Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft
File:                     Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft (raw, json)
Hash identifier:          QjStsk2f7A7VcZhjmMjB51usl6WcmW6VRQgonNufpbI=
Subject key identifier:   B4:52:B9:54:89:D4:1C:84:6C:5D:CA:45:3F:58:26:1B:F0:D9:6E:13
Authority key identifier: 62:EF:97:75:50:FA:7C:81:3D:EE:5C:1B:90:E9:51:1B:9C:68:DD:0A
Certificate issuer:       /CN=62ef977550fa7c813dee5c1b90e9511b9c68dd0a
Certificate serial:       01A00281D6A27A07DEE5BB8BE95CB3F15C73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft
Manifest number:          0D44
Signing time:             Fri 14 Aug 2026 23:00:58 +0000
Manifest this update:     Fri 14 Aug 2026 23:00:58 +0000
Manifest next update:     Sat 15 Aug 2026 23:00:58 +0000
Files and hashes:         1: Yu-XdVD6fIE97lwbkOlRG5xo3Qo.crl (hash: EpN2avuOdg3r2N2blZa/QrSogmTQgnZmSdyCyHe9YD4=)
                          2: rt1jmEWcts8v82w_w-CIFAF6XNA.roa (hash: 2a8J88cRjXc2S0NbaaMIdvXvo0cjbAPhTxZH/dueltY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 23:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:81:d6:a2:7a:07:de:e5:bb:8b:e9:5c:b3:f1:5c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62ef977550fa7c813dee5c1b90e9511b9c68dd0a
        Validity
            Not Before: Aug 14 23:00:58 2026 GMT
            Not After : Aug 15 23:00:58 2026 GMT
        Subject: CN=b452b95489d41c846c5dca453f58261bf0d96e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:36:72:7f:7f:31:89:b3:65:13:ab:2b:ae:9e:
                    e2:59:6d:cf:20:29:d2:e0:08:54:4d:02:22:8b:64:
                    bc:c8:a1:8f:a6:92:2b:16:85:62:74:e5:66:39:bb:
                    33:21:00:e6:0c:e7:a0:ab:66:fa:e9:24:dc:7d:95:
                    74:80:61:25:2f:3e:96:f6:0b:2b:df:86:d1:85:31:
                    67:4e:18:1f:b2:c3:c1:f9:f5:22:31:05:6d:ff:3c:
                    2b:1c:1d:64:03:6a:9f:72:1e:0b:5f:5c:a3:fe:d0:
                    5e:1d:54:d9:68:ba:70:72:7e:f3:3b:f7:6d:b2:bd:
                    bf:f6:1e:66:dd:2e:11:81:3d:24:6f:8b:8b:30:ca:
                    49:49:98:3e:01:6e:61:a6:8d:79:29:7b:b5:9d:97:
                    b3:db:4e:49:6e:22:1a:b7:8e:27:30:b4:74:34:8b:
                    fe:33:3d:0f:13:35:6f:1e:bf:1b:8a:7b:e5:fd:a4:
                    c8:9a:0f:30:d3:be:82:8e:97:63:58:08:58:8f:d2:
                    b6:f7:0c:cd:58:2b:9a:da:28:f0:22:c9:9d:15:88:
                    19:e7:f8:d3:3f:22:0a:eb:0a:fe:7c:54:0b:84:90:
                    8e:51:1e:1b:18:74:bf:6f:a3:84:0c:12:6a:3b:e5:
                    6b:2a:f8:b5:75:a2:24:0c:25:c1:f3:cd:02:84:26:
                    cd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:52:B9:54:89:D4:1C:84:6C:5D:CA:45:3F:58:26:1B:F0:D9:6E:13
            X509v3 Authority Key Identifier:
                keyid:62:EF:97:75:50:FA:7C:81:3D:EE:5C:1B:90:E9:51:1B:9C:68:DD:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:98:8b:65:d0:03:7f:fa:d7:bd:b3:7f:f8:2e:3b:90:e0:ed:
         e3:64:74:8f:3d:be:e1:91:2a:3f:e5:7f:45:ee:46:8d:e7:d2:
         0e:ef:47:85:42:6b:3b:ce:ca:6f:c4:25:97:79:d8:9f:e2:0c:
         3d:0e:af:63:a8:a1:01:5f:ea:a4:9c:6e:b3:58:c9:88:f7:93:
         29:54:04:1d:15:f0:b9:a2:9e:bc:ea:e3:57:19:73:ff:9f:b9:
         48:2d:ac:c4:63:fe:a7:e0:05:eb:41:0c:17:e4:87:01:3d:93:
         94:f2:ca:90:a1:95:5b:2c:4b:29:11:96:ed:05:0b:be:39:f1:
         1a:c3:73:72:db:9a:c5:99:fe:c0:26:69:6b:e8:44:4a:57:e3:
         af:ca:4e:e6:18:c2:5c:73:59:00:90:c7:38:19:41:3a:0d:36:
         50:35:6a:3e:f0:c8:a1:1d:fd:06:db:cb:1e:7a:6f:44:72:58:
         ae:18:a0:01:7f:8e:ad:ae:0c:c7:a0:a8:20:4e:1f:3a:d7:09:
         cf:e6:f9:cf:08:33:a5:eb:5b:f5:07:3d:25:86:6b:97:35:9a:
         f7:73:3c:79:12:f0:6b:fc:0b:41:59:0d:fa:60:89:0f:21:9f:
         e7:66:06:43:a6:1b:95:ed:62:13:85:48:ca:5d:74:04:f8:0e:
         d6:fe:71:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:44:03 2026 by rpki-client