Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
File:                     ybBR6OaBSbZgROfeSuWdc25Teqo.mft (raw, json)
Hash identifier:          lB98LdXyQ3gye/2/LwcRh0UFpqd8/fZbRhi+Zgu/21M=
Subject key identifier:   1D:4F:37:E6:98:21:AD:BD:6E:E3:8E:6C:54:6F:2B:40:69:2C:CD:51
Authority key identifier: C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
Certificate issuer:       /CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Certificate serial:       019FABD151C312F24F5855B168E4C686CDBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
Manifest number:          09BD
Signing time:             Wed 29 Jul 2026 03:00:49 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:49 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:49 +0000
Files and hashes:         1: ElQ5chtEAtBtP2GIXdac_TddA80.roa (hash: HOH5oCt/YkRKpTxo1H1ugWQGWMm04Hcv5fnFxFjdw8s=)
                          2: mDTOHKx9pFPb6EOP9UxQxm-ClKw.roa (hash: 38/vqHt1v0uvrIdlEvEwCRci+eMQynBKytD9wiXBCtc=)
                          3: nu9XCXuPflVxiBkepDLOxds4g2s.roa (hash: W/feVk1DUwfkmSjB+I5O4CPhUu5C032era/IbMRpza0=)
                          4: ybBR6OaBSbZgROfeSuWdc25Teqo.crl (hash: imF0hkmCTtCkWeMAcyY8qJXNx8A/9OO/tuGu33s9ftM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:51:c3:12:f2:4f:58:55:b1:68:e4:c6:86:cd:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
        Validity
            Not Before: Jul 29 03:00:49 2026 GMT
            Not After : Jul 30 03:00:49 2026 GMT
        Subject: CN=1d4f37e69821adbd6ee38e6c546f2b40692ccd51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b9:98:e3:ed:90:3d:b2:04:69:4c:f8:14:ca:
                    9e:68:09:21:1b:e4:ae:68:fb:05:bd:72:1e:cb:c1:
                    b2:9f:00:bd:c9:cd:4f:68:95:dd:c9:f5:a7:7d:9c:
                    5c:ae:b7:d5:0d:b1:aa:0e:fc:61:ac:34:79:ab:eb:
                    39:7d:b4:9c:46:36:ad:33:7a:b9:17:55:22:35:bc:
                    f9:d1:42:98:e6:a2:12:6a:bf:0e:8e:42:05:f2:e2:
                    8d:7a:35:03:f3:ee:59:80:1a:e3:2a:83:df:51:d4:
                    f0:d1:b9:e7:ee:49:1d:d4:1c:c5:bf:58:6d:47:e4:
                    1d:5a:ed:18:77:78:91:11:33:be:f0:47:39:71:ac:
                    21:7c:02:29:6c:45:52:4c:18:3f:e4:7a:23:db:0f:
                    f5:37:3a:4f:b3:88:84:52:92:ca:c0:10:71:7e:6e:
                    75:d7:86:44:d4:b6:79:48:6e:38:df:84:15:7a:88:
                    46:fa:d5:53:fe:68:2f:d6:50:a1:0f:f2:d2:b5:26:
                    1f:4f:77:98:77:17:a9:f6:22:5e:43:c1:03:0d:42:
                    93:db:3c:53:e2:90:4a:cc:d5:f3:c6:ce:6a:c2:66:
                    64:a3:a6:69:16:37:44:12:98:df:5e:7d:6c:5c:df:
                    5f:77:80:bc:97:a2:c6:1b:62:df:5b:8f:a9:84:e6:
                    44:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4F:37:E6:98:21:AD:BD:6E:E3:8E:6C:54:6F:2B:40:69:2C:CD:51
            X509v3 Authority Key Identifier:
                keyid:C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b8:6f:5a:af:2a:f7:f0:01:dd:ce:59:21:71:24:1f:a8:3b:
         5d:77:35:3e:2e:fb:f3:02:55:6e:fe:1d:b1:60:15:ee:75:6f:
         0e:2c:e0:23:40:8d:4a:a0:85:6d:c3:15:c5:95:88:bd:fa:52:
         b9:0f:7a:a2:55:da:90:5e:c4:2b:8d:33:3a:2b:ea:67:82:90:
         91:43:32:f9:2f:2a:77:0c:f0:8c:8f:f2:ce:2c:1b:12:b3:f6:
         b6:a8:07:96:84:20:37:d7:d0:c4:1b:ea:e2:74:1f:5e:4d:d5:
         f9:5f:71:66:0a:3e:cf:7b:66:5a:25:c0:c8:e6:e6:34:8d:26:
         41:c5:8b:a3:8c:eb:4c:ee:84:af:34:9b:5a:68:8c:5b:c2:84:
         9f:be:e9:3c:a6:49:fd:6f:aa:f7:b3:78:f0:64:34:57:ac:2a:
         2b:19:63:46:30:91:23:60:8a:97:b1:4e:70:3d:b9:10:ad:f2:
         b8:fd:6a:7a:f1:c9:cf:d8:71:3a:03:e7:1b:44:a9:32:73:ff:
         d0:87:cb:8d:2f:c3:3a:20:a2:7c:b5:69:15:fe:10:3a:99:80:
         5f:19:f2:7b:d6:ce:87:0c:33:63:ea:6c:0c:92:4e:0d:e4:64:
         7f:1b:2c:4a:7f:3d:27:82:d3:33:40:ab:f2:fb:66:1f:a6:ea:
         8d:ac:e3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:40:24 2026 by rpki-client