Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
File:                     0YZHAF-osG5H7i77_e3Jegx3Vfg.mft (raw, json)
Hash identifier:          s3SIjhoWeXTo0jvu7H3S/5U3YuTjQmh33Qk4HFkHJno=
Subject key identifier:   59:05:0D:A6:E7:88:AF:94:3C:21:03:85:46:43:FA:B6:F3:E4:7C:56
Authority key identifier: D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8
Certificate issuer:       /CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
Certificate serial:       01A001A608993B7CF596418F2894BD4866A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 19:00:53 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:53 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:53 +0000
Files and hashes:         1: 0YZHAF-osG5H7i77_e3Jegx3Vfg.crl (hash: FtFoQ7YVkhD4ldeT3+YcbFENCBLYP603puHLQ8z3D5U=)
                          2: GmHD_yxmhmb7r8gjp6el8HpBXOw.roa (hash: fVaQ2rKEBssbb0vmO7FX3uJ1zApwIkrOyFVIx+Y+u/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:08:99:3b:7c:f5:96:41:8f:28:94:bd:48:66:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
        Validity
            Not Before: Aug 14 19:00:53 2026 GMT
            Not After : Aug 15 19:00:53 2026 GMT
        Subject: CN=59050da6e788af943c2103854643fab6f3e47c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2f:67:33:10:bb:b0:e9:9e:c7:bc:34:b2:1e:
                    9b:e2:59:3e:69:7c:2d:37:74:89:93:60:75:39:cb:
                    08:fd:5f:7d:bd:69:1b:54:ba:f2:8d:c8:ff:75:54:
                    d8:91:c2:77:85:e0:8d:fc:35:bb:19:0e:41:c8:9d:
                    53:52:21:ac:d9:dd:82:b8:4e:48:2c:f3:75:48:86:
                    fd:5d:12:40:fd:d7:4d:16:6b:69:45:4a:75:73:79:
                    6c:59:c8:db:28:a5:c2:7e:ce:70:e7:2b:9d:44:73:
                    1b:f7:ee:18:41:ef:56:03:b2:83:6a:69:b4:63:d4:
                    6c:14:3b:88:1e:7e:0a:f3:29:e2:77:bb:c9:2c:91:
                    43:e5:71:fc:b6:d7:c3:c8:fc:e3:cf:de:f4:71:5a:
                    8a:b7:47:53:b3:34:17:4c:bf:5d:1f:c3:d7:e9:3f:
                    92:4d:16:4c:e0:d9:25:3c:ee:34:45:f1:a0:e0:17:
                    0b:e0:2a:76:b2:be:9d:b6:99:37:8c:44:ed:89:ab:
                    1a:ae:47:7b:4f:a6:ba:f3:10:02:6f:29:7f:66:a7:
                    22:0f:27:68:9c:d9:66:be:07:4a:32:db:d1:d0:b0:
                    45:33:71:4e:c0:83:57:20:4f:c1:3f:b8:3e:b6:fd:
                    6b:0e:fc:4b:9e:0e:3b:dd:e4:6a:01:f9:49:5a:49:
                    a5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:05:0D:A6:E7:88:AF:94:3C:21:03:85:46:43:FA:B6:F3:E4:7C:56
            X509v3 Authority Key Identifier:
                keyid:D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:74:15:c6:5d:bc:00:44:dd:d7:47:ec:62:60:42:c2:95:41:
         63:22:32:a1:36:cc:ec:59:60:e5:ee:d3:82:12:34:4b:80:c9:
         97:a8:53:cd:e7:3b:3d:ac:9c:8f:1a:9e:58:df:7d:06:a7:89:
         7f:78:d3:fc:02:26:36:8a:56:e6:31:92:b4:ca:b1:60:8a:79:
         bf:84:76:13:2c:d3:ff:00:54:62:a3:b4:85:56:0e:f2:a2:a4:
         56:ba:27:37:0f:9d:9a:b1:5f:e6:86:1b:b7:31:9a:53:18:4d:
         17:bc:5f:5c:97:c8:70:19:d4:56:55:c3:31:a9:0f:ba:4a:32:
         9f:45:7f:3d:6b:ff:1b:ad:12:81:c6:28:f5:90:69:1a:28:60:
         bb:5c:d2:2e:e5:58:69:15:b8:0d:4a:aa:19:86:ac:7e:73:36:
         cb:3c:03:cf:1c:25:8a:a9:f3:7d:57:44:0e:09:b9:ea:eb:04:
         29:30:b5:6c:bc:6e:67:ad:e4:36:a4:14:f7:45:d4:2a:16:d7:
         4e:d3:e2:67:be:5c:f8:65:7e:b4:42:e8:c3:39:5f:cf:65:27:
         3d:bc:21:de:66:07:8e:e0:d0:92:ec:fb:d4:fe:6f:f4:4a:ff:
         79:3e:14:1f:47:c6:4c:95:1f:81:91:7b:16:04:1c:9d:b5:d8:
         07:54:1a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:05 2026 by rpki-client