Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
File:                     lYjYtMeqRamyzXN8YUhx63GBur4.mft (raw, json)
Hash identifier:          6M6LPd3Nu8y4sdi1CM3JvcbQOnrRiWQBQVxWQRqPAWk=
Subject key identifier:   25:39:BF:01:FD:3C:E3:85:8F:05:9F:92:15:23:BA:16:84:3A:89:CF
Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
Certificate issuer:       /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Certificate serial:       019FA1842B0F95D789DA872F918C9F10D9F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
Manifest number:          1834
Signing time:             Mon 27 Jul 2026 03:00:21 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:21 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:21 +0000
Files and hashes:         1: 2nWQF39Iwb18W2QaNPcJ8wLWKO4.roa (hash: Y42qQxUJOveLJJBE2Ti4Rz4U/hBNZ5LB97/p6A86eqc=)
                          2: T-FG9QXYVrOvJD0ZFGx161F8-rE.roa (hash: fwBMGesT+i5+7hG4n6yFeYoLnMkVAp9abEUuKCI4Q+A=)
                          3: Y-Fl2pXcpykA2Ovy6Yiek0-GPJc.roa (hash: UtkgCH0IjnyruhNFvhdGIcEEQiu591rlsNdVQP1mlI0=)
                          4: aPrjwirQfjp2ASokssf7k_O--fQ.roa (hash: KQgnCiQXpKRoobrn80mbP5Rs8dHibT88YV5+D84Zc98=)
                          5: iXwUxzso3pt35Li0dSOoT5DmX3U.roa (hash: glAbr9K3ZOByGif0Hc8fgA/M/XOvS9j+i7ULdB74cTs=)
                          6: lYjYtMeqRamyzXN8YUhx63GBur4.crl (hash: olStpX+zeYtlebrPs4di4JRGQJcqn0riBlLDdia44PU=)
                          7: voqwh4ljJMAQM4zcSBxWmbzYHCA.roa (hash: lgapnEK9Q6w/tzBbAcuBz1bvcQ9NlQDVQ41y/zqkihE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 03:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:2b:0f:95:d7:89:da:87:2f:91:8c:9f:10:d9:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
        Validity
            Not Before: Jul 27 03:00:21 2026 GMT
            Not After : Jul 28 03:00:21 2026 GMT
        Subject: CN=2539bf01fd3ce3858f059f921523ba16843a89cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ea:b9:ab:f2:ea:48:a2:44:b2:40:60:3d:8f:
                    c3:96:df:23:0e:99:59:aa:11:62:14:ce:6c:0f:52:
                    f1:b9:c8:fa:13:0d:50:b5:9d:a1:c5:14:a9:e3:b8:
                    cf:f0:13:84:ac:1c:95:a9:03:c5:08:5b:42:5b:97:
                    0e:fa:16:43:51:98:d1:0e:13:e2:fc:0e:8a:e5:9d:
                    40:67:bb:62:89:6a:92:e9:76:47:f8:c6:da:da:55:
                    41:f2:32:7c:0d:79:06:c6:3d:9d:c4:04:d5:7a:62:
                    e8:9e:92:f6:55:a3:8d:7c:e9:7e:e7:ed:fb:98:97:
                    54:3c:95:5b:57:38:79:b6:c9:8c:3c:d1:84:a4:69:
                    bd:24:11:b1:98:19:5b:7b:d1:5a:3e:8d:10:ef:b2:
                    3f:d1:7e:27:fc:18:0f:cf:06:11:19:82:81:f0:90:
                    2d:65:c9:ec:2e:7f:b9:43:eb:3e:26:3f:b5:c1:3a:
                    bb:02:a0:ed:50:25:85:a3:5c:e4:52:bf:28:8e:c9:
                    dd:8a:f8:4d:d5:53:8c:29:2d:7a:4d:30:c5:75:6e:
                    89:e0:97:04:d4:15:e7:86:2a:1f:cf:b6:49:ed:d1:
                    28:a8:73:8e:dc:a7:9d:76:77:b3:2b:21:f5:a4:5f:
                    f7:cd:92:20:66:5c:dc:fa:11:63:93:1d:16:b3:0f:
                    bb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:39:BF:01:FD:3C:E3:85:8F:05:9F:92:15:23:BA:16:84:3A:89:CF
            X509v3 Authority Key Identifier:
                keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:96:56:e7:f4:dd:93:45:83:b7:4c:07:e9:b5:7c:83:dc:9b:
         09:1a:45:a4:69:4b:98:0f:35:d7:d8:e9:1b:db:f0:62:53:2a:
         e5:29:02:aa:e5:9f:bb:67:b5:35:10:1b:ab:f0:eb:29:76:06:
         3c:09:79:db:e2:e2:6d:ce:b6:28:18:8f:0f:e6:e9:4d:d8:35:
         d7:8a:cb:4b:50:30:27:30:19:90:4f:78:0b:c0:c5:ce:6b:1d:
         b3:e6:ee:2d:47:0a:ac:4b:c5:05:b6:c9:64:fd:a0:00:8b:f5:
         8c:c1:ac:2d:ea:93:99:3d:bb:93:e0:5e:2e:62:34:b2:2c:58:
         9a:03:18:f3:c4:97:94:6e:f8:90:12:04:ca:c3:ee:e5:b0:7d:
         cf:ca:d3:f2:d2:47:cc:9e:42:9c:77:73:40:c1:55:6a:0a:1f:
         ec:74:66:e6:40:87:a2:1d:45:4b:d0:95:ac:00:b3:87:2e:8b:
         88:d4:6e:de:cd:59:2e:69:4e:10:66:4a:3e:4f:5f:fe:ab:0f:
         b3:ac:ee:27:ec:45:9c:22:e2:42:31:85:e5:7d:f0:87:b9:df:
         de:17:3d:8b:d3:1e:22:45:77:bd:33:9f:9c:6d:a1:07:d8:92:
         f3:28:80:7f:02:19:d3:f4:3c:5c:7e:0f:41:d4:88:5e:48:12:
         7d:a7:f3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:37:22 2026 by rpki-client