Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
File:                     yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json)
Hash identifier:          hZ3czbLRZNVaPq+oLdiwq9XF5Ie3jeUrgZM9ROZXnrI=
Subject key identifier:   B2:C6:F7:83:01:0A:BD:F9:4B:B2:C9:7B:D0:23:1E:85:9E:CA:24:35
Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
Certificate issuer:       /CN=c8184a4505b0576058fd333059bff153ae6ead5b
Certificate serial:       019FA3A9628F8ABD8867D4E7DEEF0FCB4DCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
Manifest number:          1105
Signing time:             Mon 27 Jul 2026 13:00:14 +0000
Manifest this update:     Mon 27 Jul 2026 13:00:14 +0000
Manifest next update:     Tue 28 Jul 2026 13:00:14 +0000
Files and hashes:         1: WZPWcS6HaU2HzVdr7DRxZ-pjOJE.roa (hash: F58q4gWz10PJi3pePWbZTjvTAbHmgaZfqkLlGVghmM0=)
                          2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: eM58FuJW+f2ZvmBrmxy1NHgwm7TIHyJ+TI5UySHK+RM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:a9:62:8f:8a:bd:88:67:d4:e7:de:ef:0f:cb:4d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b
        Validity
            Not Before: Jul 27 13:00:14 2026 GMT
            Not After : Jul 28 13:00:14 2026 GMT
        Subject: CN=b2c6f783010abdf94bb2c97bd0231e859eca2435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:19:68:41:a0:e2:09:24:5e:da:17:11:55:e0:
                    2c:f1:73:ad:75:0a:ed:b7:37:16:2c:3b:79:b6:b3:
                    96:4e:45:51:3e:51:78:e4:62:de:c5:68:55:1f:cc:
                    bb:f0:f9:6c:c8:15:5e:05:b2:73:88:a6:b1:32:7d:
                    99:7c:98:5e:0c:79:78:9d:3e:8a:55:88:1e:8f:93:
                    2b:a2:03:27:2a:3e:8c:66:09:e1:eb:02:5f:79:f6:
                    25:2f:17:fb:f1:61:3e:4c:6c:c1:e6:26:92:14:6f:
                    9d:52:a0:5b:05:79:a6:2b:7b:15:e7:bf:fc:05:9f:
                    02:72:4b:87:a5:ef:d9:1b:92:2f:dc:48:8d:5a:e4:
                    07:c1:9d:75:2a:0c:73:48:30:7f:d6:04:be:da:56:
                    2a:6e:92:a2:9d:61:c6:15:e6:f2:57:a2:00:dd:8c:
                    fb:cf:a3:8b:e6:dc:57:9f:49:7e:96:c8:9d:0b:95:
                    26:b9:bf:c4:d5:b1:7f:3c:df:ea:6c:0b:a7:79:26:
                    4f:c9:c1:cf:f1:da:99:9a:03:73:1f:7d:27:03:1f:
                    89:30:89:af:74:50:92:34:d0:f1:b7:7e:63:14:86:
                    80:91:bb:84:49:25:9e:f2:72:55:38:3c:dd:cd:2a:
                    9f:73:64:c1:af:98:ea:2c:ac:7a:1f:68:c0:bc:76:
                    9f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C6:F7:83:01:0A:BD:F9:4B:B2:C9:7B:D0:23:1E:85:9E:CA:24:35
            X509v3 Authority Key Identifier:
                keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:46:4c:74:b6:1e:97:af:88:87:17:b4:57:89:72:ea:e8:ba:
         95:4a:50:8c:89:b0:c4:f0:b5:9d:f7:07:20:c9:5d:7e:5f:90:
         63:d6:9a:89:50:5e:0b:91:a2:75:49:cd:bd:a8:66:f9:1b:aa:
         c1:76:38:73:c2:56:6b:94:09:6e:bd:4a:e8:99:e7:37:df:5f:
         42:23:40:95:2a:90:19:70:f7:b7:ba:b2:96:eb:57:bb:9c:e2:
         b3:a1:a9:2d:14:2e:51:b0:20:e8:d7:45:99:6a:06:89:5d:01:
         df:6f:80:18:36:5d:4d:df:92:92:b6:d6:08:ae:b8:fb:ba:4b:
         1b:14:f5:87:ba:c4:31:90:a8:59:83:46:3b:77:0f:d1:b4:b4:
         77:05:f3:10:b7:a1:d2:6f:17:e4:f4:78:1f:4f:7c:68:7f:81:
         f7:8a:64:cf:6b:b7:04:51:c2:6a:22:f9:9f:54:09:ac:e8:04:
         f2:89:69:a4:ee:78:86:8f:52:3b:a0:f4:43:f4:26:bc:95:b3:
         5c:01:3f:fe:07:1a:5f:81:4a:a5:77:77:5a:d8:cf:ae:ff:93:
         cd:e4:f8:f3:2f:8a:9c:c7:01:50:6b:f7:de:58:16:5a:a0:1e:
         e5:3c:25:d4:bb:20:f0:c4:ad:ec:fa:43:46:c9:85:b9:b5:ac:
         35:a1:5e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:19:11 2026 by rpki-client