Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
File:                     ymTavZvEZIX2qRY27edT2jjI82Q.mft (raw, json)
Hash identifier:          5hq8HtTz8VUqnJcGejw3iHSmckr5uK9lucZAJDRATJw=
Subject key identifier:   F2:9B:61:00:AD:A3:D2:63:8D:20:2F:92:84:7F:07:13:AE:37:B3:94
Authority key identifier: CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64
Certificate issuer:       /CN=ca64dabd9bc46485f6a91636ede753da38c8f364
Certificate serial:       019FA14DB52C93F6E70F33CF54C4DEE583A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
Manifest number:          19CF
Signing time:             Mon 27 Jul 2026 02:00:52 +0000
Manifest this update:     Mon 27 Jul 2026 02:00:52 +0000
Manifest next update:     Tue 28 Jul 2026 02:00:52 +0000
Files and hashes:         1: NkhNpoa7Mava_QXc8cJpKFD-6x0.roa (hash: NHb2sZxdiKyxH3v4fGC8EWYo7uPMfDDnkonpIAR9yAY=)
                          2: ymTavZvEZIX2qRY27edT2jjI82Q.crl (hash: veDEdUo6uZq4y2j5JWwabli2hax7FL25iBOcREtsFvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4d:b5:2c:93:f6:e7:0f:33:cf:54:c4:de:e5:83:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca64dabd9bc46485f6a91636ede753da38c8f364
        Validity
            Not Before: Jul 27 02:00:52 2026 GMT
            Not After : Jul 28 02:00:52 2026 GMT
        Subject: CN=f29b6100ada3d2638d202f92847f0713ae37b394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a5:95:4b:14:bc:e8:49:87:fd:5e:29:4b:75:
                    82:c7:7f:46:3e:6c:82:df:33:d9:0a:b1:23:6f:41:
                    9e:a3:03:cd:dd:9e:0d:00:52:b4:26:11:85:e6:40:
                    1a:26:7a:93:5c:6b:20:47:de:bd:04:da:4d:5c:b4:
                    7b:a9:83:b6:11:02:02:aa:bb:2f:2e:fb:38:0a:32:
                    90:8e:7f:0d:eb:08:fe:d5:8a:4f:8b:f9:a2:69:8e:
                    5e:d7:e5:ef:76:58:e6:3d:cb:f2:f9:70:d3:0b:a2:
                    58:71:73:01:af:f6:c0:9a:c5:c0:a2:2b:94:9e:5c:
                    16:52:ff:ef:b7:e0:2a:6e:a6:81:66:66:ff:c1:e1:
                    f9:dd:67:c2:9b:5f:5d:bb:df:a6:0f:6c:eb:11:1e:
                    d5:ad:1a:bb:1e:ab:b0:89:39:2f:cc:1c:23:c3:e9:
                    65:9b:1e:a2:1e:d5:0c:d3:29:be:bc:92:03:1d:26:
                    66:a5:72:bb:78:28:86:2b:91:e2:9b:f1:c8:15:70:
                    66:f0:1f:45:a7:c6:6c:0f:c2:6b:e0:b2:56:7c:a0:
                    06:92:b0:8e:97:aa:a1:7b:c9:09:4c:25:25:31:a1:
                    2e:11:68:a1:12:f0:d7:96:90:82:70:39:80:fd:f3:
                    b9:98:04:06:6a:e7:c8:66:9d:16:31:6d:63:34:f2:
                    d8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9B:61:00:AD:A3:D2:63:8D:20:2F:92:84:7F:07:13:AE:37:B3:94
            X509v3 Authority Key Identifier:
                keyid:CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:d6:3e:f8:c5:a1:1b:ac:38:95:e2:a0:24:51:cc:22:3f:67:
         f3:6f:d4:fb:bd:93:5c:ce:a8:42:da:83:b1:e8:f3:d6:ad:99:
         20:b5:64:fe:07:f9:c8:9d:47:ac:4a:c5:d9:b6:ad:a6:38:24:
         c1:7a:a2:58:84:a8:73:0b:2e:af:3e:12:5d:23:44:33:b4:e8:
         af:1b:1b:5d:3a:ae:52:ff:2f:b6:9d:c9:7b:7c:d9:3f:7c:4b:
         7d:7f:bf:28:af:31:70:a2:43:92:5f:7f:1c:7e:ca:f6:80:d7:
         a5:02:d8:44:35:d3:f8:5d:fd:d4:a5:34:a9:b8:9e:06:a0:33:
         00:2a:88:2c:04:f6:63:d4:e9:7f:3b:47:3b:56:82:bf:2c:9c:
         00:89:de:c5:f8:19:72:ea:1e:1a:f3:ea:6d:52:24:ec:ec:82:
         0e:98:7a:ea:a0:ac:98:78:2d:79:06:15:1a:42:a3:7a:14:31:
         b0:1d:eb:2c:cb:91:e5:58:ae:32:5d:fb:28:7b:ee:f9:a9:00:
         94:9a:98:39:9d:8e:5d:bb:99:80:60:aa:18:14:05:3d:b0:79:
         e1:9f:16:7e:66:95:de:7b:5e:fa:56:92:d4:fc:b9:71:74:19:
         ac:76:41:ef:9c:34:2d:d0:ec:3f:79:28:a3:5b:10:ca:2a:04:
         22:8e:af:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:51:03 2026 by rpki-client