Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
File:                     yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json)
Hash identifier:          ouyjHBGxef6wYov9JO7WIW9vLlH1gPkn+dZIBZgHDLI=
Subject key identifier:   4C:DD:B9:18:67:77:DF:8D:EE:AB:1E:73:76:E2:E6:EF:80:96:C4:70
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Certificate issuer:       /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial:       019FA1BB0F0F505CBC30FB4A08B386155BC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
Manifest number:          122B
Signing time:             Mon 27 Jul 2026 04:00:18 +0000
Manifest this update:     Mon 27 Jul 2026 04:00:18 +0000
Manifest next update:     Tue 28 Jul 2026 04:00:18 +0000
Files and hashes:         1: D3wkpKKSoJovDsiCfvbh1DYTkx8.roa (hash: c0FcHGYTB+tG9IR/+QbyBfjUn2VqFpbtfy3DDserGhM=)
                          2: KSjHgXPRASqnBW1tjOtvhmkWPHE.roa (hash: h5XvzMTTFxSuHg9vWwCmjacM7SXacJTLfB8wl2n3Cec=)
                          3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: 9tp3fKyXlPUJIhDVAoZNAdF7DW86zqdo1dKipRJGbdg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:bb:0f:0f:50:5c:bc:30:fb:4a:08:b3:86:15:5b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
        Validity
            Not Before: Jul 27 04:00:18 2026 GMT
            Not After : Jul 28 04:00:18 2026 GMT
        Subject: CN=4cddb9186777df8deeab1e7376e2e6ef8096c470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6c:45:e4:e5:0c:d3:e2:1a:a6:13:5a:d9:ff:
                    22:1d:98:d3:80:02:35:22:2a:ce:42:10:d6:23:65:
                    81:8e:3d:a3:aa:67:48:d0:af:3c:2d:e6:7b:83:0c:
                    1f:f4:e1:a2:0d:1a:41:be:de:7c:01:33:b8:5f:de:
                    42:69:55:c1:1b:70:78:be:9c:41:b1:14:b5:c9:1a:
                    14:6c:94:1c:3d:a2:38:d7:9b:bb:79:82:4f:ff:f1:
                    ed:47:d3:61:af:0b:57:14:83:80:87:77:8e:38:91:
                    e9:37:94:bd:be:c0:1f:88:c3:a1:af:7e:fc:8b:40:
                    4c:17:c3:97:4b:45:c0:48:e7:f2:37:80:d2:1d:53:
                    55:94:04:8a:02:f3:d1:e9:ff:e2:e6:3b:74:a8:ba:
                    c4:a5:ca:78:6c:8f:85:24:31:0e:f7:9a:4a:c2:f6:
                    9f:75:23:ff:c3:20:83:94:78:8f:00:f2:47:3c:f3:
                    97:12:97:9d:14:d1:66:b2:ba:92:81:5c:ba:1a:47:
                    c5:78:70:c9:bb:8e:67:a4:2e:4d:69:28:93:14:42:
                    e4:8f:df:ad:6f:c4:dc:17:bf:70:09:d7:21:49:e3:
                    04:76:d2:00:72:1e:e5:cf:a3:4f:32:e3:87:6e:f6:
                    de:20:01:a6:ea:99:ac:21:19:63:81:fc:0e:1d:07:
                    8f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:DD:B9:18:67:77:DF:8D:EE:AB:1E:73:76:E2:E6:EF:80:96:C4:70
            X509v3 Authority Key Identifier:
                keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:bd:c9:5d:99:95:08:c6:9b:f0:ec:2a:ef:e9:26:bc:60:39:
         ac:0e:8e:6a:fb:d0:d7:55:82:c7:8a:e7:a3:53:44:b4:a2:1d:
         64:7f:ed:13:27:97:44:33:fc:e5:0b:24:09:ff:ea:7f:69:a4:
         5a:d6:9e:18:6c:94:c1:cf:3b:ab:0f:1e:ee:e0:4a:b4:e9:50:
         bd:07:87:35:68:81:e2:07:70:6a:ac:51:2b:33:a2:7d:fb:f8:
         4f:dd:88:ea:97:bf:23:2a:51:f4:54:0e:c7:00:41:fe:19:5c:
         f8:f4:95:a5:42:fa:91:66:14:dc:c6:c6:82:35:88:db:26:91:
         5d:77:bf:5b:cb:98:d8:56:ce:67:23:50:37:dc:87:6b:06:a9:
         55:7b:d0:59:8a:6d:a6:d1:83:29:b0:90:25:23:de:10:78:ba:
         61:99:5f:48:14:3b:93:00:e0:85:76:60:eb:5b:81:14:e8:29:
         d4:90:f6:62:a9:85:3c:06:63:b1:03:2a:fb:c7:7c:4f:b1:45:
         64:2e:5f:f1:36:6f:8d:56:ca:f0:f3:07:ba:08:79:8d:d8:c1:
         b2:19:aa:3a:32:c7:27:a4:a4:3e:3d:b7:04:81:26:33:27:e4:
         24:77:09:1b:63:38:03:30:15:93:65:43:c4:1a:63:a5:22:66:
         98:08:fd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:59:05 2026 by rpki-client