F6:11:99:1B:BC:68:BD:3D:6E:12:1F:8D:8B:A1
            X509v3 Authority Key Identifier:
                keyid:CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:36:e7:c4:13:46:8b:97:6a:b6:99:23:16:22:06:81:f7:18:
         d2:b9:66:b9:7b:cc:1a:29:8e:45:fb:b7:ab:cf:0a:e7:de:7c:
         e5:a7:24:e0:69:17:ad:11:f9:35:ec:2f:dd:8e:df:58:30:90:
         73:2b:8e:9b:a2:fe:77:39:cb:62:8d:5e:b8:fd:d3:3b:b3:6d:
         75:ce:cf:85:0f:df:35:e7:b0:fe:a4:e7:65:67:40:9d:e8:22:
         49:7b:14:c1:67:4b:ab:7e:4b:e0:4b:e6:a7:0b:f5:13:07:7e:
         dd:53:06:71:45:bb:08:87:c9:91:66:ab:ce:9f:b2:e5:1d:f5:
         f0:a8:f4:0f:c9:a2:83:a3:56:ce:44:ce:c5:cb:de:5f:13:84:
         6e:e1:cf:fd:2d:46:58:54:cd:fd:98:03:ef:ef:66:a3:a0:38:
         8d:a3:ce:5a:c2:5d:8d:a1:1b:0f:49:d5:41:f4:53:97:81:21:
         c1:8d:d8:22:9b:04:c9:b7:fc:72:df:8a:eb:d5:92:23:e2:18:
         44:90:15:54:63:2c:b8:1e:56:17:32:41:86:66:12:f7:bd:aa:
         45:00:5f:1f:4e:8f:da:02:bf:e6:e4:5a:0d:9d:42:71:03:14:
         72:b8:8b:cd:e3:44:bd:69:3e:22:9b:03:30:ff:b4:7f:72:31:
         cf:16:d9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:20:35 2026 by rpki-client