Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
File:                     yMyL2gxj59LWXBntcEO1oteRwfE.mft (raw, json)
Hash identifier:          bHtACb4Z3ySdLN83uT4994nV8rn3uWq4DRDVr6wea+c=
Subject key identifier:   BD:C3:CE:75:AB:9C:3C:0A:52:13:CC:F0:6C:77:D0:E7:76:ED:E1:13
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Certificate issuer:       /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial:       019F82304F8722DDD8687843310A69A00442
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
Manifest number:          0943
Signing time:             Tue 21 Jul 2026 01:00:31 +0000
Manifest this update:     Tue 21 Jul 2026 01:00:31 +0000
Manifest next update:     Wed 22 Jul 2026 01:00:31 +0000
Files and hashes:         1: LRUYfg6USsKj2QtL2hsG4I_Xo-c.roa (hash: 2GklllL0UBZh20Fr2fNv23BY6CPenyVwkECk1lNGsHo=)
                          2: S83M800fbELdZQf9hRfrhc7ekM0.roa (hash: t/V/LOUUpNTS7J4UMag24vHAzDu0bcjylpu2q8pupgk=)
                          3: yMyL2gxj59LWXBntcEO1oteRwfE.crl (hash: tgw8uFTWszJBzQsrnYGy55wbYBgF5F6TSKxFkWb3F3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:82:30:4f:87:22:dd:d8:68:78:43:31:0a:69:a0:04:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
        Validity
            Not Before: Jul 21 01:00:31 2026 GMT
            Not After : Jul 22 01:00:31 2026 GMT
        Subject: CN=bdc3ce75ab9c3c0a5213ccf06c77d0e776ede113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:56:3d:d6:db:b7:81:c2:e6:f7:35:a1:38:14:
                    89:d7:22:6a:c6:9f:35:66:80:f1:38:70:2e:c2:aa:
                    c7:26:0c:5f:83:74:cb:5d:74:90:ce:f4:2c:44:41:
                    53:2c:d9:b8:24:e4:ed:0f:a8:35:4c:92:8d:4a:17:
                    1b:63:40:6c:58:19:a7:97:96:5d:04:0f:b5:80:25:
                    65:e4:77:b7:03:49:e9:90:6c:d9:59:ea:7a:1c:f3:
                    f2:dc:cc:b9:4f:ad:3d:12:41:dd:be:97:b3:23:4e:
                    82:4c:b5:91:36:c5:44:c0:c5:f2:37:92:ca:70:d3:
                    df:06:93:62:47:b1:be:d4:65:67:10:79:d5:c8:df:
                    29:99:f8:f8:a5:c6:06:48:e7:3a:cd:c4:e3:ee:96:
                    1f:9a:5c:c0:0a:36:00:50:3a:c1:b3:44:97:9b:80:
                    15:a1:1d:71:e1:e7:2b:43:be:38:46:60:62:d6:19:
                    9b:20:9b:e9:70:e4:01:b1:b0:3b:51:e3:e1:18:c8:
                    70:0f:fc:a5:7e:d3:d2:c0:52:71:57:3f:ed:8a:b0:
                    8a:24:d9:1d:92:7f:65:2d:63:3d:54:49:07:52:e1:
                    ec:85:c0:9e:d3:6c:be:5e:4b:5c:3c:a9:30:c5:a9:
                    d1:35:f1:a7:ce:f5:0e:e5:09:16:24:b8:81:40:c2:
                    e6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C3:CE:75:AB:9C:3C:0A:52:13:CC:F0:6C:77:D0:E7:76:ED:E1:13
            X509v3 Authority Key Identifier:
                keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:7d:8c:af:3f:b9:ec:5f:6d:af:26:c8:07:89:72:f2:81:ac:
         a2:15:27:c5:82:b7:b0:25:e8:70:ef:ed:52:99:94:22:52:ff:
         23:3d:cc:ca:5f:58:14:f4:fd:8f:c1:72:17:6d:63:e3:3f:a3:
         6e:71:55:18:9f:25:c6:b7:dc:4b:e4:b9:87:ca:4b:07:d8:5e:
         47:d6:4b:54:c3:00:2b:eb:61:05:fb:5a:65:bd:4b:a4:a5:0c:
         c2:67:f4:40:c8:3f:04:a7:36:55:be:79:1d:09:65:eb:f6:da:
         6c:d9:c8:60:6c:bd:f6:be:28:f3:7d:cb:d4:52:70:bf:85:31:
         3d:3b:a7:de:5d:ef:d1:b4:e3:57:ee:db:98:14:98:70:1d:62:
         1a:41:f0:15:70:36:99:b8:9e:c9:88:e3:01:6d:a6:b1:3f:a5:
         63:cd:f8:bc:93:d4:dd:0f:5b:e4:a1:99:dd:2b:12:b9:7f:9a:
         6c:2f:f2:8b:c7:a2:54:e6:d2:56:a7:6f:64:30:7b:f9:e8:dd:
         58:db:d5:87:3b:63:74:a6:5a:1c:2f:18:7b:87:c8:ef:30:7d:
         25:bc:05:5c:0f:fe:f3:06:74:9d:1e:43:0f:cb:19:2c:41:20:
         c5:94:2d:96:34:be:e8:8e:fb:67:1e:2f:db:ff:c4:eb:52:d7:
         e2:e0:44:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+CME+HIt3YaHhDMQppoARCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4Y2M4YmRhMGM2M2U3ZDJkNjVjMTllZDcwNDNiNWEyZDc5
MWMxZjEwHhcNMjYwNzIxMDEwMDMxWhcNMjYwNzIyMDEwMDMxWjAzMTEwLwYDVQQD
EyhiZGMzY2U3NWFiOWMzYzBhNTIxM2NjZjA2Yzc3ZDBlNzc2ZWRlMTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFY91tu3gcLm9zWhOBSJ1yJqxp81
ZoDxOHAuwqrHJgxfg3TLXXSQzvQsREFTLNm4JOTtD6g1TJKNShcbY0BsWBmnl5Zd
BA+1gCVl5He3A0npkGzZWep6HPPy3My5T609EkHdvpezI06CTLWRNsVEwMXyN5LK
cNPfBpNiR7G+1GVnEHnVyN8pmfj4pcYGSOc6zcTj7pYfmlzACjYAUDrBs0SXm4AV
oR1x4ecrQ744RmBi1hmbIJvpcOQBsbA7UePhGMhwD/ylftPSwFJxVz/tirCKJNkd
kn9lLWM9VEkHUuHshcCe02y+XktcPKkwxanRNfGnzvUO5QkWJLiBQMLmSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3DznWrnDwKUhPM8Gx30Od27eETMB8GA1UdIwQY
MBaAFMjMi9oMY+fS1lwZ7XBDtaLXkcHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU15TDJneGo1OUxXWEJudGNFTzFvdGVSd2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jNzQxN2MtNGNhYi00ZDUxLWI1YWQt
ZTMwMzg3YjNmMjExLzEveU15TDJneGo1OUxXWEJudGNFTzFvdGVSd2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jNzQxN2MtNGNhYi00ZDUxLWI1YWQtZTMwMzg3YjNmMjEx
LzEveU15TDJneGo1OUxXWEJudGNFTzFvdGVSd2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX32Mrz+5
7F9trybIB4ly8oGsohUnxYK3sCXocO/tUpmUIlL/Iz3Myl9YFPT9j8FyF21j4z+j
bnFVGJ8lxrfcS+S5h8pLB9heR9ZLVMMAK+thBftaZb1LpKUMwmf0QMg/BKc2Vb55
HQll6/babNnIYGy99r4o833L1FJwv4UxPTun3l3v0bTjV+7bmBSYcB1iGkHwFXA2
mbieyYjjAW2msT+lY834vJPU3Q9b5KGZ3SsSuX+abC/yi8eiVObSVqdvZDB7+ejd
WNvVhztjdKZaHC8Ye4fI7zB9JbwFXA/+8wZ0nR5DD8sZLEEgxZQtljS+6I77Zx4v
2//E61LX4uBEjg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:58:27 2026 by rpki-client