Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
File:                     r_yn9tponMVFu7uVA5i6xAeXmqM.mft (raw, json)
Hash identifier:          VvYOBxb0L7LcQbS3YfgAe5YxoBt137S8UUBJ9ovUoAs=
Subject key identifier:   0D:1A:AC:7D:AE:F1:FA:BB:F6:53:40:6F:83:15:F0:9F:04:92:74:A9
Authority key identifier: AF:FC:A7:F6:DA:68:9C:C5:45:BB:BB:95:03:98:BA:C4:07:97:9A:A3
Certificate issuer:       /CN=affca7f6da689cc545bbbb950398bac407979aa3
Certificate serial:       019F9F2803CF1235D78A98C8780ADCA82E03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
Manifest number:          0737
Signing time:             Sun 26 Jul 2026 16:00:27 +0000
Manifest this update:     Sun 26 Jul 2026 16:00:27 +0000
Manifest next update:     Mon 27 Jul 2026 16:00:27 +0000
Files and hashes:         1: r_yn9tponMVFu7uVA5i6xAeXmqM.crl (hash: 4kGGiG3yezp6us+nZHpbtdx3BOoEeNfbWPbtxwSMudg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:28:03:cf:12:35:d7:8a:98:c8:78:0a:dc:a8:2e:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=affca7f6da689cc545bbbb950398bac407979aa3
        Validity
            Not Before: Jul 26 16:00:27 2026 GMT
            Not After : Jul 27 16:00:27 2026 GMT
        Subject: CN=0d1aac7daef1fabbf653406f8315f09f049274a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:e3:88:11:dd:39:f8:04:50:18:21:a4:e2:
                    43:a1:87:34:62:83:66:56:c8:3c:00:6b:02:65:13:
                    c4:b5:44:eb:f3:34:72:de:3b:b0:32:15:cf:cd:ce:
                    77:51:c4:38:d8:8a:b3:cf:f9:16:3d:c4:34:f5:14:
                    26:c4:98:4e:e4:00:14:06:16:8c:65:f1:dc:8d:2a:
                    6c:d1:45:70:27:48:c2:73:90:b9:5a:f3:d0:bd:c9:
                    8f:ce:53:08:0b:67:5d:cb:fc:7c:4c:ac:db:b9:97:
                    b9:69:1e:fa:f9:25:be:48:81:00:35:7a:69:99:27:
                    18:3c:7a:d8:ae:4e:32:80:f5:86:43:03:20:b4:c4:
                    07:51:05:06:2a:58:d2:bb:3f:7d:43:e5:b0:23:5a:
                    70:8f:17:20:dc:2b:2b:ec:96:8b:19:2e:8a:77:07:
                    ac:2f:f1:c2:a1:7e:bf:5f:f8:01:71:7e:6f:0e:2d:
                    ce:c9:de:fa:53:3a:27:3e:84:84:e6:05:65:79:9e:
                    e2:4a:d1:a3:0d:91:d6:07:90:0b:7e:da:06:59:2b:
                    df:90:8c:78:33:99:79:76:aa:c7:05:a2:20:f5:49:
                    55:0a:1b:55:3d:41:c3:38:50:7b:53:99:5d:bf:82:
                    14:52:32:07:d8:54:4f:01:e6:7a:aa:d6:a2:ea:74:
                    25:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1A:AC:7D:AE:F1:FA:BB:F6:53:40:6F:83:15:F0:9F:04:92:74:A9
            X509v3 Authority Key Identifier:
                keyid:AF:FC:A7:F6:DA:68:9C:C5:45:BB:BB:95:03:98:BA:C4:07:97:9A:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:f1:b0:f9:ca:16:b0:ed:ba:d6:97:2a:80:49:73:66:74:a6:
         ff:64:19:37:d4:f8:a3:1a:cc:ea:61:11:e7:48:6e:12:bf:22:
         e3:21:3e:61:5c:ee:9b:63:9a:a2:b2:b1:5b:3a:84:61:b6:f0:
         a2:e8:98:cf:1b:ec:b8:c4:f8:b4:6c:f9:83:a8:2e:e7:8c:50:
         61:3d:55:c8:d6:3e:b2:4b:dc:65:03:8c:d3:99:7d:44:da:b9:
         98:67:e2:d8:6b:bd:dd:88:23:f0:e5:d8:6d:34:78:c4:e9:42:
         f0:c9:ae:b5:73:16:0e:db:78:b7:f1:73:a6:48:4a:6c:4d:24:
         9b:c2:8c:5e:c2:27:3f:b2:b3:6e:3f:5b:46:09:76:b4:c5:b2:
         42:65:c6:83:51:bd:b8:84:03:38:d4:b1:29:01:41:11:1f:02:
         36:7d:e8:18:09:d7:bc:0f:81:5d:22:96:50:5f:c1:e2:93:dd:
         f1:55:fc:ad:1f:a7:0d:4e:91:0f:e2:6b:5f:78:fa:5a:d3:fc:
         84:47:17:bf:12:12:41:b1:06:92:95:08:5e:d2:19:80:1f:c4:
         1e:ab:78:d8:37:f5:98:fd:72:db:4f:5d:99:07:e0:e9:bd:96:
         a0:fe:1b:f1:75:91:c7:a7:31:b7:f0:17:34:3d:91:f2:49:94:
         5f:df:df:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:36:33 2026 by rpki-client