Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File:                     YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier:          kZe2/NeB6rkZ23Vt/Xjkd15ckPCvKW9zaof9FadPNzM=
Subject key identifier:   93:AF:E5:47:79:FF:DA:90:3D:43:31:2B:E8:31:D5:91:28:1D:DB:6D
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer:       /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial:       019FA304AA2C945D9CC47AADC35ECFEC5D56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number:          11CB
Signing time:             Mon 27 Jul 2026 10:00:19 +0000
Manifest this update:     Mon 27 Jul 2026 10:00:19 +0000
Manifest next update:     Tue 28 Jul 2026 10:00:19 +0000
Files and hashes:         1: 3ExD7nKcCYNGR68ATw2vAixFfPw.roa (hash: PRfZSceh3jh1FTBUXpKPdAPCRhio/qZFjdbYjEajKSY=)
                          2: EyM4wivbpkVOKedhB97D1lcXuLE.roa (hash: ztSlxeB82WQ5Ip3+c+gguWX+u1grG8UgGeYQslXQHlM=)
                          3: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: Wty2yFHc2XE8ETVnrOCtfq4fwYwuiu35qQG2yoWpUH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 10:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:04:aa:2c:94:5d:9c:c4:7a:ad:c3:5e:cf:ec:5d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
        Validity
            Not Before: Jul 27 10:00:19 2026 GMT
            Not After : Jul 28 10:00:19 2026 GMT
        Subject: CN=93afe54779ffda903d43312be831d591281ddb6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a0:bf:4b:f0:3a:47:3a:bc:0a:0c:44:34:a0:
                    e3:6c:98:8f:aa:10:ba:8b:09:de:06:76:8e:88:93:
                    25:88:1d:f0:00:84:a6:df:ec:88:30:cd:50:44:ab:
                    47:f6:b1:63:5c:76:65:55:7a:ef:68:e4:70:d3:6f:
                    1b:a3:60:1c:3b:36:89:e4:c8:2e:26:27:71:b0:4f:
                    80:d7:b8:bc:d7:0a:46:b1:25:a1:e1:8c:cf:a3:0c:
                    1b:4d:1a:1d:5c:aa:1e:c1:58:6f:c0:75:42:ed:75:
                    76:6c:c7:f8:9a:8b:0f:78:6f:aa:37:1f:45:53:8b:
                    5e:1b:13:4b:dc:39:38:15:12:de:a3:ff:80:97:90:
                    dc:65:d7:3d:67:53:a7:a4:98:8b:91:15:7c:f4:56:
                    46:34:6a:1a:b3:7b:b9:8a:61:f7:04:e0:e6:6d:33:
                    49:7e:89:1c:f5:b5:fb:e5:5c:22:a6:4a:84:02:4f:
                    ae:f1:5f:93:90:87:bb:45:ba:d0:a6:db:43:03:d4:
                    cf:c9:4b:0e:d2:e6:76:49:fc:be:ec:2e:00:a4:b5:
                    d6:75:d5:e3:6b:c2:91:59:ae:84:b2:d5:91:aa:71:
                    86:61:58:37:e8:66:f6:c5:42:a9:a3:2f:78:da:09:
                    f1:90:a0:53:dc:bf:88:49:2b:2d:d5:72:b9:91:f9:
                    9a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AF:E5:47:79:FF:DA:90:3D:43:31:2B:E8:31:D5:91:28:1D:DB:6D
            X509v3 Authority Key Identifier:
                keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:55:db:d5:6c:f6:e8:c2:76:ac:75:09:12:3f:f5:ce:ff:48:
         08:54:9e:4e:84:ab:cc:b9:9e:53:65:3e:b7:70:4a:2d:57:73:
         fd:fe:04:9b:3c:15:f9:f0:0b:69:a6:2f:cb:45:33:dd:e3:cf:
         8a:5a:bf:46:89:ae:38:66:e1:12:91:6e:87:ee:7c:c2:65:d9:
         56:82:86:9c:fc:63:9d:a2:5d:6f:a9:d8:4e:d8:71:6c:e1:53:
         3f:e9:f6:4b:a4:e7:30:ac:40:cb:30:88:0c:97:c9:72:23:c6:
         53:08:b4:1c:f5:c7:1c:1a:f5:f0:65:6f:69:ea:de:83:2d:76:
         a1:c7:c7:ef:3d:e4:51:81:f7:ea:70:21:fd:a7:af:ca:81:e3:
         28:58:00:80:3e:9f:90:0e:cb:5c:f7:03:c3:7f:3c:6c:48:fc:
         de:a9:e2:fc:2c:67:e6:75:28:d8:30:73:41:ce:d1:97:60:dd:
         f2:c5:8a:8f:84:7b:b0:ee:6b:52:79:8c:be:96:2f:ef:7c:35:
         4d:d3:7c:66:f4:eb:d2:76:43:4e:d0:bb:2b:a3:fe:5a:07:ca:
         ad:ea:08:4c:10:85:6b:0e:b2:9b:82:d1:58:be:f6:6a:fd:a2:
         8f:52:4d:f1:b5:31:28:7f:ad:01:2a:53:4e:12:d4:75:a0:46:
         cf:9b:6b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:07:41 2026 by rpki-client