Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
File:                     yvYTMRp4acM1ymbLQjzG6LL6kCw.mft (raw, json)
Hash identifier:          ARVrBEpVxLYRU18xGpINdmeAEOFIJS/RdXaVbsVIAg0=
Subject key identifier:   80:B1:E5:77:1C:B0:54:E7:AC:02:30:9A:65:9E:08:99:DA:34:E7:F8
Authority key identifier: CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
Certificate issuer:       /CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Certificate serial:       019FAB2C1333522BD23EE6BA7E072DC215F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
Manifest number:          19D5
Signing time:             Wed 29 Jul 2026 00:00:20 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:20 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:20 +0000
Files and hashes:         1: 1w-DEGovWlGeUvxZrEhAkhZFri0.roa (hash: erRkVrb3pyj6Yu2qx5hIETEqq580z4OTzTDEWJgauCE=)
                          2: yvYTMRp4acM1ymbLQjzG6LL6kCw.crl (hash: PIUCfmVpBRtVl4XerITFkzwkEqc8elZA33khNpj4Kw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:13:33:52:2b:d2:3e:e6:ba:7e:07:2d:c2:15:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
        Validity
            Not Before: Jul 29 00:00:20 2026 GMT
            Not After : Jul 30 00:00:20 2026 GMT
        Subject: CN=80b1e5771cb054e7ac02309a659e0899da34e7f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:83:51:87:f4:7f:92:ff:5b:32:9e:3c:02:
                    53:0e:31:c1:dd:47:37:6c:78:09:d7:4a:b2:58:46:
                    fd:8f:21:b5:1b:e7:66:af:50:79:b6:e7:7f:9c:a1:
                    a5:cc:20:2f:2c:bb:8d:47:72:94:f2:66:4f:f3:e0:
                    a8:6f:3d:af:46:9e:81:da:05:fb:fa:d3:5b:e8:66:
                    2d:4f:b9:7c:de:b2:91:5e:ee:3c:71:f6:a8:b0:82:
                    5a:b1:fd:ee:fc:92:88:33:ed:6c:d6:39:78:68:9f:
                    2c:c6:7e:80:b9:08:4e:78:b2:ac:1d:e6:ad:c6:48:
                    91:94:7e:8b:c4:51:53:c6:1f:1a:95:23:6a:e6:48:
                    02:76:e2:c4:db:9b:76:68:9a:8a:2c:72:ca:10:ba:
                    34:58:2c:d8:34:46:8a:4b:38:36:e6:02:df:73:99:
                    74:71:69:d4:fd:e5:d3:db:71:29:a1:1a:b6:f6:30:
                    d0:f0:26:25:58:9a:82:fc:a2:cb:1b:9c:ab:6b:6b:
                    ac:be:bc:c8:f5:7b:26:26:73:13:b1:eb:fe:78:2e:
                    e7:58:f2:35:fa:9d:9f:49:e3:37:ce:ff:fe:c3:87:
                    8a:25:34:c7:f0:5d:35:67:47:57:63:7d:12:ad:fd:
                    c3:7c:ec:7f:83:19:72:6e:c2:ab:d9:28:1e:b9:6b:
                    43:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B1:E5:77:1C:B0:54:E7:AC:02:30:9A:65:9E:08:99:DA:34:E7:F8
            X509v3 Authority Key Identifier:
                keyid:CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:7f:4a:7e:88:8c:c1:58:71:36:c2:37:ad:f3:e5:80:45:77:
         a7:b8:21:6e:74:28:0b:fc:5f:59:5c:86:a1:73:3a:29:70:01:
         e4:c2:b8:11:bc:2d:a5:52:3d:e1:4d:06:4e:91:97:c6:3b:aa:
         95:4c:35:39:3f:db:1e:f5:90:0b:c8:e7:39:e2:97:00:a1:82:
         98:f9:e5:85:01:e1:99:d8:27:bc:65:f4:67:5a:a1:21:93:c1:
         a5:b6:82:09:97:7b:10:7a:87:dc:22:1e:95:a3:57:3f:80:33:
         89:ab:d2:2c:56:99:2f:b6:63:87:75:9e:52:53:8f:fa:2f:6e:
         c5:cc:07:96:ec:1e:97:6d:d7:94:ea:4c:1d:ea:7c:ca:80:29:
         da:d3:85:84:2e:85:7b:57:e3:43:14:3c:c2:a3:98:2f:d0:a6:
         3d:4d:5a:23:9a:2b:4b:43:b2:3b:21:de:0b:59:d4:e3:e4:ff:
         33:68:d2:4e:a9:bc:1c:c9:7b:a1:a1:be:d0:a4:4b:f1:77:21:
         ed:5b:cb:40:3d:85:c3:ce:01:a1:df:16:b4:ce:db:28:2a:d8:
         1b:fe:c6:87:0f:f8:fb:75:e4:e4:a8:e6:4a:9c:86:46:5f:ce:
         36:f1:67:3d:71:11:ad:a9:6c:83:08:2f:36:c2:a5:1d:9f:81:
         b0:8b:41:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:54:14 2026 by rpki-client