Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
File:                     YdOLN5gKDfrpz5osW1at6X-vUC4.mft (raw, json)
Hash identifier:          1nCkpvUDBmm4+bhJ1ijifTeR8aFByrfo0p5rnwCIQJg=
Subject key identifier:   55:90:65:CE:94:B7:79:0C:81:FD:36:35:28:BE:B4:F7:14:CB:FD:F1
Authority key identifier: 61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
Certificate issuer:       /CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Certificate serial:       019FABD1294B0AE03EF88475C24AFBA59ED6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
Manifest number:          0E5F
Signing time:             Wed 29 Jul 2026 03:00:39 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:39 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:39 +0000
Files and hashes:         1: YdOLN5gKDfrpz5osW1at6X-vUC4.crl (hash: LeDKA/gv6Imp5c6wtL0IFSmebiLfjfafOjSnpPbJzrY=)
                          2: kGLxA9onzrf8JLssDr-KbBw0Iso.roa (hash: iCYCJqbAYcmF46KnTkB1atw07n5B8BjwCirxzmxkzlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 03:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:29:4b:0a:e0:3e:f8:84:75:c2:4a:fb:a5:9e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
        Validity
            Not Before: Jul 29 03:00:39 2026 GMT
            Not After : Jul 30 03:00:39 2026 GMT
        Subject: CN=559065ce94b7790c81fd363528beb4f714cbfdf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bd:83:63:62:e2:7c:5b:22:71:d5:80:2d:3d:
                    f6:36:95:a9:11:a0:96:2f:2b:24:65:0e:74:c4:f0:
                    90:9d:fa:f1:72:b1:8a:2e:33:05:69:6d:63:89:88:
                    31:da:6a:e6:e2:2e:af:4a:53:6b:da:ca:fc:54:d1:
                    e6:98:65:69:61:ef:70:5c:50:ef:6f:4c:83:db:5d:
                    b9:c3:bb:83:d8:79:89:07:33:ea:65:1f:99:2d:4d:
                    f1:98:b3:35:04:71:5a:8b:10:9b:9d:3b:86:86:9e:
                    a5:87:d4:66:ec:17:30:e5:26:44:0f:c8:d8:85:3f:
                    1e:b7:41:d8:eb:e1:b3:f9:86:68:de:ba:ce:e6:5c:
                    04:88:01:ce:b8:3b:9b:b1:8d:68:4c:a1:7f:b7:82:
                    f3:c2:33:4f:c7:74:16:ba:4b:4c:0e:2a:d8:2b:13:
                    ee:39:d2:3c:de:07:62:e2:ca:b9:c0:e7:48:e9:60:
                    59:8a:b3:5d:a6:ff:3d:9c:8f:90:88:9f:23:e9:b7:
                    f2:f7:e0:45:67:6a:3f:89:58:20:dd:8a:db:df:2c:
                    6d:e4:a0:d3:a6:4b:22:ce:cd:d4:d6:66:f5:68:61:
                    b2:af:01:35:27:ba:e5:7c:d2:38:cd:55:9f:0e:23:
                    d9:c8:77:e0:3c:2e:63:82:10:e7:9f:02:cf:f6:7c:
                    8f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:90:65:CE:94:B7:79:0C:81:FD:36:35:28:BE:B4:F7:14:CB:FD:F1
            X509v3 Authority Key Identifier:
                keyid:61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:92:4e:94:d6:8c:cd:c8:0e:75:b0:a7:7b:f2:f4:26:4b:23:
         a0:b4:70:93:b0:f8:53:12:50:90:df:bd:c4:0e:a3:43:39:78:
         9f:e2:8e:93:25:2f:f7:af:b5:31:bd:f2:71:f8:a0:37:06:36:
         3b:c1:e9:53:a4:cc:e1:a5:74:11:b8:e7:f7:9d:c6:7d:10:30:
         85:70:e9:3c:9e:22:35:ca:c9:ed:b2:fb:5c:5e:e7:d2:21:89:
         af:a6:f7:72:6e:b6:7f:16:bf:05:70:56:4d:83:d9:80:d8:86:
         db:e3:bc:50:7d:92:7e:4b:0e:03:bb:ad:f5:42:f5:55:52:53:
         61:29:66:92:69:eb:6c:4b:45:0d:fd:fc:ff:41:28:e3:da:de:
         af:c0:52:67:47:da:d4:5e:b8:df:70:5e:07:3f:15:8b:10:ca:
         b6:dc:d0:51:ee:95:72:c2:74:c1:3b:ae:1e:94:da:8b:1b:ad:
         35:90:b7:b4:7f:c7:ac:9e:75:88:2f:46:82:e7:c4:ce:ac:3d:
         46:03:41:63:9c:d5:87:54:f7:31:07:bb:b3:22:0c:6a:05:36:
         ae:ff:c2:b6:da:f0:94:3f:6e:ee:1f:37:20:99:96:2e:e6:28:
         72:90:e7:a1:2e:c4:6d:22:6c:9d:8f:50:9e:ed:b1:d6:e9:e5:
         b8:61:a0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:46:57 2026 by rpki-client