Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
File:                     YuJWVsULslT1gHfRuWbkdLFjR68.mft (raw, json)
Hash identifier:          dlVNXxlkN33rWyRGRdStXA19vseV9BZaOCTt8gS4Zsg=
Subject key identifier:   D7:1D:47:5E:C4:CA:F0:FF:71:0A:F9:F6:4B:CD:D4:A2:FE:2A:4B:9D
Authority key identifier: 62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
Certificate issuer:       /CN=62e25656c50bb254f58077d1b966e474b16347af
Certificate serial:       019F85D62871ECE1D3B4EF75EE9A6EFB5B0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
Manifest number:          19C0
Signing time:             Tue 21 Jul 2026 18:00:32 +0000
Manifest this update:     Tue 21 Jul 2026 18:00:32 +0000
Manifest next update:     Wed 22 Jul 2026 18:00:32 +0000
Files and hashes:         1: WDz5bqq9s7Sot6DZTyns7ujP_G0.roa (hash: jp6a/AgGzZ0JdGjudIFSMOs/t8/efE23HGLQbGbVGxE=)
                          2: YuJWVsULslT1gHfRuWbkdLFjR68.crl (hash: 0KqXzwrlkgkHE+HukCGgI2WmeilPlPw5x9Mjo1x4C8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 15:27:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:d6:28:71:ec:e1:d3:b4:ef:75:ee:9a:6e:fb:5b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62e25656c50bb254f58077d1b966e474b16347af
        Validity
            Not Before: Jul 21 18:00:32 2026 GMT
            Not After : Jul 22 18:00:32 2026 GMT
        Subject: CN=d71d475ec4caf0ff710af9f64bcdd4a2fe2a4b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e5:75:46:75:12:6e:1f:06:10:67:ca:db:30:
                    88:b3:40:dc:85:3b:94:7f:0f:be:82:2e:88:cb:67:
                    4c:4b:17:20:2d:8a:5d:ba:28:9e:a1:1e:2b:05:c4:
                    f5:fe:32:36:fd:7e:4f:1a:fb:27:2f:2a:f7:ae:59:
                    35:11:d4:6d:53:61:5b:9c:9d:6b:c1:6d:a9:f5:e7:
                    84:fd:1e:85:89:6a:61:62:bb:6d:62:c1:b5:7f:6f:
                    09:12:3a:ef:48:c2:aa:aa:8e:22:2b:ed:5f:a3:b7:
                    f2:e2:23:2a:52:b5:25:03:bc:fd:1b:e6:91:1e:46:
                    d7:40:35:9e:37:c6:5b:61:e2:a0:31:7d:5a:14:f0:
                    93:f6:07:e5:e0:15:d1:0c:f5:a0:9e:9a:87:69:b3:
                    23:81:65:c2:f1:40:a5:5f:57:67:5f:73:a8:79:e5:
                    8e:61:8b:76:a9:7b:92:a4:e9:70:94:2a:c0:90:a4:
                    e0:62:6c:72:10:53:bf:9d:18:58:b4:35:ea:bf:02:
                    f3:96:b5:4d:bc:69:a4:6e:2d:f5:06:27:e7:f4:48:
                    cd:ce:bd:e9:7f:a3:a0:3d:98:0a:86:ae:ed:cd:b5:
                    ff:a6:65:b3:8e:3b:ec:7d:69:61:d0:1d:18:7e:5d:
                    3d:1a:f6:3a:bd:9c:1b:d3:34:50:6a:38:64:30:6b:
                    cc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1D:47:5E:C4:CA:F0:FF:71:0A:F9:F6:4B:CD:D4:A2:FE:2A:4B:9D
            X509v3 Authority Key Identifier:
                keyid:62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:fe:2e:28:9e:52:7d:86:6f:d0:2c:90:46:9a:d4:3e:9a:95:
         43:01:85:87:d2:76:fc:42:64:23:ba:9f:d7:03:6c:45:34:42:
         d4:4f:f9:0e:ff:00:4e:e0:5e:40:7d:75:dc:5c:68:aa:28:71:
         fe:57:12:b7:43:9f:00:3f:53:0a:21:e5:fb:cd:e0:2f:8f:57:
         6d:86:e9:25:5c:ba:38:3c:a2:93:e0:a3:37:55:67:35:1a:1a:
         f5:ab:b6:c7:4c:cc:36:29:bf:f3:fc:5f:2b:eb:ec:f9:b7:0b:
         bc:ae:0a:27:dd:ce:6f:a6:93:46:0c:8d:56:ce:2f:54:fb:98:
         05:98:23:d0:67:d2:88:83:fd:f5:f4:75:c1:89:e8:8c:63:f7:
         0c:3d:bd:c0:33:4c:fa:8d:06:53:57:7d:a3:64:a6:f0:14:29:
         af:37:c6:b2:fd:32:2c:97:ae:ef:f4:94:a5:83:89:21:06:2e:
         ed:da:3e:5c:e8:3a:88:42:dd:f3:3b:f6:27:14:f7:c5:d8:22:
         6a:7d:99:ac:34:98:65:1b:b2:40:77:13:ca:b9:31:61:bb:b0:
         9f:0a:6c:9c:08:c7:0d:df:45:c7:92:de:22:9f:63:9d:e8:62:
         c7:4b:44:a5:4a:15:39:10:f3:8a:05:e1:26:c1:a8:eb:57:79:
         7c:f0:6a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:07:31 2026 by rpki-client