Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File:                     yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier:          1jIMnlLuVYvyhOTmM8YoEUDIF+JT8glHb0KqIXAUbGI=
Subject key identifier:   80:90:BB:EB:C5:B4:11:88:44:B5:E6:14:ED:77:75:9B:55:67:36:CE
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer:       /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial:       019FA14DC3EE7C3853E3F38E9033A18544EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number:          14AF
Signing time:             Mon 27 Jul 2026 02:00:55 +0000
Manifest this update:     Mon 27 Jul 2026 02:00:55 +0000
Manifest next update:     Tue 28 Jul 2026 02:00:55 +0000
Files and hashes:         1: 1k7VTB7SeldaLWRNqkcJf8z7HHw.roa (hash: 3oiTUkjmYdO5UbIwN8Ds5tNRJC/IkTwk80H4gmRZk9M=)
                          2: RrLny5U_ijBVCGnLCvuUJJ18m5s.roa (hash: bpv8Zff7lwgvln+/BYJURzEncDhJwqT1vkhDlSV1O1g=)
                          3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: JZd7YkXce448xXJ9LTWpkgpp/5jHcxUAcFP1xBoLip4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4d:c3:ee:7c:38:53:e3:f3:8e:90:33:a1:85:44:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
        Validity
            Not Before: Jul 27 02:00:55 2026 GMT
            Not After : Jul 28 02:00:55 2026 GMT
        Subject: CN=8090bbebc5b4118844b5e614ed77759b556736ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c5:ad:a9:b1:d9:e9:db:8b:e0:e8:e6:4e:56:
                    4d:d6:37:74:f1:7f:e0:c7:83:d0:8c:c1:df:99:bf:
                    e7:2c:41:d4:fb:5f:95:3e:27:b2:86:9b:5e:9b:a6:
                    28:ba:88:cd:47:a7:97:51:77:55:09:90:db:08:e4:
                    da:40:87:02:ef:84:81:7d:41:67:2e:fd:cf:b7:3b:
                    7b:e9:11:c1:8e:9f:16:93:f6:85:90:bb:89:e4:3f:
                    b4:ba:9b:3c:c2:d4:02:c3:5e:eb:8d:6c:1c:80:b9:
                    2b:7b:40:1e:8d:cc:e2:1c:3c:98:fe:80:4d:c4:62:
                    71:2a:bd:f0:af:a6:ec:31:bc:ae:fb:cd:f1:c1:7a:
                    ba:9a:be:e9:d1:52:51:b9:c4:86:0e:64:98:6e:13:
                    6a:78:e7:fe:91:81:09:39:40:d2:e5:bb:99:b9:f5:
                    ed:32:2f:d0:47:dc:ed:c3:db:8d:3c:16:3e:00:98:
                    7c:1e:69:55:3d:b4:47:c0:9f:78:28:0b:0c:b1:ff:
                    6c:b4:37:1c:2d:c8:a4:8d:c9:7d:8a:db:18:4d:61:
                    81:2f:b5:fb:09:4c:4f:04:d2:bf:4e:0b:d7:7a:f0:
                    e3:3f:2c:b0:58:2d:8b:ef:24:39:b4:98:82:69:d4:
                    c2:e7:c2:8b:93:42:45:a5:46:22:c2:69:b1:db:1e:
                    56:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:90:BB:EB:C5:B4:11:88:44:B5:E6:14:ED:77:75:9B:55:67:36:CE
            X509v3 Authority Key Identifier:
                keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:36:9b:6c:f7:42:b9:69:df:fa:dc:47:43:9f:df:ea:51:e0:
         0a:d2:af:35:7c:3f:e0:ce:46:1a:78:8a:51:2c:e6:5e:6e:0c:
         7a:7c:f7:aa:07:f6:ca:7a:b5:d8:9b:1c:15:e3:6c:b0:bf:e8:
         93:6d:2d:71:e2:91:22:0c:7e:b9:3f:2f:50:01:57:76:94:c7:
         bf:43:fe:f9:23:e5:cb:92:99:61:02:c0:4f:24:fa:f6:a7:85:
         d1:93:90:93:08:89:f8:5a:88:ff:fa:60:75:c5:d1:50:a7:93:
         19:9a:8d:5c:9d:25:83:40:77:02:32:92:09:0b:be:b9:b6:72:
         c9:90:d2:92:46:05:89:14:03:8c:7a:0e:6c:bd:d6:0c:2d:38:
         6b:c4:46:38:32:c1:2a:36:77:2c:c0:b3:8f:98:c3:57:e9:40:
         e5:3a:13:08:79:9d:d3:7c:69:e0:47:9e:b1:24:4f:77:c9:f7:
         ef:f3:40:66:b2:75:51:47:31:33:28:d6:0a:c1:cd:92:83:a3:
         dc:6a:9e:fc:ca:3c:78:6c:18:1a:68:c7:65:e9:6d:ca:e8:f0:
         f1:c3:ca:73:89:ef:39:3a:02:df:d3:e6:3f:81:6c:17:4e:0e:
         3c:13:40:b5:0d:d8:3e:05:4b:44:9e:5f:f4:ed:fc:f0:67:fe:
         19:d8:74:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:47:34 2026 by rpki-client