Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
File:                     yJwsxInr5I9JBYSshm_jYsQRfnU.mft (raw, json)
Hash identifier:          Ptgiey2+WCB9t9tWilwOQXzXcWfy77cgcKAhP2erKx4=
Subject key identifier:   8D:A8:09:6F:52:38:DA:B1:1F:86:4F:68:5C:DA:36:93:B9:99:91:88
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Certificate issuer:       /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial:       019FA14DA2F49C4BD93257F2E1072BE719BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
Manifest number:          16EB
Signing time:             Mon 27 Jul 2026 02:00:47 +0000
Manifest this update:     Mon 27 Jul 2026 02:00:47 +0000
Manifest next update:     Tue 28 Jul 2026 02:00:47 +0000
Files and hashes:         1: F71lf1rO3_j_YrGDLp8vXCnWwNQ.roa (hash: 2T6cEG+G6vR7CgItj3CD3tb1JHo1M1LaioFUbAKMaFQ=)
                          2: KbGZziqCA41JgOpe8AUOSiv8rIM.roa (hash: MBAhT/6sVckMLfrlu1S3S4sTHwbcNuOAQSyBUhp+xNk=)
                          3: Lr_Xbb1THDKqD6RwPgUdUA9h3EY.roa (hash: cfMlImvmxi+0oJBR3nteg7NdpbusKTlCxQY6ByRViVA=)
                          4: Wgv3nP3KPCzK8Vc3Ujwc5tCZFEY.roa (hash: sZiUtGsuan8lIISLSvNoUUBLxQveJeIACDPYwQFWZys=)
                          5: ZkNagawyRZ70RDIXLqeICJ_NWvA.roa (hash: 1+wxgjSOWcm3+O0IK2qUtncsQ8Yyn6qzh3/LjTc9BqU=)
                          6: ba1PPFUfJQPbN0qUaPYUh_lra00.roa (hash: io880q/jxrQW2nbvQeP7+TanhHJv6EExV9pj2tnHEls=)
                          7: fotaW3reFeI2SLYUxkvM2Rp9oWU.roa (hash: 6ry4szc/4WpgdCqU6mLC/W0kQtFV5fQ4EQEyOj83ctw=)
                          8: yJwsxInr5I9JBYSshm_jYsQRfnU.crl (hash: XDH65g3MQIdQA5T8CLMDsgG+zzRODczFxmIGzksoqbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 02:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4d:a2:f4:9c:4b:d9:32:57:f2:e1:07:2b:e7:19:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
        Validity
            Not Before: Jul 27 02:00:47 2026 GMT
            Not After : Jul 28 02:00:47 2026 GMT
        Subject: CN=8da8096f5238dab11f864f685cda3693b9999188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:13:ca:df:fd:1b:7c:87:ba:ee:32:7b:5a:32:
                    87:1b:cb:d9:91:53:26:80:a9:05:65:6d:d0:a9:be:
                    29:2b:a2:e5:08:9e:a9:89:e2:b0:c0:34:d7:95:95:
                    6c:bc:5f:2f:b1:e6:90:08:dd:b0:0c:ef:bd:72:16:
                    65:30:ee:3f:5d:e9:27:4f:94:6b:0c:2e:76:4a:f0:
                    75:61:05:f0:41:74:3e:68:33:48:aa:35:46:ae:7a:
                    38:d9:f5:89:67:04:b8:99:b2:c0:bf:a7:77:f5:ca:
                    04:5c:ef:c9:63:99:5e:54:61:29:a0:15:40:d0:a4:
                    fe:ba:84:29:81:93:ee:e6:34:ab:ce:fe:4c:76:5e:
                    c2:45:57:3a:06:89:36:3f:04:ed:c4:76:91:c2:90:
                    f3:b6:3d:bd:c0:b7:44:f9:1e:38:70:0f:db:5d:ae:
                    ff:ee:86:f8:47:28:e8:e9:7c:50:2c:a1:43:4d:18:
                    dc:97:47:ba:5d:c1:fa:33:a0:3a:29:b2:55:8a:3e:
                    2d:36:96:dc:47:ef:26:03:cb:67:47:c0:ee:8a:df:
                    0f:44:01:95:7b:4c:52:12:76:5e:80:33:ca:08:f5:
                    f9:32:2a:b0:d0:52:a5:de:ce:65:f1:0a:61:03:a2:
                    83:0d:bb:88:df:9a:4e:64:f5:87:a5:37:ad:e6:fa:
                    48:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A8:09:6F:52:38:DA:B1:1F:86:4F:68:5C:DA:36:93:B9:99:91:88
            X509v3 Authority Key Identifier:
                keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:bf:4a:35:ff:ba:d5:eb:c0:e2:61:22:a1:c3:2a:59:42:ea:
         19:2f:60:77:0e:ff:f2:b0:d9:bb:c9:32:8b:a8:ad:1b:f6:47:
         4e:62:a5:dc:a3:fc:a8:1b:48:0b:00:08:ac:b1:fa:08:b4:20:
         78:a1:d5:83:d3:ca:bc:50:63:30:6a:83:18:d0:f3:b6:bd:fd:
         e4:21:41:f1:ad:f9:9a:9b:5f:5f:68:85:72:cc:3f:3a:c8:55:
         a9:dd:10:0d:1b:82:92:4d:f0:ea:a8:12:06:ee:10:d7:30:5b:
         64:f4:08:60:6a:03:67:6b:e2:cf:72:af:5e:c4:65:f7:aa:b9:
         e5:c3:8b:2e:1b:20:40:72:49:2c:2f:71:59:2e:8c:24:b4:7d:
         ff:a5:fa:14:b3:32:ae:9c:59:8f:6f:98:55:c5:fb:83:55:a9:
         49:4b:f7:9b:db:1a:ac:59:dc:91:33:c2:4a:8a:56:30:06:72:
         f1:af:9d:5c:21:81:31:2e:c7:c7:dc:37:1a:ed:10:c6:30:b6:
         68:49:73:58:a1:27:3c:d7:a5:34:b7:b9:c2:f3:63:6f:74:89:
         78:d3:1a:11:f8:90:21:e8:be:4b:c0:26:3a:53:a7:8a:e3:9c:
         65:2d:28:30:f1:2a:74:03:70:e6:13:97:7f:54:b3:4d:fb:b8:
         61:c3:32:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hTaL0nEvZMlfy4Qcr5xm7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4OWMyY2M0ODllYmU0OGY0OTA1ODRhYzg2NmZlMzYyYzQx
MTdlNzUwHhcNMjYwNzI3MDIwMDQ3WhcNMjYwNzI4MDIwMDQ3WjAzMTEwLwYDVQQD
Eyg4ZGE4MDk2ZjUyMzhkYWIxMWY4NjRmNjg1Y2RhMzY5M2I5OTk5MTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBPK3/0bfIe67jJ7WjKHG8vZkVMm
gKkFZW3Qqb4pK6LlCJ6pieKwwDTXlZVsvF8vseaQCN2wDO+9chZlMO4/XeknT5Rr
DC52SvB1YQXwQXQ+aDNIqjVGrno42fWJZwS4mbLAv6d39coEXO/JY5leVGEpoBVA
0KT+uoQpgZPu5jSrzv5Mdl7CRVc6Bok2PwTtxHaRwpDztj29wLdE+R44cA/bXa7/
7ob4Ryjo6XxQLKFDTRjcl0e6XcH6M6A6KbJVij4tNpbcR+8mA8tnR8Duit8PRAGV
e0xSEnZegDPKCPX5Miqw0FKl3s5l8QphA6KDDbuI35pOZPWHpTet5vpILQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2oCW9SONqxH4ZPaFzaNpO5mZGIMB8GA1UdIwQY
MBaAFMicLMSJ6+SPSQWErIZv42LEEX51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEt
YWYyY2ZhNjIyZDE4LzEveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEtYWYyY2ZhNjIyZDE4
LzEveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI79KNf+6
1evA4mEiocMqWULqGS9gdw7/8rDZu8kyi6itG/ZHTmKl3KP8qBtICwAIrLH6CLQg
eKHVg9PKvFBjMGqDGNDztr395CFB8a35mptfX2iFcsw/OshVqd0QDRuCkk3w6qgS
Bu4Q1zBbZPQIYGoDZ2viz3KvXsRl96q55cOLLhsgQHJJLC9xWS6MJLR9/6X6FLMy
rpxZj2+YVcX7g1WpSUv3m9sarFnckTPCSopWMAZy8a+dXCGBMS7Hx9w3Gu0QxjC2
aElzWKEnPNelNLe5wvNjb3SJeNMaEfiQIei+S8AmOlOniuOcZS0oMPEqdANw5hOX
f1SzTfu4YcMyPg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:16:18 2026 by rpki-client