Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
File:                     jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft (raw, json)
Hash identifier:          9ztneiJPO/8E/wQvvu8uIZ1JO1PNJmQ6Wi2TEUkw8po=
Subject key identifier:   C4:6E:76:77:BD:4E:CC:0E:13:87:E2:EC:27:6A:BB:86:B6:09:AF:C2
Authority key identifier: 8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E
Certificate issuer:       /CN=8d80b45455d89731f87bb53f4dbe641189837d4e
Certificate serial:       019FA0725B02304EE67F95C212E8B342B293
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
Manifest number:          066C
Signing time:             Sun 26 Jul 2026 22:01:16 +0000
Manifest this update:     Sun 26 Jul 2026 22:01:16 +0000
Manifest next update:     Mon 27 Jul 2026 22:01:16 +0000
Files and hashes:         1: jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl (hash: G8338B9CcQbMx1k+glVjCSoLailXT7TmVQorvp5oVLc=)
                          2: mq6jdAhoY64n-S89EB8sdE29Spk.roa (hash: bvsiwXRJB+1a6z+HtrBRTvbHG/Lsx8kIyh6UkUd8Cek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 22:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:72:5b:02:30:4e:e6:7f:95:c2:12:e8:b3:42:b2:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d80b45455d89731f87bb53f4dbe641189837d4e
        Validity
            Not Before: Jul 26 22:01:16 2026 GMT
            Not After : Jul 27 22:01:16 2026 GMT
        Subject: CN=c46e7677bd4ecc0e1387e2ec276abb86b609afc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:6a:36:b0:c6:8d:6f:67:6f:13:10:7c:f2:9c:
                    1f:29:30:ef:74:80:40:2c:b3:10:a4:9c:cb:39:97:
                    0d:0c:e1:ad:e6:fa:e6:f9:a4:50:af:9a:b6:3d:99:
                    10:8f:fd:3e:08:66:8e:a2:2a:a6:5c:44:c6:3c:fb:
                    4b:9f:c5:3f:5b:ff:fa:b0:6c:78:42:2f:bc:e2:4c:
                    4f:7c:3f:6b:2b:c8:2d:b0:f8:ca:f5:94:5a:63:46:
                    62:7a:4e:28:f3:c0:50:6d:fe:64:51:60:82:99:24:
                    31:19:92:a3:4f:c8:5b:6e:43:08:85:cc:c1:36:e8:
                    79:6b:46:eb:99:c5:30:45:2e:e3:b7:83:fe:ae:24:
                    e7:71:81:89:d9:03:44:1f:41:0e:55:2f:e5:b7:e6:
                    71:75:11:7f:6e:84:b0:d6:6c:dc:ea:6e:93:6c:46:
                    03:68:5c:71:10:b5:14:3d:09:47:ed:f5:7b:04:52:
                    4b:bc:d1:09:e1:5c:af:c6:81:9d:9e:7d:03:29:61:
                    8c:b3:74:d9:86:b2:35:aa:3a:f6:19:87:04:02:39:
                    80:d1:18:5a:34:a9:01:0b:67:e9:35:5e:c9:53:77:
                    c8:cf:6b:52:93:a1:20:63:04:f3:b1:e2:e2:bb:07:
                    16:6e:42:f7:d7:53:44:2a:54:b7:3c:cd:48:a8:43:
                    71:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6E:76:77:BD:4E:CC:0E:13:87:E2:EC:27:6A:BB:86:B6:09:AF:C2
            X509v3 Authority Key Identifier:
                keyid:8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ce:ae:38:fb:4f:8d:c4:22:33:73:b1:ea:a4:26:60:bf:b3:
         e7:4f:15:18:4b:a1:a5:f2:d0:20:38:05:c4:51:81:5c:5f:d7:
         8d:8d:02:ae:29:a8:ea:ec:23:92:1c:ef:37:ba:d4:f6:d9:0b:
         72:91:5a:0c:9d:b3:3e:2b:d8:5d:ff:7e:61:4a:76:0d:bb:5a:
         0e:c8:b5:6f:e7:10:d6:51:8d:5e:5b:66:de:c1:20:f8:66:cc:
         e1:d9:fc:d3:88:40:68:2b:85:56:ed:ee:9f:b4:ff:96:ef:22:
         fb:4b:45:7e:bb:36:9c:12:19:b1:20:21:84:4f:f7:7b:10:00:
         d9:57:ce:74:d3:a2:9d:36:40:44:7f:39:34:a6:8d:5e:74:8f:
         00:8f:ab:35:b9:18:b7:97:b4:50:94:11:24:b1:b3:84:44:c1:
         01:a5:6f:42:a6:a9:3d:bb:d8:e9:35:21:c8:bd:a2:a5:0a:d7:
         d6:3e:8f:7e:75:0a:5c:e8:bc:9c:30:10:ae:91:00:c4:d1:b4:
         ed:0f:30:45:4f:90:87:6d:93:78:5b:d5:fe:f5:f7:1f:3f:ed:
         c5:b9:73:07:9c:64:bb:16:2b:ab:48:9b:3d:2d:50:26:24:19:
         76:2d:b1:4d:15:ad:90:55:c9:ae:b6:5b:b3:8a:59:03:0d:dc:
         7a:8f:21:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:22:44 2026 by rpki-client