Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
File:                     yuMiUfEbz-mT0lR4AkweYd1Hp58.mft (raw, json)
Hash identifier:          1uoxfDKtlDsB+F7uv4DAaR8+nLtce5Z7MOlPNqLjIyI=
Subject key identifier:   EA:E4:96:A1:DA:E7:C6:35:88:3A:A4:0C:8B:B3:34:D0:B6:06:87:AC
Authority key identifier: CA:E3:22:51:F1:1B:CF:E9:93:D2:54:78:02:4C:1E:61:DD:47:A7:9F
Certificate issuer:       /CN=cae32251f11bcfe993d25478024c1e61dd47a79f
Certificate serial:       019FA14DB4CB781255A80487DE14973153FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
Manifest number:          09B7
Signing time:             Mon 27 Jul 2026 02:00:52 +0000
Manifest this update:     Mon 27 Jul 2026 02:00:52 +0000
Manifest next update:     Tue 28 Jul 2026 02:00:52 +0000
Files and hashes:         1: yuMiUfEbz-mT0lR4AkweYd1Hp58.crl (hash: EkPmWSiPXAbozPBQJM7DCsS6huw8S24U3+dWXr0e0VA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4d:b4:cb:78:12:55:a8:04:87:de:14:97:31:53:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cae32251f11bcfe993d25478024c1e61dd47a79f
        Validity
            Not Before: Jul 27 02:00:52 2026 GMT
            Not After : Jul 28 02:00:52 2026 GMT
        Subject: CN=eae496a1dae7c635883aa40c8bb334d0b60687ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:76:bb:1d:ae:f1:46:19:cf:d9:bd:b6:64:03:
                    73:32:c3:e5:64:e8:1a:74:67:d9:9a:c5:8a:44:4c:
                    cd:e8:c7:e8:21:6a:91:49:e3:e6:de:1b:3b:92:54:
                    97:1e:b1:a8:1e:18:af:f1:cd:e7:16:25:b7:99:4f:
                    a9:37:2e:ab:5c:84:3d:40:93:2c:fc:12:02:f7:15:
                    2b:f1:99:21:fe:1b:8b:d0:a3:d1:a5:08:83:47:e0:
                    19:8d:a0:77:c0:20:a0:f7:4c:93:04:e6:87:82:ac:
                    df:26:b7:2b:b6:11:de:3a:13:85:9d:d6:01:d9:bd:
                    de:9d:50:b5:16:9a:48:a5:9b:72:27:da:a7:13:a1:
                    a4:ce:d0:1d:41:dd:63:64:37:66:9b:eb:7c:72:ca:
                    a4:8d:cc:ea:98:f2:66:5f:0e:f8:e7:ff:09:84:97:
                    4b:07:1e:24:21:f5:01:50:be:6a:62:eb:c8:9a:61:
                    1f:00:e7:b3:29:3d:a8:07:0d:89:3a:2f:69:0b:35:
                    55:41:93:d9:21:a7:29:6c:06:1d:c8:25:8c:a7:da:
                    b4:c3:7d:ae:b0:79:c7:ef:c1:2f:b6:13:bf:98:79:
                    0b:58:8e:72:dc:5d:38:ad:ad:9c:32:52:bd:f7:a0:
                    23:cc:06:f2:e5:8a:50:6a:53:1a:0a:55:06:83:e9:
                    71:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E4:96:A1:DA:E7:C6:35:88:3A:A4:0C:8B:B3:34:D0:B6:06:87:AC
            X509v3 Authority Key Identifier:
                keyid:CA:E3:22:51:F1:1B:CF:E9:93:D2:54:78:02:4C:1E:61:DD:47:A7:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:fd:33:7f:fb:88:be:09:71:26:c5:0f:6a:26:c1:7e:2a:4d:
         b9:7b:be:de:3d:6d:48:5e:a6:e1:aa:8c:44:e9:bf:a2:5e:d8:
         b3:02:f5:1a:e1:9e:93:46:8c:a9:6f:b3:5d:ac:6e:db:65:f7:
         81:ba:b1:6b:ec:bc:58:92:ea:2b:f5:86:54:45:fe:87:6f:cd:
         37:47:b1:92:4b:fc:bd:4b:74:59:d2:ca:34:4b:6f:85:52:f3:
         0b:60:57:02:cd:6f:c5:fc:b9:54:37:22:61:07:f8:57:57:02:
         21:e1:d4:63:a6:8a:34:f0:e8:dd:78:31:d9:ca:20:0f:ea:45:
         80:c4:9f:03:90:56:cd:5e:11:13:a2:f4:df:26:4e:b8:9a:4f:
         4b:8e:4e:67:22:6d:28:b1:6e:e7:13:d7:46:0c:13:ea:78:27:
         ea:df:ef:1c:f1:f7:b2:95:86:5f:b6:36:5c:76:51:48:1c:16:
         db:2b:66:6b:70:4c:0a:9a:e1:d1:5d:89:0b:46:6c:f0:7e:74:
         df:69:ea:a4:8d:aa:41:06:49:32:ee:4d:25:d7:59:de:d2:1e:
         40:53:10:2c:de:29:9c:08:29:65:54:fe:80:67:7a:1f:c6:05:
         77:9b:95:63:4a:0f:40:e1:9f:33:cc:be:e7:46:c4:71:09:c3:
         d6:ff:e2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:42:45 2026 by rpki-client