Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File:                     yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier:          nbi/q06Mm4ZyDdxvYuH6jzys3Siyti83amjkA+rFeAg=
Subject key identifier:   A6:15:81:B3:92:0F:7B:2E:E9:78:39:81:A6:6A:43:A2:51:CA:38:30
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer:       /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial:       019FA260E3FC2760B9FA2C9DD024DD58A8EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number:          1417
Signing time:             Mon 27 Jul 2026 07:01:26 +0000
Manifest this update:     Mon 27 Jul 2026 07:01:26 +0000
Manifest next update:     Tue 28 Jul 2026 07:01:26 +0000
Files and hashes:         1: 6SyYBw_h6FtZj49a8Gsl0fZClAc.roa (hash: yUA4V2vWgaIeFq+az6maBFcRTyB0lNwRfV6wBfzazGA=)
                          2: OQMOmyJrTs_6IRpsGLg9HTyoV7k.roa (hash: A7mJeUCg10L9AXlKSZcymy8lwjHDqKuB18cMHj/bo4g=)
                          3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: +xaN9vu/911Z6CAXA9bUu8RxXFsF+iRK0ZuXcbH2G5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:60:e3:fc:27:60:b9:fa:2c:9d:d0:24:dd:58:a8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
        Validity
            Not Before: Jul 27 07:01:26 2026 GMT
            Not After : Jul 28 07:01:26 2026 GMT
        Subject: CN=a61581b3920f7b2ee9783981a66a43a251ca3830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:58:cc:7e:54:67:15:75:f6:f2:4e:e4:3d:f0:
                    b8:01:20:03:c8:4b:e0:85:63:bf:2c:be:a3:96:d9:
                    d3:1c:01:d6:39:a3:f7:66:6e:ea:5b:59:6e:2f:ac:
                    63:98:0a:87:1b:8e:5c:54:c3:f8:cc:51:16:7c:f4:
                    da:12:fd:f6:cd:66:2c:84:82:7f:81:4e:90:14:71:
                    11:8b:a1:22:8b:78:cb:22:af:45:5d:24:cf:62:00:
                    79:82:cc:cf:d9:56:18:dd:6d:28:c2:f7:ee:cf:f5:
                    b8:35:f3:7c:f1:b4:33:18:04:a9:3d:60:78:7d:0e:
                    d5:da:ff:62:c5:66:cf:5f:f0:0c:07:b0:c9:70:c4:
                    99:cb:2c:7d:78:61:02:bd:ca:f5:40:02:c2:d9:ed:
                    24:63:a9:39:ed:f9:3a:a7:1a:ff:cc:a0:99:69:c2:
                    70:f0:4a:de:a3:c7:35:77:03:d7:92:4e:56:8d:e9:
                    77:78:9b:ee:1c:2d:1c:e5:36:c9:5f:58:47:5f:9c:
                    87:e3:20:e9:fa:43:be:ea:e3:a6:40:9d:6e:71:c2:
                    9a:0a:b9:24:84:25:e6:e9:a9:e1:e9:29:65:e5:fd:
                    3e:50:87:fd:a5:95:c5:84:39:8d:ce:5b:b1:cb:d4:
                    41:39:73:8c:e4:bd:07:00:4a:cc:7b:1d:74:8e:5e:
                    7a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:15:81:B3:92:0F:7B:2E:E9:78:39:81:A6:6A:43:A2:51:CA:38:30
            X509v3 Authority Key Identifier:
                keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:23:28:ce:33:fa:a1:99:f0:9b:17:2f:c4:cf:ed:f1:6a:a2:
         af:1f:c7:95:54:7e:cc:bb:6f:a2:fe:86:79:8d:f8:3f:2d:f7:
         9e:2b:4a:74:bc:c9:6c:93:d7:66:07:80:a9:61:b2:88:ea:0a:
         07:c4:66:df:90:a3:0b:5a:a8:81:60:c0:ba:b4:66:40:dd:5f:
         9d:2e:63:f2:22:6b:33:5c:16:9d:c2:c0:14:f9:4c:f4:10:59:
         38:01:77:59:8d:9b:55:c5:69:21:55:06:d4:2b:fa:e1:e1:40:
         a5:54:da:d6:c5:01:2d:14:ba:8d:53:4f:c3:4a:66:12:7d:8c:
         78:8b:32:f2:b7:49:86:d1:b7:3c:a7:b2:1c:c2:66:d8:4a:3b:
         4b:5d:0f:0c:0e:03:09:a3:89:d7:b1:0f:23:d9:8a:b1:97:0f:
         1f:ff:ea:40:97:5a:e5:c1:f4:04:bd:6e:4f:3b:c5:e7:70:c7:
         01:f2:7a:0f:1b:4f:84:21:b1:6a:94:88:76:af:76:ea:13:93:
         fe:fe:88:fc:6a:13:94:42:82:f3:30:1e:08:01:54:66:98:10:
         d7:f8:a8:09:0b:be:f8:54:63:4f:25:f0:80:09:d6:fb:e2:34:
         60:38:7d:b8:1e:b2:e3:23:f9:ab:a5:ec:a3:51:e1:bc:f7:fc:
         5e:2c:58:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:31:53 2026 by rpki-client