Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
File:                     ysmhVQ09sawK6xHBbWPkimg7ygM.mft (raw, json)
Hash identifier:          57zrBHF6nRp5eCWGm9Q05B6sp0WgDbQp8m4E9kJuRFs=
Subject key identifier:   86:10:D1:17:D6:4A:47:B9:2E:B2:49:DA:9F:23:A9:F7:32:C7:A2:AA
Authority key identifier: CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
Certificate issuer:       /CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Certificate serial:       019FA184A488CED6ABB23D4B7FDD8AF5E924
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
Manifest number:          072A
Signing time:             Mon 27 Jul 2026 03:00:52 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:52 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:52 +0000
Files and hashes:         1: TuLRBXz6EERScy5OEhGKTfByxKY.roa (hash: 4zWLjSSgQ/CzE+D8xtj4xcI0MuMoMFUDlb+Cl92io8o=)
                          2: ysmhVQ09sawK6xHBbWPkimg7ygM.crl (hash: lbUBuF/dkqpVU6WNl/waImVmYPxdPj+he3Jufi2zYbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:a4:88:ce:d6:ab:b2:3d:4b:7f:dd:8a:f5:e9:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
        Validity
            Not Before: Jul 27 03:00:52 2026 GMT
            Not After : Jul 28 03:00:52 2026 GMT
        Subject: CN=8610d117d64a47b92eb249da9f23a9f732c7a2aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fc:42:2f:87:61:a3:21:79:8f:08:e5:b0:88:
                    b8:5f:cd:da:55:1e:0d:13:b1:de:ee:9c:56:b6:1c:
                    4d:f3:e7:fd:77:b9:2b:91:f6:be:e6:4a:76:b2:c5:
                    30:4a:76:71:aa:93:74:55:2b:c4:63:b7:34:4c:ae:
                    9f:b3:9d:25:2f:51:46:ea:ef:88:ae:cb:65:32:2b:
                    57:97:52:7a:9e:e1:6c:a2:06:2a:27:56:83:b2:47:
                    88:33:58:16:24:04:84:52:a8:df:d5:d0:1c:45:f7:
                    a7:df:c7:a9:59:de:53:b6:b6:33:42:35:e7:e6:a8:
                    99:ce:a0:54:70:fd:23:35:e0:3d:4c:31:ef:1b:22:
                    76:d7:f4:e0:69:77:9c:3f:ae:80:e5:dd:de:50:96:
                    1f:b8:6e:40:be:9c:78:da:5d:b3:2c:0d:ea:16:22:
                    9b:3c:a3:a0:a8:47:26:6e:c4:7e:14:57:35:cb:e4:
                    7c:5f:98:ef:b4:b4:2c:80:8a:86:b4:8e:21:0b:d4:
                    71:b6:16:f8:a5:3e:4a:3c:27:85:d9:e0:94:fb:ae:
                    57:49:ae:2d:87:ce:80:84:ec:b8:d1:e3:59:33:27:
                    54:86:e8:b5:ee:b4:d6:f6:9f:82:ac:59:fc:88:b4:
                    3f:f2:0e:1f:9e:5a:95:12:bf:6f:80:08:e5:3d:1b:
                    ac:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:10:D1:17:D6:4A:47:B9:2E:B2:49:DA:9F:23:A9:F7:32:C7:A2:AA
            X509v3 Authority Key Identifier:
                keyid:CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:0a:b1:5d:2f:89:c9:86:87:fe:a4:d6:c8:dd:7c:3e:16:09:
         7c:32:77:9f:12:5c:e1:13:7f:0f:2e:45:04:a8:c5:26:30:a5:
         5e:ea:2b:b3:75:4d:41:66:06:a1:7e:4a:c9:43:83:ee:fa:24:
         6d:cc:f2:e3:35:7a:d1:3b:7e:a7:f8:68:83:4e:c5:93:ad:1d:
         2a:8c:02:14:e8:0d:68:c8:c9:7e:f1:d3:2f:00:d0:b5:4a:c8:
         04:cb:72:e6:0e:3d:5d:dd:fc:37:8b:09:ac:bf:d7:bb:00:be:
         f6:d7:ba:69:dc:7b:59:bf:e9:22:0c:78:d1:98:ef:60:d7:8d:
         f1:5c:d3:65:3c:03:8e:e5:72:12:8c:d7:84:06:cb:f5:d6:4c:
         84:8e:22:7c:88:37:5f:94:a1:b1:a5:c6:f8:55:69:08:90:67:
         bf:8d:bf:01:69:18:a6:6c:58:69:9d:8e:75:a9:df:6d:09:23:
         1a:54:06:b4:07:25:be:11:91:4d:d6:ae:02:b5:d2:51:15:86:
         56:4f:b4:4b:3c:ab:3b:0e:c1:d6:fb:a6:ba:91:71:7b:a4:e2:
         cd:18:eb:ea:27:a1:ea:1b:f2:d5:0a:73:50:72:40:29:20:0a:
         7b:e0:16:1d:98:3a:01:3e:bf:58:d8:cc:87:c9:dd:f9:d9:a6:
         37:9c:1c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:11:17 2026 by rpki-client