Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
File:                     y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft (raw, json)
Hash identifier:          mGkC95BzJpzZt77h7SvUdZQaGZXz89lRXFPJemhjbUU=
Subject key identifier:   1E:5C:1A:44:EE:9B:AF:BA:E9:89:83:63:19:FE:C0:1B:DA:CB:21:18
Authority key identifier: CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
Certificate issuer:       /CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Certificate serial:       019F86B1DADAA09EA9C46DC32071ED460AB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
Manifest number:          1656
Signing time:             Tue 21 Jul 2026 22:00:30 +0000
Manifest this update:     Tue 21 Jul 2026 22:00:30 +0000
Manifest next update:     Wed 22 Jul 2026 22:00:30 +0000
Files and hashes:         1: u2N7udWHL38xXKaM9zlWB4W-ME4.roa (hash: SRPpRQyERN5FsdBAYlcVxUC95a7rxraNn372ElkInaA=)
                          2: y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl (hash: 8jvEAwxY5EeGOQE2r49yDfTDbuvyKDCC72mw8/gGZ60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:b1:da:da:a0:9e:a9:c4:6d:c3:20:71:ed:46:0a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb425fde747aa7fea8e7b335b46c88d238850abe
        Validity
            Not Before: Jul 21 22:00:30 2026 GMT
            Not After : Jul 22 22:00:30 2026 GMT
        Subject: CN=1e5c1a44ee9bafbae989836319fec01bdacb2118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:81:d2:e5:2c:0a:ed:a2:10:5f:8c:c8:84:7c:
                    7e:19:2c:5e:bd:31:5b:dc:93:00:ee:5d:a5:e0:60:
                    48:2d:94:20:d0:ac:f3:35:b1:9f:c1:5f:dd:b7:fa:
                    be:d7:c8:86:1f:ca:ea:ad:9e:24:b4:a2:b1:62:71:
                    d7:c3:af:d5:81:62:21:36:2a:d8:12:74:e9:0f:18:
                    df:01:ce:66:dd:c4:3c:80:e3:fc:53:19:c2:7b:00:
                    4b:94:98:7e:1b:0a:f8:bf:e1:ad:d1:27:3a:01:4b:
                    c8:c4:eb:fe:3c:51:67:45:4a:1a:20:1a:87:87:66:
                    18:ad:06:0d:27:e9:65:94:7f:37:6b:f7:19:11:a5:
                    ad:28:c8:22:16:ac:b7:45:c0:9f:0d:33:0d:b9:e6:
                    91:fb:31:33:6e:8b:30:91:3f:27:5b:b7:a3:76:80:
                    21:35:ff:e1:ec:0c:2c:8a:f2:bb:73:44:a8:c0:d5:
                    34:58:5d:1f:98:fe:b5:bf:7a:91:5a:fb:9c:68:2f:
                    56:f2:8f:7b:6c:bb:ac:44:0d:a9:86:a5:65:e7:ff:
                    c7:33:1b:f0:f6:70:be:37:e6:c6:48:d1:be:85:67:
                    d5:70:28:38:d3:73:c9:9d:cd:b7:f6:57:ff:35:0e:
                    ed:39:f9:41:67:73:b8:0e:c7:8c:77:37:8e:c6:c1:
                    9f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5C:1A:44:EE:9B:AF:BA:E9:89:83:63:19:FE:C0:1B:DA:CB:21:18
            X509v3 Authority Key Identifier:
                keyid:CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:7d:10:3a:58:f8:3a:2b:a0:72:29:c7:16:11:87:c3:f3:34:
         d4:30:c2:ff:e4:07:60:2b:1a:29:2c:e3:e1:fd:99:40:05:7e:
         ca:96:5a:4f:da:95:a2:d3:b3:b2:97:dc:b0:10:76:25:4d:19:
         d0:69:f7:91:06:73:65:57:68:da:6f:9b:87:32:cb:77:b2:e9:
         cf:60:09:19:42:cb:7e:9c:4a:6c:40:92:e1:40:ee:ab:c2:3c:
         30:0c:2b:4e:64:53:5f:be:49:38:0e:29:41:b1:33:db:2c:26:
         a8:18:90:02:5c:c3:2c:48:c3:df:51:49:00:e8:1f:39:a5:24:
         ef:d0:2a:fc:be:ff:38:5b:74:4a:90:82:9d:9f:39:ad:4f:ce:
         cf:57:14:c7:a3:b4:7b:97:f3:92:29:84:0e:7c:61:a6:0d:9d:
         a3:f9:ad:b6:30:72:89:dc:14:ac:43:a6:94:72:e4:ee:35:dc:
         b7:13:0a:f4:25:cf:4d:00:89:5d:bc:83:8a:c0:84:e1:f1:fe:
         84:e4:47:20:68:ca:ee:84:78:7d:b8:2e:fb:aa:aa:6d:0d:c1:
         19:09:53:95:93:88:4a:d6:15:a6:3f:7f:a3:b1:8b:b6:48:49:
         51:b3:e6:61:41:f9:ce:45:e6:88:ca:3a:ea:2f:98:c5:47:c5:
         c0:56:71:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:22:46 2026 by rpki-client