Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
File:                     YbHjHAn-gm_k15Ln-ohV4K05NCo.mft (raw, json)
Hash identifier:          ExrRO0GpNNXMjOUCurvXDJRFCJIaCH3iHm6ZOKCixwc=
Subject key identifier:   6E:95:27:4F:83:03:49:72:93:58:5F:2E:56:F8:3E:E2:AD:24:52:24
Authority key identifier: 61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
Certificate issuer:       /CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Certificate serial:       019FA2CF238440D55DB8F01ED76A0A93BC36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
Manifest number:          19CD
Signing time:             Mon 27 Jul 2026 09:01:51 +0000
Manifest this update:     Mon 27 Jul 2026 09:01:51 +0000
Manifest next update:     Tue 28 Jul 2026 09:01:51 +0000
Files and hashes:         1: YbHjHAn-gm_k15Ln-ohV4K05NCo.crl (hash: Ic2dg3Z5Pc6GavjLTxikg4n0BTqoz8zS+2VbQWypdMM=)
                          2: gI7wdVdEujvd9VLF4Y0d2YxxXVQ.roa (hash: /3JebFmLKobYKFETqDIlb43OxSa7E2ofJHi6zZ1wGnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:cf:23:84:40:d5:5d:b8:f0:1e:d7:6a:0a:93:bc:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
        Validity
            Not Before: Jul 27 09:01:51 2026 GMT
            Not After : Jul 28 09:01:51 2026 GMT
        Subject: CN=6e95274f8303497293585f2e56f83ee2ad245224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:88:a4:4e:d6:34:ab:1a:9a:e0:26:8c:72:0c:
                    d7:bd:79:d9:55:4f:b5:de:9a:8f:c6:5d:b2:eb:db:
                    fb:48:91:16:d4:28:68:61:04:93:26:1a:00:f0:fe:
                    ff:51:04:e3:05:72:20:d3:46:4d:79:7b:aa:be:88:
                    10:1c:2d:ef:8b:59:b1:7d:4f:2a:52:23:0f:c3:cb:
                    b4:ce:e0:26:dd:e0:f8:3f:a0:c4:30:85:0b:47:18:
                    45:22:43:5f:23:42:72:b2:e7:41:9e:39:45:eb:e3:
                    89:a8:00:29:14:11:6f:32:53:0d:45:33:71:66:d2:
                    5b:3f:25:b2:75:d6:0e:15:e2:e5:db:a4:69:36:76:
                    a7:76:47:d9:57:3f:7c:9f:a0:b2:6d:5b:44:0a:ce:
                    ea:62:f6:d7:40:c7:fc:d8:78:31:14:6a:3c:87:81:
                    14:57:14:93:dc:5f:3b:49:2a:54:b8:3e:05:a3:cb:
                    39:81:47:5f:07:53:d3:47:10:a5:d9:d7:7c:96:43:
                    16:ab:67:94:b0:69:92:77:33:d9:03:75:0d:01:29:
                    e3:35:e1:5c:0f:82:67:bf:b8:32:55:b1:28:d0:ac:
                    ee:75:1e:b4:47:44:78:8c:d6:2b:cb:e6:73:62:9d:
                    cb:68:01:c9:4c:6f:fc:aa:21:06:96:e2:03:5d:f1:
                    09:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:95:27:4F:83:03:49:72:93:58:5F:2E:56:F8:3E:E2:AD:24:52:24
            X509v3 Authority Key Identifier:
                keyid:61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:81:33:5d:4e:77:a4:1f:f0:f8:c7:c4:90:b6:6c:2d:da:78:
         67:10:5a:2a:39:52:70:0e:d0:36:e0:82:12:80:4a:95:ed:85:
         e6:61:24:bb:49:67:a7:66:03:c2:50:6e:39:21:71:53:aa:d2:
         0f:58:e9:8d:a2:94:22:38:0e:62:34:43:b1:ae:a3:be:bf:0a:
         42:98:e6:45:62:07:c9:f5:d5:f1:15:ad:27:00:fb:2d:8b:5d:
         9e:1b:90:2b:8f:75:d5:2e:e6:d3:4f:f4:2d:c1:6a:bc:e6:e2:
         98:f5:97:6e:77:7a:8f:e1:64:a4:14:cc:9c:20:c2:40:fc:ed:
         4c:ea:b6:4b:1b:3f:83:b6:be:87:04:32:d4:de:eb:49:c4:f5:
         29:0e:5f:71:37:0c:f7:ac:0a:88:93:e5:c1:29:b5:c1:7f:fe:
         8e:73:28:b3:3f:4a:b6:dc:7b:91:1f:fb:43:4d:c6:df:91:bd:
         5b:c1:ac:c7:a1:8a:93:38:f1:94:bb:de:c2:ab:40:4d:8a:54:
         a4:d2:64:42:34:55:6a:1c:f3:e7:2e:31:6e:87:4b:61:34:4b:
         ff:5f:e3:8e:56:a2:29:7d:56:ee:e2:43:f4:d5:64:39:46:6e:
         6d:9a:d4:ca:c3:09:45:59:95:46:09:98:92:71:90:3f:dc:0a:
         37:e1:54:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:34:35 2026 by rpki-client