Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
File:                     _ymks_Cjr4u-1gKaiyZdyTIE594.mft (raw, json)
Hash identifier:          LyLey0FiXPb6LjxCKBjs5mPWL4pqyENbauA+YJrwxgw=
Subject key identifier:   7E:76:C2:BF:34:80:E6:1D:BE:D3:50:2D:F6:B6:8C:9B:39:54:14:95
Authority key identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
Certificate issuer:       /CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Certificate serial:       01A003CBA9F2A559586AE77AB0F38B4D7C55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
Manifest number:          080D
Signing time:             Sat 15 Aug 2026 05:01:14 +0000
Manifest this update:     Sat 15 Aug 2026 05:01:14 +0000
Manifest next update:     Sun 16 Aug 2026 05:01:14 +0000
Files and hashes:         1: 0nWWPWTzcFI4eXCWW9KNezctiis.roa (hash: pAWgyFDAcV7gKpwPZNLLbv0IAPB9JFrQF+fLymJ/cyQ=)
                          2: _ymks_Cjr4u-1gKaiyZdyTIE594.crl (hash: uYR0YIvDYWn6M502Y3CjmBt5q81Q5HEjvmjTeYiqW8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:cb:a9:f2:a5:59:58:6a:e7:7a:b0:f3:8b:4d:7c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
        Validity
            Not Before: Aug 15 05:01:14 2026 GMT
            Not After : Aug 16 05:01:14 2026 GMT
        Subject: CN=7e76c2bf3480e61dbed3502df6b68c9b39541495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:08:cf:99:5a:0a:f7:4b:ce:ed:df:ac:ae:36:
                    5f:5f:f9:c7:a7:17:69:2c:7b:46:16:ca:d9:ca:0a:
                    13:cd:3f:24:e9:c4:53:2b:0e:85:05:62:33:50:34:
                    18:c1:6e:cb:08:54:e1:4e:7f:4e:77:40:78:b2:70:
                    c5:dd:43:5e:bf:b2:11:a6:49:f5:92:0b:2d:87:aa:
                    3b:a9:62:f3:ff:bb:66:52:24:c7:c1:41:8a:c7:5f:
                    31:93:86:91:34:23:4d:d4:d2:3e:ab:65:8f:13:24:
                    07:67:2f:1e:49:f2:03:04:65:8c:91:d1:be:95:d8:
                    43:7a:40:73:6f:f0:1f:3f:b1:4d:5a:0b:cf:e1:02:
                    43:b4:0d:a0:77:b4:3b:53:f4:c5:eb:a9:f8:b6:f2:
                    8c:24:59:bc:f4:38:2c:28:33:62:0c:06:13:d5:a9:
                    c3:6c:c0:f4:2e:94:cf:2c:91:33:fa:22:ee:01:06:
                    47:11:28:a1:79:56:f8:cc:d7:0f:6b:56:d0:c4:ec:
                    9f:15:9f:da:08:5e:11:21:63:83:c7:98:ed:c9:ab:
                    5a:a2:8e:c1:d5:e3:2c:e5:9a:f4:35:45:42:cd:ba:
                    4e:73:04:43:d3:d2:42:34:1b:19:e0:7c:63:b9:d1:
                    2d:26:32:15:bb:8a:d6:7a:29:f7:8b:49:ee:f3:e5:
                    6d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:76:C2:BF:34:80:E6:1D:BE:D3:50:2D:F6:B6:8C:9B:39:54:14:95
            X509v3 Authority Key Identifier:
                keyid:FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:78:69:7a:20:84:ee:5d:48:ab:e5:c1:08:aa:c9:b5:be:81:
         86:74:d1:9f:88:4a:25:25:42:1d:9f:ee:2f:82:ae:b2:68:9d:
         01:49:32:4e:5e:1e:30:73:42:6f:bf:e3:7c:86:75:7b:e9:72:
         0b:17:66:27:ce:04:20:d5:3a:81:53:00:77:f4:d0:50:63:59:
         de:04:8b:2e:5c:89:e9:45:cc:5e:60:49:dc:d8:29:ae:7b:2e:
         1d:0f:86:00:c2:4d:69:2e:0e:cb:d2:3f:09:7b:44:65:d9:5e:
         43:80:a3:55:6c:e8:df:e3:c0:55:85:bc:61:cf:48:8e:e0:07:
         fe:9e:5a:4f:c8:cc:cc:f6:e6:6a:3b:75:ed:88:a8:18:ea:e9:
         f9:63:7b:62:b0:51:1d:e8:75:f6:0a:89:25:aa:87:fa:50:27:
         97:4d:e7:6a:2b:f5:b4:16:32:0a:ab:cb:1e:4e:58:3d:82:3f:
         48:8d:33:5a:22:43:31:aa:e9:af:39:84:b0:a7:8a:51:05:7b:
         e7:d2:f4:c0:62:d1:b7:76:3d:8c:94:3b:1e:4c:1e:18:87:a9:
         0b:89:4a:f4:a2:2b:35:1d:6f:c4:7e:e7:87:b2:22:b4:46:c8:
         0e:b8:f3:48:68:45:56:de:12:a5:8e:5b:2c:ed:4c:7a:27:d7:
         56:56:13:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:40:04 2026 by rpki-client