Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
File:                     YjUmrZ--xXT6TsPZuttUM_2qyns.mft (raw, json)
Hash identifier:          3jyfUpvRABO/aH8u3Irew/NlqlfW8Jz+yedUg09xbII=
Subject key identifier:   5D:0D:2E:19:BF:13:55:B9:61:C1:D8:77:B7:22:93:4B:07:B8:36:49
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Certificate issuer:       /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial:       01A028EAC92ECBF36CBC1FF1E4BE42FF9FAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
Manifest number:          102F
Signing time:             Sat 22 Aug 2026 10:01:10 +0000
Manifest this update:     Sat 22 Aug 2026 10:01:10 +0000
Manifest next update:     Sun 23 Aug 2026 10:01:10 +0000
Files and hashes:         1: 4Mc33bIPqXNt0WBKTY6IWbhZhyI.roa (hash: 0CyjN4fDt2gePEzz6GNI+6v2hHdu94zd3doXA9mCmrY=)
                          2: E7S8kk0v-3rKEWlslioybHa5U2o.asa (hash: CrfGOpfT92BFeNnmG2NLzbIsZjJeDSaj2z6bEyCVnBE=)
                          3: P5w8UdbfAfDa1DxOi4VrhWTzLpM.roa (hash: +0DQfwomOYLD75ppkH2FpMEhDzxTGpHuszvhO6Ri7kw=)
                          4: YjUmrZ--xXT6TsPZuttUM_2qyns.crl (hash: +wGpPzJKI4cuKaJHXTj+UusU9IMzCHn+TPdpKFmTrqw=)
                          5: YrZcQqizcm-6Ws7265yR5ro3QoE.asa (hash: MFAOo3Xix00XFxAQiqGQoGajsrjp1l0fhfv38HvzhSI=)
                          6: fAgTSS_ONStFnLvEGPMgmGZBmpo.asa (hash: TOVMYJAfL34na7IHXLihlNeKoxMB/uFVliwHd1D3Uzc=)
                          7: i2ZN82VS7VSqjYAHCBTpFBgLiEo.roa (hash: gw1xxGQ0BqeQr6XFI4+gKsjUN/m1I0WJsAj9BQrH0uA=)
                          8: uq7KjFfupPB_i8cccfycTh05AaQ.roa (hash: q7ZkYvBa6WisIOhSf12hByjNMV7uSrIgT5csQL8UbvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:28:ea:c9:2e:cb:f3:6c:bc:1f:f1:e4:be:42:ff:9f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
        Validity
            Not Before: Aug 22 10:01:10 2026 GMT
            Not After : Aug 23 10:01:10 2026 GMT
        Subject: CN=5d0d2e19bf1355b961c1d877b722934b07b83649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8b:af:80:62:dc:25:6f:9b:89:c4:e4:51:04:
                    9f:b2:fa:b2:3b:cd:50:ef:6a:fa:df:c2:74:ec:c4:
                    5c:79:13:08:26:e0:d9:49:b7:af:57:6e:e5:fa:32:
                    2b:8d:76:9a:c8:ea:61:48:c1:92:8e:43:a0:36:17:
                    e5:c0:97:a1:72:70:a0:7d:38:ad:eb:9f:a3:7e:56:
                    8d:63:c6:b2:7e:12:fc:78:ab:e5:51:7d:69:39:32:
                    2d:0f:0a:88:b3:18:00:4a:41:dd:5a:c9:96:6d:cb:
                    a0:cf:cc:61:c3:19:ce:18:83:dc:21:75:6c:79:32:
                    06:4f:1b:cb:18:80:04:62:a1:b2:60:7f:3b:99:d4:
                    39:23:e9:68:b7:64:fc:68:80:cb:c6:71:08:f6:8a:
                    63:81:b2:b9:41:55:fa:99:f3:e6:d6:93:12:2d:89:
                    31:d0:21:01:ab:91:02:a9:39:33:d8:61:28:8b:0a:
                    da:3a:52:66:31:95:71:57:44:46:5f:01:3d:ec:ea:
                    0a:e8:a6:8e:9a:6d:ca:56:55:28:db:77:5f:70:cc:
                    94:fa:06:aa:a3:d7:9a:17:2f:51:93:86:cc:90:71:
                    ec:2c:6e:61:82:59:ed:eb:97:a5:fc:44:12:aa:82:
                    b9:c3:53:ea:63:a0:53:1e:5b:d1:cb:cb:da:43:96:
                    5b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0D:2E:19:BF:13:55:B9:61:C1:D8:77:B7:22:93:4B:07:B8:36:49
            X509v3 Authority Key Identifier:
                keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:e3:29:c3:71:15:8b:79:3d:29:5d:b0:13:a3:fb:c7:f6:b5:
         7c:a8:cd:70:ed:6d:08:f2:ba:22:56:60:c5:e7:52:72:4e:83:
         e6:69:48:2b:0b:ec:83:5e:c3:fc:c5:c5:80:56:76:4e:28:15:
         47:ec:8f:9f:77:56:5b:33:62:bc:ff:8e:27:2a:57:bb:33:ed:
         09:4e:a4:f1:f4:49:cf:c1:c9:9e:f2:ad:31:76:e4:11:6e:1c:
         74:25:f9:81:9e:29:51:1e:01:3f:fc:5d:b6:d6:ff:9d:9b:bd:
         2b:42:5a:12:77:76:35:1a:42:ce:93:e2:a1:00:af:bd:83:38:
         9e:8b:19:82:bf:35:71:2f:de:3b:47:fe:0a:25:93:33:95:66:
         a1:55:5d:d4:dd:72:a8:c8:7d:5d:73:5c:95:f9:e9:d6:c9:44:
         f1:b2:66:3e:f6:df:b8:0e:bb:cd:f5:d7:59:c5:1e:05:d1:96:
         b5:0f:3b:f1:d9:fa:ed:86:11:0d:ca:20:db:35:80:e3:8c:d4:
         75:02:74:1e:3a:f8:17:27:51:d5:4f:6c:17:5a:d1:49:fc:3e:
         ff:8f:1e:77:0e:ce:c0:fd:7d:7c:7d:7f:86:6c:78:a8:13:63:
         02:54:df:5f:ef:9e:ae:1b:b1:55:4b:4d:e6:39:62:be:a0:ef:
         6c:75:70:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 20:20:44 2026 by rpki-client