Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File:                     Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier:          yHX5p2Qv4erIhJbQBogxRj8ofC2JnuyABCBznhk0jOk=
Subject key identifier:   45:51:65:5A:2E:09:C8:74:01:47:09:AE:46:48:5E:1A:DC:08:39:C1
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer:       /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial:       019FA9AC043336A7F3AAAE06A676403A6927
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number:          19DC
Signing time:             Tue 28 Jul 2026 17:00:50 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:50 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:50 +0000
Files and hashes:         1: XZ3sAdabDoOYfBZeEJolsMalQgs.asa (hash: XHuxusmmi3am2aFGs60mmc2MCFL+zmd66reyxUPLwTI=)
                          2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: zmuY5/P4Q0C5PY4tQqVr7HRPfOSkpzyoXJ2P+eNJnSQ=)
                          3: nibctkm7wr91rBA37l_8PQxYVLc.roa (hash: VamjklOdSeVjkVgODzUFUtdlbnnylLnD0/pDvfa31T8=)
                          4: t8mVoTfmckCvsyVdwBCx2WY3_SU.roa (hash: punRHqDIXE83AX4muw8qvjP6n1JcfvmchVlgv85rsL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:04:33:36:a7:f3:aa:ae:06:a6:76:40:3a:69:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
        Validity
            Not Before: Jul 28 17:00:50 2026 GMT
            Not After : Jul 29 17:00:50 2026 GMT
        Subject: CN=4551655a2e09c874014709ae46485e1adc0839c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:74:0d:2b:0a:20:65:2d:3f:24:9e:7e:b8:90:
                    48:f9:44:cf:62:f0:6c:1e:5f:bd:a3:83:63:57:0b:
                    90:b4:63:69:5c:ee:df:71:0a:ee:c4:c4:83:1a:19:
                    d8:07:03:71:81:90:11:99:38:8b:e7:a8:51:64:2c:
                    d7:7d:23:ef:90:70:85:ec:54:a2:5b:c4:fe:ae:b2:
                    28:2e:c3:59:8e:5f:d0:bc:43:29:83:52:80:64:9b:
                    16:c3:48:4e:7e:32:17:43:de:09:92:26:8b:5f:19:
                    3a:fd:da:7a:fc:3f:7e:f2:04:ca:bc:28:69:53:d7:
                    05:c5:e7:9f:5e:3b:d9:09:94:2e:be:9e:f8:4f:c2:
                    e7:d2:8d:81:fb:54:02:0b:e1:e4:18:89:31:6a:5a:
                    65:8c:85:44:36:75:a5:4b:8a:6d:e9:36:9e:26:4e:
                    99:ad:bf:21:a5:a9:b0:4c:b7:87:56:dc:84:64:7d:
                    35:e5:5a:95:7d:79:50:68:0a:bc:61:32:c2:94:7f:
                    c6:3f:b3:41:75:9d:59:b7:ec:8a:cb:19:16:ed:5f:
                    d3:18:ae:f4:8c:98:87:9a:c7:2f:83:3b:ff:72:ed:
                    b8:46:5f:a1:e1:7e:08:4b:3e:f6:c3:73:ec:3d:e6:
                    51:df:a1:df:7c:54:22:0d:97:5a:77:26:78:54:e4:
                    cf:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:51:65:5A:2E:09:C8:74:01:47:09:AE:46:48:5E:1A:DC:08:39:C1
            X509v3 Authority Key Identifier:
                keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:87:22:01:86:9d:38:88:dc:b8:4f:f3:8f:50:66:14:8d:ac:
         9d:8a:80:2f:4a:91:b3:3a:79:29:35:6a:00:4f:f1:ec:32:82:
         91:95:d5:58:01:ba:fc:2f:7c:f2:64:0e:7f:31:51:d9:49:29:
         0b:59:0d:b8:6c:14:a5:4a:08:38:dd:e9:0b:c2:db:61:d3:16:
         49:68:52:f2:77:0e:90:ab:74:96:6d:86:aa:c4:9f:1c:ec:d5:
         f9:18:b3:1b:b5:18:26:70:b5:50:8c:d5:d3:28:3a:99:fe:e1:
         15:68:5a:6e:c4:34:92:59:cc:d0:a2:b1:cc:01:f2:53:63:76:
         e8:b3:76:19:3d:10:9f:fc:dc:0d:c3:71:bd:ba:4f:2d:34:ca:
         82:d2:4d:c3:83:51:13:de:87:d2:63:48:69:d2:09:81:06:e2:
         90:de:c4:fa:47:ea:96:43:3a:b4:0f:0c:f5:62:17:b8:d4:f0:
         32:45:67:20:4c:b4:fb:55:b4:d5:5c:67:bc:f1:66:a5:04:2f:
         72:6a:95:03:13:8a:c7:8c:30:28:59:0f:18:ad:79:75:ef:aa:
         ea:a6:21:34:07:db:a8:9b:ab:bc:d5:01:7f:ca:a7:55:e1:e8:
         d7:39:46:92:40:b3:fd:2b:89:5e:9c:28:c0:31:85:ee:de:f9:
         3e:17:f8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:22:17 2026 by rpki-client