Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
File:                     Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft (raw, json)
Hash identifier:          zGwPhiOt2bLYIjkEaohfnIihEm28yM8k17YlKimjdlw=
Subject key identifier:   F1:A6:8D:A0:23:5B:A6:A2:2D:45:86:D3:C2:B4:C6:B4:D3:FA:6C:D6
Authority key identifier: 61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
Certificate issuer:       /CN=61e6ea83926bc478c785471d805a5c1210a8c993
Certificate serial:       019F859F8B3A3653F8274985332914B4259D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
Manifest number:          19CA
Signing time:             Tue 21 Jul 2026 17:00:53 +0000
Manifest this update:     Tue 21 Jul 2026 17:00:53 +0000
Manifest next update:     Wed 22 Jul 2026 17:00:53 +0000
Files and hashes:         1: 2dU_Wx7maoKES4uWBmISrFThyIU.roa (hash: ffH0TAg9XSxzOXt+6AV+6sDEvW+c8igbg9XX2e6NJUY=)
                          2: HZb22Oio0r0dOkO7Ylc22UNpmkI.roa (hash: 4bxPJ8gmL9NMrQNM+ipouVsdrPbO9cdpsR6HkCC+6eM=)
                          3: Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl (hash: 7anmq2LQAP3J7/ADHschHTl/PqEfjE8krreBM13vpc8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:9f:8b:3a:36:53:f8:27:49:85:33:29:14:b4:25:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61e6ea83926bc478c785471d805a5c1210a8c993
        Validity
            Not Before: Jul 21 17:00:53 2026 GMT
            Not After : Jul 22 17:00:53 2026 GMT
        Subject: CN=f1a68da0235ba6a22d4586d3c2b4c6b4d3fa6cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:35:af:da:3d:86:5c:ce:7f:d7:81:fa:2e:d8:
                    ba:76:12:15:6a:68:2f:cc:78:69:33:c1:c0:4f:97:
                    16:35:5c:c5:d6:00:69:c2:4a:e4:48:c5:4c:0e:05:
                    bc:ac:f2:48:cf:8d:ff:97:81:17:51:e8:68:3e:51:
                    43:57:8b:20:5c:45:c0:4b:ee:d6:0d:19:5f:6b:23:
                    36:b3:bf:52:4b:f4:ed:51:2e:79:a7:ca:dd:6d:45:
                    1d:3c:29:6b:d2:0a:41:96:b9:9b:c0:3c:d2:77:57:
                    6f:53:32:fa:b6:ff:b1:70:b7:4d:71:41:9c:52:1f:
                    6c:e6:89:87:31:97:17:d3:91:81:ee:65:7f:f9:40:
                    94:bc:8f:7f:02:42:ff:05:86:2c:a6:ab:89:34:2b:
                    ed:6c:9c:ea:06:f2:6a:fe:cf:1a:1e:5b:7a:14:a3:
                    51:a4:3d:ca:30:d0:31:db:48:42:64:ef:e8:a3:e3:
                    85:93:b9:af:80:a6:85:fe:4b:a8:05:cb:a0:ee:2a:
                    0a:a7:bd:a0:34:63:a2:37:22:bd:58:8e:ea:4f:03:
                    a0:5d:27:26:09:84:3b:71:e7:17:2d:79:46:a7:56:
                    21:fe:57:1f:ba:52:5e:70:1e:ac:22:e5:59:62:69:
                    0d:24:55:bb:b7:ef:90:51:af:6b:51:77:e6:d7:13:
                    20:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A6:8D:A0:23:5B:A6:A2:2D:45:86:D3:C2:B4:C6:B4:D3:FA:6C:D6
            X509v3 Authority Key Identifier:
                keyid:61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:8d:19:cf:af:4e:55:2b:61:7f:b5:55:c5:7c:e7:14:19:65:
         54:13:e4:b2:a6:29:9a:aa:c7:1c:0e:e0:47:11:8b:15:94:de:
         94:a2:76:d0:57:5d:fc:27:9e:5f:7a:b9:1e:d1:13:41:4b:98:
         26:23:27:17:3f:5a:b6:97:96:b9:2e:c9:aa:8a:36:49:2e:a3:
         0f:66:31:2e:19:e7:41:0e:b6:5c:95:d1:33:78:b3:c7:e9:c4:
         36:c0:f7:cc:29:c2:10:24:a9:e4:b9:5f:1b:ad:73:21:26:b0:
         f3:83:1c:19:f8:41:7c:52:81:98:85:e7:45:b6:50:fc:e8:97:
         85:6a:c9:33:e5:ba:27:2b:03:0e:d5:a7:38:99:90:06:92:ca:
         0a:22:ae:70:cb:70:b1:45:10:11:44:8c:3e:ed:18:04:0b:bd:
         be:af:10:5a:f1:aa:48:85:d3:7f:75:6a:a2:05:be:51:9c:4d:
         fb:bc:90:fe:da:72:28:49:04:60:53:48:44:7b:e4:cf:fb:95:
         cc:95:70:31:87:74:0c:b2:7f:2f:2b:67:db:53:19:8e:50:54:
         2a:b2:41:54:3c:98:09:60:6d:64:ec:b4:ab:3f:ab:bd:6d:5c:
         2a:ec:65:c8:dc:99:1b:06:2c:5c:4d:42:8b:c1:06:87:05:24:
         1f:23:05:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:17:09 2026 by rpki-client