Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
File:                     YRu24x7uO3Kt57GlkOLmKq9cPrA.mft (raw, json)
Hash identifier:          ncamp/I7aTblM2LSK2DoevruNiSYNg5sh3HglR9YBcQ=
Subject key identifier:   C8:85:0C:FF:04:A2:ED:C2:8A:82:D3:34:4A:33:DA:1F:17:6C:46:13
Authority key identifier: 61:1B:B6:E3:1E:EE:3B:72:AD:E7:B1:A5:90:E2:E6:2A:AF:5C:3E:B0
Certificate issuer:       /CN=611bb6e31eee3b72ade7b1a590e2e62aaf5c3eb0
Certificate serial:       019FA0A898A9781E55B9B714F8873FD911E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
Manifest number:          024F
Signing time:             Sun 26 Jul 2026 23:00:31 +0000
Manifest this update:     Sun 26 Jul 2026 23:00:31 +0000
Manifest next update:     Mon 27 Jul 2026 23:00:31 +0000
Files and hashes:         1: R8jSHJ0RvQZas12_o_Ps91TArZ8.roa (hash: 0fh/B8TN9sEd5MXdklpnp2ieFTklN6jeNTgs0tjEkic=)
                          2: TzNDKIgnXyebc98shaF_lgOCi6s.roa (hash: xrJNMYFkTQ1dfaAgHt3UvZimA9Jq6mAdGz+xSeudcNA=)
                          3: YRu24x7uO3Kt57GlkOLmKq9cPrA.crl (hash: Mh6P+hAQ88FSKT+smyHvaOhhfTaHT1iOOn5qqhneLTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:a8:98:a9:78:1e:55:b9:b7:14:f8:87:3f:d9:11:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=611bb6e31eee3b72ade7b1a590e2e62aaf5c3eb0
        Validity
            Not Before: Jul 26 23:00:31 2026 GMT
            Not After : Jul 27 23:00:31 2026 GMT
        Subject: CN=c8850cff04a2edc28a82d3344a33da1f176c4613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f8:e2:29:00:d1:01:b2:a1:5d:40:82:cb:36:
                    ee:fe:28:1d:5b:cc:68:a9:52:98:25:6c:f2:b3:84:
                    33:91:a7:b7:2b:fe:4c:7e:14:d3:f7:ad:bc:75:cc:
                    b6:9c:77:2c:2a:66:4f:a4:df:b2:77:49:98:76:dc:
                    0d:58:69:a0:92:35:36:5d:d0:04:57:6f:c4:56:53:
                    10:43:e4:3f:58:dc:d0:79:b5:cd:f0:32:c2:76:63:
                    0c:09:cd:d1:ff:2a:64:af:27:25:be:07:85:17:e9:
                    f1:5a:6c:27:da:43:be:35:7e:14:82:a5:5d:21:4c:
                    0f:b7:e3:b9:eb:b9:2b:12:d6:d6:70:6e:21:41:1e:
                    2a:b6:e3:37:35:c9:63:86:38:e3:94:84:32:01:3a:
                    3b:d5:31:c0:ec:2a:2d:2c:cd:5b:f9:45:66:46:a1:
                    f2:fb:9a:6c:94:9a:c0:8c:d7:17:01:e9:14:d5:69:
                    e3:2a:e5:d6:33:16:31:ec:20:c9:92:dc:cc:25:14:
                    6c:19:a1:d3:4e:5a:b8:f9:eb:bf:78:fc:1f:70:da:
                    5d:4e:d5:da:a1:72:83:90:60:ae:fc:0b:72:36:3b:
                    ff:b5:81:26:05:a0:1a:15:06:88:51:95:2c:76:40:
                    b8:b9:67:d5:6b:cd:31:18:50:14:77:85:c5:1b:a3:
                    de:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:85:0C:FF:04:A2:ED:C2:8A:82:D3:34:4A:33:DA:1F:17:6C:46:13
            X509v3 Authority Key Identifier:
                keyid:61:1B:B6:E3:1E:EE:3B:72:AD:E7:B1:A5:90:E2:E6:2A:AF:5C:3E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:30:5c:0f:e5:1b:04:cb:7e:c9:76:b5:f2:34:5e:09:d0:31:
         aa:66:59:8b:97:72:ca:f9:f2:11:4a:48:fb:25:2c:48:3d:06:
         09:29:96:94:29:d8:39:fa:81:20:07:bf:c9:8c:7e:7f:1b:70:
         0e:3c:99:9e:cc:76:6b:3b:d5:ab:aa:ec:6e:81:58:dc:f1:c1:
         8f:88:12:05:ea:db:6e:9b:5e:9e:ac:2c:15:e6:d7:21:7b:a9:
         8d:a5:49:66:f5:fe:04:cc:1a:87:7a:67:79:aa:85:f0:5d:34:
         9a:ab:88:45:14:99:a0:bc:8c:67:e6:b8:04:05:35:20:12:85:
         8e:04:73:4e:73:e2:d7:fa:fb:67:9c:2a:d2:fb:ae:1f:6f:aa:
         48:fa:c2:b2:1a:cd:59:54:a6:d4:bc:7e:6d:65:61:e6:c9:77:
         b4:87:67:f5:d9:14:b4:14:6a:e4:49:80:f9:1c:44:2d:28:1c:
         57:dc:f0:a1:95:61:c6:be:b2:b4:26:42:31:c9:e1:db:b4:5d:
         f3:d3:f0:f0:14:e9:40:46:ed:e4:a6:af:fb:5b:23:14:91:c4:
         b0:a3:d4:cd:81:b6:1b:e7:a0:2b:8f:4e:84:da:c7:6a:b2:80:
         6f:ec:70:10:0a:64:76:37:b5:63:b2:23:db:23:85:de:79:c5:
         c5:b0:01:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:51:53 2026 by rpki-client