Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
File:                     yda1mpPjJAg_vKQjfkfp9evzcas.mft (raw, json)
Hash identifier:          3dXCJULAulPCmcbUfK4r6SqIb9JDHHvlab9J0Lka7OU=
Subject key identifier:   A3:CF:F6:7D:D7:6B:A2:5C:60:B8:15:5A:B0:E1:01:0F:75:F5:30:62
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Certificate issuer:       /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial:       019FCD1451C86D8B7EDE9F5B4D8BEFF28D1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
Manifest number:          1A0C
Signing time:             Tue 04 Aug 2026 14:01:28 +0000
Manifest this update:     Tue 04 Aug 2026 14:01:28 +0000
Manifest next update:     Wed 05 Aug 2026 14:01:28 +0000
Files and hashes:         1: FBCGTG64vLpl2gDVPvanQJATgB8.roa (hash: axM4/0Pr+RIyWyZE+LhS3ebRSN92aTrPRUXzdJeL/U0=)
                          2: Gqg2-sCdeAnxIxjnCqOjFkh4pyY.roa (hash: fXnPA1IUb+WwCmX8j2rz10mUAQFbNKLaEL207SLATEk=)
                          3: Xh_fZpcuD-kXAKnMm-XCgP1QCcM.roa (hash: E/KI5295u2flUvuXh7zmO0XDhUT77Ekqi6kGos1unAA=)
                          4: cdMwDxOwsmOgnXKtKxgQS9EwG5s.roa (hash: 9KAJy5B5/gYF9JmztZmHa3vCIGRv+J2QDYi/xV8zpFc=)
                          5: w9cLMtPbCYYrwoKERp06IPmC2bE.roa (hash: ey9n1gs4fwmE4LkooDwQ9cZLvMTfaqnyxO7TGDUAj68=)
                          6: wywpQzax_4ZtKoz9uAZxDjtcPmw.roa (hash: Q0w8drpmsGxodbGwxBVJJ2K2KkXwUZiHuoYb5PWlT/8=)
                          7: yda1mpPjJAg_vKQjfkfp9evzcas.crl (hash: 00mYaKTiREzGSDZ1p0p1cp8j20YkGqe26vtHi42jAi8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cd:14:51:c8:6d:8b:7e:de:9f:5b:4d:8b:ef:f2:8d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
        Validity
            Not Before: Aug  4 14:01:28 2026 GMT
            Not After : Aug  5 14:01:28 2026 GMT
        Subject: CN=a3cff67dd76ba25c60b8155ab0e1010f75f53062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d1:b8:34:74:b9:46:f6:c5:78:c9:b9:8f:15:
                    60:ad:9c:70:30:5f:8f:30:fe:21:ce:68:74:d1:af:
                    99:ad:ef:61:e7:cb:9d:2a:f6:63:24:62:e4:db:37:
                    02:23:02:ac:48:df:0e:10:3b:82:12:a2:2c:62:7c:
                    da:cb:95:fa:a9:8b:3a:af:2e:b0:f1:84:62:2c:08:
                    e7:06:d8:97:74:e3:a9:55:08:0d:13:b8:08:05:06:
                    03:ec:23:02:21:f3:e8:d6:6a:cd:67:28:3c:20:21:
                    dc:fb:f2:01:b9:a2:47:b9:d3:d0:29:6d:9d:27:2e:
                    1b:ec:f3:95:1a:c6:8a:0f:10:67:3d:13:b0:4b:82:
                    f7:7c:0a:3f:1e:05:f3:81:4e:d1:bd:6a:7d:2e:86:
                    25:6d:2d:d9:9f:c0:e4:e0:17:8f:ac:d6:ce:45:3f:
                    a9:58:42:40:78:40:16:d5:4f:1b:e4:2e:99:aa:e7:
                    2f:72:ff:90:1d:c6:d0:e8:bb:e2:6f:3a:57:ea:f5:
                    b4:48:5e:b7:07:75:d1:3e:da:87:c7:44:fc:01:45:
                    ed:78:3e:be:d6:24:3b:ad:67:b4:8b:8b:92:62:23:
                    bc:57:0c:cb:a5:c7:05:c0:59:cf:43:17:ba:de:36:
                    82:b1:02:6e:e1:f3:15:97:f2:aa:51:f4:53:54:4d:
                    7c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CF:F6:7D:D7:6B:A2:5C:60:B8:15:5A:B0:E1:01:0F:75:F5:30:62
            X509v3 Authority Key Identifier:
                keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e8:01:ef:1d:f3:7d:d2:59:4a:79:8d:c8:48:d2:bb:99:e3:f5:
         e8:8c:94:df:1a:13:bd:46:dd:dd:ca:57:72:a1:c8:28:d1:af:
         c6:42:69:b9:df:d1:b4:23:2a:64:f2:12:fc:78:a4:85:be:a4:
         63:0f:82:dc:81:c2:06:5e:26:49:54:03:c6:4d:5d:7b:4b:f5:
         43:99:c6:95:a7:c1:27:dc:ae:75:71:ac:31:4d:16:41:26:82:
         1e:e5:e1:8b:ec:fa:2d:5f:0f:2a:9d:f7:96:11:c2:25:34:d9:
         e8:c8:37:f0:0a:08:4c:df:86:99:20:4c:0c:a4:f8:fd:13:66:
         92:c8:0b:4e:b6:7c:87:9d:17:0f:4b:23:52:52:26:01:e0:04:
         d3:62:20:a0:33:84:62:46:f0:cf:ac:12:7d:55:17:3e:bc:a4:
         ee:db:f1:1c:70:7b:56:3e:36:21:c1:ee:0d:51:b1:e4:e6:44:
         54:7a:c8:c3:27:86:17:b1:fe:e4:f1:c2:73:69:ee:9a:b6:43:
         5c:b1:cc:f6:2b:c9:a4:6b:fc:02:fc:78:2f:86:34:f9:8e:f8:
         69:b8:f3:22:f8:96:b5:27:20:0e:73:dd:53:7b:11:35:30:82:
         63:b0:00:83:98:c4:a1:de:a4:56:72:95:95:44:bd:1b:e0:b1:
         ab:7d:c8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 18:56:08 2026 by rpki-client