Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File:                     yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier:          /GjRZ+LRuVl64PJIbhD6p8EdLrqWweN+ZHarTSf7gcA=
Subject key identifier:   02:F1:94:4D:83:1C:11:84:11:E6:20:BB:40:49:72:4D:1D:5C:B4:E9
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer:       /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial:       019FA0721C3985661E0AAD6A7A553048417B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number:          1416
Signing time:             Sun 26 Jul 2026 22:01:00 +0000
Manifest this update:     Sun 26 Jul 2026 22:01:00 +0000
Manifest next update:     Mon 27 Jul 2026 22:01:00 +0000
Files and hashes:         1: 6SyYBw_h6FtZj49a8Gsl0fZClAc.roa (hash: yUA4V2vWgaIeFq+az6maBFcRTyB0lNwRfV6wBfzazGA=)
                          2: OQMOmyJrTs_6IRpsGLg9HTyoV7k.roa (hash: A7mJeUCg10L9AXlKSZcymy8lwjHDqKuB18cMHj/bo4g=)
                          3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: pVRTpWTio/Bt0u5Ab+uMH6ChfZr2v9vZhBmJ/mOjgJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 22:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:72:1c:39:85:66:1e:0a:ad:6a:7a:55:30:48:41:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
        Validity
            Not Before: Jul 26 22:01:00 2026 GMT
            Not After : Jul 27 22:01:00 2026 GMT
        Subject: CN=02f1944d831c118411e620bb4049724d1d5cb4e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b6:1b:14:0e:e0:0e:68:56:38:32:3d:29:cc:
                    68:30:80:61:32:0c:30:f6:e3:e7:21:14:d6:72:52:
                    e7:ac:91:27:71:10:60:a0:0a:5a:7c:22:2d:c3:d8:
                    cd:a7:0d:6d:9c:73:43:9d:7a:1e:30:e4:0b:d6:12:
                    aa:f1:d4:3e:3d:6e:4f:8f:cc:09:7e:e6:86:54:6a:
                    8b:c0:df:c8:6a:36:d6:58:cb:a5:b2:f3:08:39:58:
                    d1:8f:1b:73:54:92:4b:0a:be:3f:54:d6:21:77:2d:
                    ec:58:3c:79:b1:06:c5:1d:0b:79:9e:cf:48:b6:6f:
                    b3:4d:2d:56:2c:94:5c:fa:4d:5d:42:8f:40:9b:94:
                    64:51:08:1e:16:70:10:15:8f:a1:51:a3:87:74:33:
                    e5:5f:25:e7:6e:08:de:af:e0:14:eb:d5:b3:b3:54:
                    70:47:29:ca:46:9e:76:6d:96:d5:78:d7:e9:cc:43:
                    9c:36:41:7e:8d:a0:b2:43:6d:e2:92:2a:9e:ed:77:
                    06:dc:f5:f8:b8:ce:7b:44:1c:81:4b:2a:3d:e2:cb:
                    f2:70:12:c4:7a:9e:1e:29:2c:6a:99:00:59:c1:d4:
                    d5:3e:bd:92:29:96:43:e8:7a:a0:22:8c:54:03:a4:
                    ca:2f:c8:64:49:38:a5:8e:6c:b0:cc:9e:e4:18:5f:
                    a1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F1:94:4D:83:1C:11:84:11:E6:20:BB:40:49:72:4D:1D:5C:B4:E9
            X509v3 Authority Key Identifier:
                keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:00:3b:ee:bc:43:20:30:3b:d2:59:cd:8a:3e:5c:7c:55:e9:
         c9:2c:e4:59:ec:0a:6e:92:94:d4:0a:74:38:e9:44:84:8d:fe:
         26:20:4b:b2:27:0f:36:9d:07:a4:8d:d4:62:06:51:3e:11:24:
         9f:58:a4:12:d7:59:74:05:7c:2c:d0:5c:5e:b8:13:a1:5e:2a:
         47:01:41:42:e1:db:56:1c:9b:f8:c5:f7:8a:01:c0:f1:ee:be:
         ff:64:7c:33:1f:2b:92:da:0c:68:a5:59:de:ae:7b:74:60:17:
         a7:41:ec:49:8d:07:72:34:92:47:52:4d:e9:c5:d4:80:d6:06:
         40:77:e9:60:8b:e6:a2:2e:63:d7:ab:8d:cd:69:e4:17:f1:96:
         54:41:03:8b:30:3f:03:d0:07:c5:80:f7:3a:09:d6:78:e7:d6:
         7c:89:7f:2c:d8:02:51:cd:b2:3d:a7:2a:5f:35:95:41:10:5a:
         05:5a:1a:f8:ca:b1:bd:d0:3d:e0:62:a3:b9:c1:2f:70:8d:da:
         9a:34:8c:e2:41:9c:88:23:0e:79:65:78:71:d8:68:65:af:29:
         da:d7:40:cb:82:e9:e7:22:33:83:24:93:86:16:84:0d:ac:bb:
         ae:80:4f:ec:b3:75:22:fa:64:10:d0:c6:bb:88:35:97:80:a9:
         65:b9:8e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:22:17 2026 by rpki-client