Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
File:                     yzAqJzq07yWo6pGko3ebz30d5Zs.mft (raw, json)
Hash identifier:          H6RxpqqHpcKM7J36K/Fvd1C0fI8Rc33zIfkiqOJfu7I=
Subject key identifier:   86:E4:8D:16:E7:81:C3:23:69:E4:4C:D0:25:72:5E:17:F2:0D:BD:5E
Authority key identifier: CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
Certificate issuer:       /CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Certificate serial:       019F85D74AF2960752789B2FB28354C63EB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
Manifest number:          114F
Signing time:             Tue 21 Jul 2026 18:01:46 +0000
Manifest this update:     Tue 21 Jul 2026 18:01:46 +0000
Manifest next update:     Wed 22 Jul 2026 18:01:46 +0000
Files and hashes:         1: pkANJWQGRxeYUhe9QHaxt_kkCZ0.roa (hash: JQPpr1NgeNVkQnAHd4pZVUEgVBBePxibUcmbvm5s/ds=)
                          2: yzAqJzq07yWo6pGko3ebz30d5Zs.crl (hash: 3ApUjDhPSmjK266o2XiQCIzzgtxSxoxqOb7FvU2tAPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 18:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:d7:4a:f2:96:07:52:78:9b:2f:b2:83:54:c6:3e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
        Validity
            Not Before: Jul 21 18:01:46 2026 GMT
            Not After : Jul 22 18:01:46 2026 GMT
        Subject: CN=86e48d16e781c32369e44cd025725e17f20dbd5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:71:69:f3:48:90:81:2b:4b:51:f3:1b:bb:98:
                    5f:43:c7:60:f1:b6:8f:4a:6d:3b:1d:98:40:dc:b2:
                    16:36:56:41:88:07:58:b9:79:d5:eb:58:29:9e:ba:
                    da:ef:41:1a:84:71:e5:e1:09:76:69:90:99:7f:37:
                    6a:54:2a:a8:6a:ad:02:0d:14:d8:a4:c9:99:51:d4:
                    a1:cd:92:84:be:fb:7f:ac:40:b8:20:24:2c:33:23:
                    e1:ff:3d:00:d0:81:ca:37:26:9f:2b:46:57:68:f0:
                    94:ab:11:b5:02:63:92:db:ae:16:ea:41:f0:45:9a:
                    2f:a1:65:13:de:db:8e:52:3f:70:57:1e:36:a9:22:
                    30:2f:42:5e:e9:26:6e:ca:2f:9f:bd:4f:82:41:30:
                    da:bc:89:8f:e1:b3:20:b4:43:35:c2:eb:55:24:a6:
                    ab:90:45:c6:41:18:63:0f:79:62:51:49:45:2b:16:
                    a9:2a:b7:91:f3:6c:d0:a6:15:19:00:3d:38:09:ec:
                    4e:5a:e6:85:fe:8c:1e:b2:9e:c6:68:a5:1c:80:3b:
                    45:51:fb:68:0b:c5:fe:aa:de:e1:1e:d3:35:d6:0f:
                    a4:65:46:b0:b0:ed:be:70:05:ce:c2:89:df:e4:a4:
                    2e:32:02:b5:6f:61:6e:44:9d:62:94:ca:19:be:63:
                    ce:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E4:8D:16:E7:81:C3:23:69:E4:4C:D0:25:72:5E:17:F2:0D:BD:5E
            X509v3 Authority Key Identifier:
                keyid:CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:7d:ef:90:ca:c9:9c:80:23:fb:e1:99:df:b2:0b:4f:5d:e3:
         24:e7:27:3b:49:54:98:ad:ea:8b:f2:cd:a1:b7:fd:4b:ac:b4:
         62:89:1a:f2:59:c0:1b:f3:88:34:a2:73:ad:cf:06:0a:2f:05:
         66:06:27:99:88:a6:44:a1:e4:e7:2a:02:f2:8f:6d:9c:3f:15:
         80:49:6e:c4:6c:57:70:cb:7b:50:e7:a5:26:6a:f5:49:cd:74:
         29:93:b4:84:0a:56:a9:03:ae:1e:4c:4f:8f:7b:d9:b8:35:48:
         71:ea:de:a3:22:d5:33:6f:74:1d:26:f3:84:cb:92:ac:dd:ba:
         c3:d6:b3:2c:dc:4a:c9:3e:e6:30:92:f2:67:95:ce:e7:87:89:
         01:0d:87:2a:bc:ee:88:de:fe:ed:f2:27:48:5e:6f:3e:a4:c7:
         29:af:81:7a:ab:3b:84:d8:12:45:30:e2:9e:c0:e1:f9:b9:18:
         e1:b8:8e:bc:f9:08:fd:6e:5f:ca:88:64:09:33:64:39:9b:e4:
         cb:9e:24:36:05:a0:dd:3f:70:e7:ca:b3:d1:c0:c8:ba:e2:76:
         fd:db:26:86:a4:9b:97:75:c8:a5:a7:dd:76:34:97:37:93:9f:
         13:02:01:b2:2d:3e:5d:ec:7f:f3:31:b4:51:f8:86:df:ee:fd:
         b8:17:c6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:14:21 2026 by rpki-client