Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
File:                     yZE15YfLs4vh63tt6cSAKdBF0nM.mft (raw, json)
Hash identifier:          riKRkHFHXjKwfritphkBMU17rmtdg9/ATGBfWtE76Gg=
Subject key identifier:   47:04:66:A3:EC:A9:65:C0:B9:88:05:D2:6B:B7:47:84:F0:D9:07:06
Authority key identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
Certificate issuer:       /CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Certificate serial:       019FA25FF40F9B9BA719E0B3D7D9E8BD7FFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
Manifest number:          0723
Signing time:             Mon 27 Jul 2026 07:00:25 +0000
Manifest this update:     Mon 27 Jul 2026 07:00:25 +0000
Manifest next update:     Tue 28 Jul 2026 07:00:25 +0000
Files and hashes:         1: Y5vED9_-DcGMaaxbEGOZus8MwVQ.roa (hash: G2iq16qjDO2AmE19u6Mdnenb3I/Kvxji/seB7NO5CFY=)
                          2: gKtjzQMB06yDauEd9zVELt-Geqk.roa (hash: ON0aCx2enNugObjEPugyFFI494d+5BTaKTrArKDjsJI=)
                          3: sLC5YO5xONWk4v-wyFAtQfaIubc.roa (hash: RnXdiuhlkryBeMlrPXhg5Tc0W7BvyjnuvWyXURl030k=)
                          4: yZE15YfLs4vh63tt6cSAKdBF0nM.crl (hash: QAdefD75FW6BEq/ixlHvre7MqV/We/kpShxE4/8pcGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:5f:f4:0f:9b:9b:a7:19:e0:b3:d7:d9:e8:bd:7f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c99135e587cbb38be1eb7b6de9c48029d045d273
        Validity
            Not Before: Jul 27 07:00:25 2026 GMT
            Not After : Jul 28 07:00:25 2026 GMT
        Subject: CN=470466a3eca965c0b98805d26bb74784f0d90706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:17:ea:08:51:1e:54:27:92:f1:f2:87:ce:61:
                    75:8a:1c:7e:96:53:5a:ad:a2:a3:47:be:d1:57:fd:
                    da:25:d3:1a:7d:8e:80:e3:13:8c:8f:69:dc:ed:1b:
                    34:c5:59:e8:66:4b:cb:bc:82:e7:ac:16:41:4f:af:
                    0d:77:d2:2e:e4:39:f9:63:61:4d:fe:5c:68:89:1c:
                    6a:a7:36:1d:e0:17:ca:1a:99:34:9f:cc:5b:1d:06:
                    67:82:8d:6c:4d:84:69:cf:7e:68:36:83:3d:68:ad:
                    23:5f:c9:1c:62:df:88:21:b8:90:8a:d6:b0:1a:23:
                    61:fb:6b:58:e8:be:96:f4:0d:57:c0:83:d2:ce:68:
                    e6:fa:74:a5:8c:d5:45:f6:88:6f:e3:aa:b2:7a:af:
                    47:bb:41:57:10:76:85:9a:2d:78:2a:d0:3e:40:82:
                    da:4f:e2:76:f1:c3:2f:4e:66:2f:05:a3:25:23:43:
                    6f:13:a8:a4:5e:6f:7d:ba:c8:d8:ba:93:b2:01:cb:
                    ab:2d:70:d6:fa:64:1f:2b:32:fd:ce:59:27:7b:6f:
                    9b:88:f1:ec:d8:8b:ed:4e:45:04:33:16:64:d7:5e:
                    c5:51:04:1c:e7:60:73:e6:9a:5d:f2:ae:db:43:7b:
                    f4:52:fd:85:7c:f5:a2:ba:9f:aa:e7:0c:87:5f:bf:
                    0a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:04:66:A3:EC:A9:65:C0:B9:88:05:D2:6B:B7:47:84:F0:D9:07:06
            X509v3 Authority Key Identifier:
                keyid:C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ff:7c:13:c6:1b:72:f3:82:71:66:6d:43:ae:26:c7:42:73:
         ca:c2:e5:79:99:5c:71:45:24:10:ac:1a:e8:04:7b:a7:dd:c8:
         31:3a:e6:bc:9e:9b:c6:da:1c:39:74:b2:a9:32:c9:37:a1:06:
         c9:1f:6f:fa:0b:55:2a:e2:bb:00:80:02:82:f5:b9:a1:6d:66:
         bd:be:80:54:b0:a2:e8:75:24:76:56:1d:e0:0c:3c:33:59:a4:
         6a:8f:1f:a6:e0:22:a8:7a:b3:7b:c0:1a:b5:a3:34:2d:7b:d5:
         89:1f:f0:5d:7b:96:a1:81:6f:9b:a8:90:02:6f:55:d5:71:d6:
         f2:6d:cd:32:46:88:06:bb:d7:ed:c2:37:91:cb:25:40:98:31:
         9e:ae:74:48:d9:89:0c:24:2f:8f:35:a1:77:74:be:ee:76:13:
         02:96:12:c6:c6:4b:8d:01:14:af:b3:10:bd:50:a0:a6:6b:a6:
         c8:16:d9:e8:49:da:2e:e9:71:7b:77:f6:bb:4c:6c:3a:b6:07:
         93:2c:82:bd:5f:92:e7:ba:e4:80:ec:af:11:14:47:54:fc:55:
         18:aa:c0:24:4f:ce:fc:cd:13:e3:d1:a8:56:1c:7b:e6:c4:92:
         46:8f:03:d1:fc:12:76:84:5d:e5:3a:07:77:f8:ed:39:32:78:
         eb:45:1b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:15:04 2026 by rpki-client