Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
File:                     RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft (raw, json)
Hash identifier:          LQMl34oDs1nT+uOLI49V3nHye/EKcGlV7f+n8VyDEtc=
Subject key identifier:   EF:83:57:E1:B6:22:AE:44:3D:40:D2:66:02:8F:8B:CC:1E:A4:31:BB
Authority key identifier: 47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
Certificate issuer:       /CN=472694d8a399a3a66f442ec72295c754acbbad41
Certificate serial:       019FF7C80654A6AA9E9BD26258CF1E5C0C0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
Manifest number:          18D4
Signing time:             Wed 12 Aug 2026 21:01:48 +0000
Manifest this update:     Wed 12 Aug 2026 21:01:48 +0000
Manifest next update:     Thu 13 Aug 2026 21:01:48 +0000
Files and hashes:         1: 9Y9_-ghmVyAuliB_ZM6L4N2aR9Y.roa (hash: AlB+NM2coMQme+Vwjxfjbx7bvSYOwHST/cCoDhabdh8=)
                          2: BGx_SKWg0A0x4u2zJMu40hnQx4Q.roa (hash: 3vgm19azZKbua/L5jF2wErVGYC2PH4djUu3AdY79HJs=)
                          3: RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl (hash: vAFg/wV72q8Ai5lUuatLyL3419LQaTXyWMvHdwNlXrY=)
                          4: gHq4ZQAB43U72DuDXjjiZ0-2-00.roa (hash: UuXFiLQX/A/tFOUVtGrjRAOGOHSsYt/+KkH7+iWkPIk=)
                          5: xiXKqk3tGFwKj2r6-VSmJj7eq_k.roa (hash: 1zP1wd86zOnUvyVaHLe0E+PkkU2X/81i9Nla1ulLn0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f7:c8:06:54:a6:aa:9e:9b:d2:62:58:cf:1e:5c:0c:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472694d8a399a3a66f442ec72295c754acbbad41
        Validity
            Not Before: Aug 12 21:01:48 2026 GMT
            Not After : Aug 13 21:01:48 2026 GMT
        Subject: CN=ef8357e1b622ae443d40d266028f8bcc1ea431bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7c:a0:ce:b5:df:c5:e0:35:bc:59:c5:f5:5c:
                    79:20:11:7c:5e:bb:20:ce:f8:85:a3:96:08:3a:b1:
                    45:6a:5d:4c:b5:4d:85:2a:ab:bc:57:1b:45:dd:41:
                    1e:fe:e0:4f:20:ad:4a:7c:38:31:ef:e1:d7:a5:d9:
                    cd:ec:3b:21:c6:9f:88:f0:25:c2:54:fa:4f:70:99:
                    d0:c2:86:ba:38:59:a0:65:0e:ec:76:39:2c:9d:cd:
                    7d:02:17:82:95:1b:d8:db:75:36:9e:61:4c:b7:4e:
                    a4:91:d0:3c:34:98:a9:6e:4e:c4:68:aa:a7:2a:98:
                    48:17:47:5a:4d:8a:48:c4:e5:60:31:45:b5:cd:00:
                    3b:66:56:8e:b2:0a:cb:bd:33:41:9d:cb:11:d5:4e:
                    da:0d:03:d6:4c:a5:01:62:7f:e7:7b:73:02:36:a7:
                    1a:a6:8e:b8:65:d5:a5:92:b6:ce:7b:72:2b:f2:58:
                    1d:db:ce:d1:48:35:8d:96:41:71:a3:03:e0:f5:ed:
                    8d:9f:56:70:3f:a2:cf:9f:a8:6b:9c:c3:ff:25:0e:
                    1a:9b:c5:d3:50:99:cf:92:58:fb:39:b8:4e:01:02:
                    8a:a8:1b:81:f4:2d:1c:f3:60:f0:43:eb:6c:c4:98:
                    fe:17:b5:e3:30:7f:fd:18:1c:90:c8:4b:a1:34:4b:
                    10:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:83:57:E1:B6:22:AE:44:3D:40:D2:66:02:8F:8B:CC:1E:A4:31:BB
            X509v3 Authority Key Identifier:
                keyid:47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:85:04:c8:2c:a9:22:24:ae:23:9c:bd:02:88:9b:cb:eb:30:
         30:fb:e0:5b:4a:27:bf:c9:0b:81:bd:cb:53:a2:2d:40:47:59:
         a5:c9:e5:83:48:cb:fd:40:23:54:30:be:34:1e:45:8f:e7:5e:
         89:a1:9e:03:3d:b6:35:fd:43:70:7f:03:1e:e7:c0:93:cf:e7:
         49:79:bb:4d:40:4e:54:6e:fd:23:04:4f:20:6f:61:ca:77:a6:
         6d:55:a9:62:c4:94:df:f4:59:2b:09:98:29:b7:6d:9d:05:aa:
         c3:6e:17:03:a6:46:96:19:c5:58:e7:c4:9c:84:a1:c7:d1:c3:
         39:17:34:60:04:a6:54:6f:30:4a:f9:e3:42:7c:0d:30:5d:d1:
         77:9e:87:23:3a:5a:c7:3b:1d:bd:3a:8b:7a:c0:39:3d:2a:8b:
         e2:b4:13:ff:fe:c7:71:c0:40:de:17:2b:73:78:ca:43:79:06:
         27:47:02:c2:84:84:4f:97:8c:bf:c8:34:49:9c:80:3e:57:f8:
         12:b8:bd:ff:0e:82:78:2c:a3:66:06:3e:88:1f:9f:ff:77:a2:
         ff:f1:3a:a7:64:fe:2d:30:02:d9:00:f1:1f:b3:0e:32:1b:ca:
         2c:86:9c:dc:34:64:99:ff:89:99:db:a2:0c:2a:74:23:16:26:
         ef:e5:16:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 00:34:27 2026 by rpki-client