Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft
File:                     _YgaVMfaqF6iOSqTEpRXjbzWp3c.mft (raw, json)
Hash identifier:          4u/d3D9vsJdlYKydy7CBXrXTQqg/4DzTc9S8isCDQgI=
Subject key identifier:   83:3B:94:21:DE:D8:85:84:70:A9:58:37:98:48:7F:8B:5C:53:4C:D3
Authority key identifier: FD:88:1A:54:C7:DA:A8:5E:A2:39:2A:93:12:94:57:8D:BC:D6:A7:77
Certificate issuer:       /CN=fd881a54c7daa85ea2392a931294578dbcd6a777
Certificate serial:       019F859F08C4EB1C54327F080215FD27BC47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_YgaVMfaqF6iOSqTEpRXjbzWp3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft
Manifest number:          052C
Signing time:             Tue 21 Jul 2026 17:00:19 +0000
Manifest this update:     Tue 21 Jul 2026 17:00:19 +0000
Manifest next update:     Wed 22 Jul 2026 17:00:19 +0000
Files and hashes:         1: Z9p5PRsPJcpcfVYqAkMqyBk3034.roa (hash: w8kHokFeQrpMZQbH5ifwyBNepwmmhZrhfy48stCdHV4=)
                          2: _YgaVMfaqF6iOSqTEpRXjbzWp3c.crl (hash: f46dpjUzHfv0t+wHqD6nSeS7ZpVX8zr+AMblC/sFEhE=)
                          3: hsde82Yn0Zai2KfVvOVvRJQkb6s.roa (hash: asD6OtDzLwUtMA2lL6s9NrcsSrhXt/W0aGYMIPz5FEY=)
                          4: ri3qi_3hbETchxAIYuVxET53Irk.roa (hash: E9/Qz2B3fdQEYvjVj/oCKg6LSUvau7pLbXfE6BliNuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_YgaVMfaqF6iOSqTEpRXjbzWp3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:9f:08:c4:eb:1c:54:32:7f:08:02:15:fd:27:bc:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd881a54c7daa85ea2392a931294578dbcd6a777
        Validity
            Not Before: Jul 21 17:00:19 2026 GMT
            Not After : Jul 22 17:00:19 2026 GMT
        Subject: CN=833b9421ded8858470a9583798487f8b5c534cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:12:e3:a3:aa:a3:80:01:da:11:11:5d:bf:55:
                    af:84:a7:66:68:10:29:72:2a:68:97:e1:ea:6c:77:
                    3b:6b:70:ce:0d:56:b2:1f:a8:bf:93:4b:9f:ef:18:
                    66:30:99:de:d8:3a:53:27:a1:6a:d2:a6:63:1a:71:
                    ef:6d:7a:01:a9:a2:f1:d1:4c:60:99:03:bc:d6:ef:
                    0b:70:3f:01:59:d3:43:ed:b0:57:e3:a0:8c:7d:77:
                    05:95:8b:f3:62:f9:bd:46:d4:43:34:be:99:85:67:
                    33:cd:f6:d0:56:b0:30:25:86:29:9a:3b:9b:95:26:
                    47:cd:e5:94:74:e6:3c:8a:49:45:eb:9a:b4:81:12:
                    63:25:68:84:5c:4a:8f:f4:77:0d:87:16:23:cb:16:
                    1d:7b:0a:8a:7d:f8:3b:e5:5a:82:ee:e6:9a:42:a1:
                    8e:47:cb:74:f3:1d:72:8c:cc:98:d8:f5:1d:91:c1:
                    82:14:ee:1b:14:8c:72:be:73:bd:a5:c8:c6:9c:b3:
                    bf:5c:0a:46:f4:a1:70:f0:62:44:6a:89:d2:06:43:
                    2c:ff:90:fe:75:4c:79:47:8c:ec:07:e1:8c:9a:92:
                    16:0c:03:93:d5:af:b6:f0:58:ec:aa:06:01:9f:f9:
                    80:e1:ac:f1:04:05:ac:32:ae:7f:ab:37:2b:61:42:
                    9c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3B:94:21:DE:D8:85:84:70:A9:58:37:98:48:7F:8B:5C:53:4C:D3
            X509v3 Authority Key Identifier:
                keyid:FD:88:1A:54:C7:DA:A8:5E:A2:39:2A:93:12:94:57:8D:BC:D6:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YgaVMfaqF6iOSqTEpRXjbzWp3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d5:60:ff:7f:ed:5a:63:ce:a3:d1:ef:96:b3:3c:e7:01:09:
         cd:ca:d1:e1:49:8c:e7:9d:f0:49:e7:98:4e:15:9d:e7:13:b2:
         23:a9:a5:9c:dd:73:20:63:35:c1:24:52:d5:1e:9b:79:8c:19:
         b6:7e:00:68:fa:79:12:f6:9f:6b:7f:12:2f:31:d9:82:2b:91:
         9c:76:88:f8:6d:43:8a:dd:65:71:c0:49:38:04:6c:4e:5f:4e:
         8d:23:d9:44:b6:45:b1:e5:ce:c2:bb:73:3b:6c:0b:a3:38:05:
         93:c0:a4:3e:91:c3:9b:cb:48:1a:83:53:b4:25:1e:d1:ae:51:
         5e:78:eb:3a:c9:1b:29:26:26:02:0f:66:bc:e5:e4:af:10:4f:
         c2:c9:af:bf:18:9b:ec:96:4a:cc:b7:90:33:8d:89:a0:99:34:
         91:4a:b4:39:83:29:e1:2d:73:a5:b2:40:fb:9f:ce:da:e7:dc:
         72:0d:0b:28:3a:a0:5d:9d:c0:c5:38:9b:d5:49:d3:c4:58:6e:
         6e:ac:b2:0f:2f:92:87:44:60:04:13:e8:ed:c1:c5:b3:36:2c:
         24:51:1f:bd:54:46:cb:b1:30:db:f2:ba:97:7e:e0:0a:4c:68:
         de:70:46:23:c6:bc:ca:a0:79:70:62:55:b6:a8:c3:be:f1:55:
         f6:7e:97:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:38:10 2026 by rpki-client