Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
File:                     YDJcIdL6_nQzmNweVXRDMoARBGk.mft (raw, json)
Hash identifier:          NKAvx6pRQiQBFwz3Zx8EkJ0X/Gh6GqmE61WOdKbgq9s=
Subject key identifier:   89:80:F8:A9:CC:D0:2E:CD:3A:58:67:5D:62:6C:89:8B:A6:86:27:24
Authority key identifier: 60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
Certificate issuer:       /CN=60325c21d2fafe743398dc1e5574433280110469
Certificate serial:       01A01A1CAAC6866980F797677795DDDA7F43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
Manifest number:          18BF
Signing time:             Wed 19 Aug 2026 13:01:21 +0000
Manifest this update:     Wed 19 Aug 2026 13:01:21 +0000
Manifest next update:     Thu 20 Aug 2026 13:01:21 +0000
Files and hashes:         1: YDJcIdL6_nQzmNweVXRDMoARBGk.crl (hash: 8R7pUApYagZ03W2alnwGdgwg2OvPF0o1n99fAEw453o=)
                          2: ZGMDMaaeutNnkXyJL58734MtHlg.roa (hash: Zs6W0mlBy5j5neBEaMNbSPEex6wUKIOiG0C8/ZE4ktw=)
                          3: b5JaXMr4GIBvT4KCIP7BI-wUSZI.roa (hash: vRg65JmrVs2QhtYFXLwraN6iw4o7UcfzdNjLDeVLhok=)
                          4: jKshf8wnc15011tXTFSj3TTXJFA.roa (hash: K6mzJUE9dYVEi81Gnv2fYao7OX/tyLrwWkjFdI+z8Z0=)
                          5: qPyrPHOcj4AsJ76uDNoQbJBu-3A.roa (hash: icQiWI2POs5a9KmLU/wFkbzLvsrXEhv8Owk5IzrA7+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 20 Aug 2026 13:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:1a:1c:aa:c6:86:69:80:f7:97:67:77:95:dd:da:7f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60325c21d2fafe743398dc1e5574433280110469
        Validity
            Not Before: Aug 19 13:01:21 2026 GMT
            Not After : Aug 20 13:01:21 2026 GMT
        Subject: CN=8980f8a9ccd02ecd3a58675d626c898ba6862724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:af:32:b6:29:19:86:f5:c1:1f:04:5e:0c:28:
                    3a:29:12:26:3d:0c:63:08:88:7f:96:d3:4a:47:8c:
                    b6:d0:99:81:cb:9f:2a:75:f1:0e:79:39:cc:e5:6a:
                    d3:9d:bd:d1:a6:86:40:b3:a1:3a:27:f2:bd:1a:ab:
                    be:b6:8f:b8:0d:b5:66:d7:46:a0:a2:ae:25:d6:c0:
                    5a:22:62:9d:35:0c:26:82:f1:0f:d4:c2:7b:5e:4a:
                    72:f0:b3:50:c7:60:b9:3e:c5:62:8e:9a:f5:4b:c8:
                    69:14:7a:ad:77:8d:37:a9:74:84:d5:ae:2f:bd:80:
                    5d:a5:36:4d:2f:64:c4:da:a1:e9:f7:79:82:37:9b:
                    24:b8:64:e7:1b:3f:3c:7b:ba:95:54:0a:78:05:b3:
                    83:15:b1:9a:76:af:71:03:4f:7d:2e:f9:a4:5d:c5:
                    59:83:9c:e3:a2:01:a1:a1:2d:6d:52:16:08:95:9f:
                    25:7d:0a:56:3b:7c:ba:6b:19:15:f8:5e:80:6e:a2:
                    99:6a:99:7c:d4:ce:13:b9:13:6e:86:38:53:65:a5:
                    83:3a:64:fe:07:b1:b4:e9:79:55:0d:a7:c0:fd:f6:
                    8a:c0:7e:57:eb:9f:ae:d3:5d:4e:c0:f8:9e:ea:0a:
                    49:d5:2f:31:66:26:80:a0:bc:f9:5f:81:32:02:c3:
                    76:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:80:F8:A9:CC:D0:2E:CD:3A:58:67:5D:62:6C:89:8B:A6:86:27:24
            X509v3 Authority Key Identifier:
                keyid:60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:39:ea:b0:39:01:13:56:80:fb:cf:7e:c7:22:e7:d3:5a:bf:
         e5:4c:d6:52:97:d7:f1:ad:4e:b9:fc:a4:ed:40:05:dd:81:9f:
         8f:09:b1:88:b3:16:53:2f:06:11:9b:6e:64:43:30:0f:c1:0b:
         a5:15:65:9f:71:36:06:82:41:85:98:f1:0f:b2:aa:f4:f1:b2:
         ba:4d:5f:2c:dc:17:7f:e4:e1:78:ed:10:38:ee:53:bb:24:cf:
         e8:72:f8:ca:7b:7c:ea:81:22:0f:5f:5e:5a:97:05:ed:7b:3c:
         f1:d5:d7:b8:aa:46:ea:ad:93:e0:c7:73:fe:4a:b1:0f:7e:96:
         10:71:d2:67:62:7b:c7:c0:b6:b7:e7:79:2f:f8:57:36:9b:04:
         b1:7c:d0:33:49:b7:0c:68:4b:62:b4:22:fa:c6:ba:a8:a3:cc:
         a9:e0:f9:e7:a8:5c:34:69:11:6d:e4:61:41:aa:e8:24:bb:6b:
         9c:a1:03:86:55:b9:69:5e:c7:a8:a0:31:d4:c0:b3:7c:6b:89:
         9c:90:69:93:2a:32:9a:09:f2:20:27:7a:d8:02:9a:a5:79:67:
         cc:0e:d4:28:6c:b4:6a:5c:bd:0a:7a:c3:81:5f:98:9f:35:04:
         86:3c:6e:e9:36:d4:46:84:f7:77:ed:69:f0:6c:dd:cc:b2:6f:
         e5:54:80:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 21:42:11 2026 by rpki-client