Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.mft
File:                     yMr0p4F9msWWHUKkx-WuGrHRg_o.mft (raw, json)
Hash identifier:          uIqIcTLWlU3mtcNGwmYTuaPLCzeIPfszSJ58OiTthqg=
Subject key identifier:   52:8B:6A:36:57:1D:29:84:A0:76:7C:93:1B:0B:E5:C7:75:40:F7:3D
Authority key identifier: C8:CA:F4:A7:81:7D:9A:C5:96:1D:42:A4:C7:E5:AE:1A:B1:D1:83:FA
Certificate issuer:       /CN=c8caf4a7817d9ac5961d42a4c7e5ae1ab1d183fa
Certificate serial:       019F37F2E4999117A0D16FE84F3A9B10FAAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMr0p4F9msWWHUKkx-WuGrHRg_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.mft
Manifest number:          03
Signing time:             Mon 06 Jul 2026 15:01:32 +0000
Manifest this update:     Mon 06 Jul 2026 15:01:32 +0000
Manifest next update:     Tue 07 Jul 2026 15:01:32 +0000
Files and hashes:         1: 8txx-a7bVPOx2o3RXnkrRbsFJvw.roa (hash: 9QzPxs6o1/HIn/z859bIlS9gq61Oxzk7wr0uT3OmX3c=)
                          2: yMr0p4F9msWWHUKkx-WuGrHRg_o.crl (hash: by6r83ZAkKGj352uMNURFiePUMj88CAOTvwdF9L0BQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMr0p4F9msWWHUKkx-WuGrHRg_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 14:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:37:f2:e4:99:91:17:a0:d1:6f:e8:4f:3a:9b:10:fa:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8caf4a7817d9ac5961d42a4c7e5ae1ab1d183fa
        Validity
            Not Before: Jul  6 15:01:32 2026 GMT
            Not After : Jul  7 15:01:32 2026 GMT
        Subject: CN=528b6a36571d2984a0767c931b0be5c77540f73d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:86:47:56:f2:d1:ac:85:97:71:2e:6b:4a:64:
                    7b:80:0a:1c:de:d3:29:70:7d:c9:c4:a9:31:3f:86:
                    56:18:e4:54:e5:9e:91:78:5a:4b:54:a8:89:0c:09:
                    f3:88:76:db:9e:75:1f:02:da:87:0c:eb:ec:ea:b7:
                    84:79:75:b0:a6:74:e6:32:00:b2:68:a5:b2:99:10:
                    46:6c:ed:86:e2:24:6f:a8:e5:bf:9b:13:4c:76:59:
                    dc:b2:56:70:93:f4:58:73:57:06:50:c1:19:76:b4:
                    2d:6b:d1:2d:af:5d:1b:7e:49:79:82:68:86:53:42:
                    dd:a6:d6:4f:c5:4f:89:20:a8:de:eb:35:dd:8b:3d:
                    b2:e1:45:bd:71:16:3d:4d:ee:28:06:fa:45:05:a7:
                    60:07:ee:5b:48:11:a8:e2:9e:e1:87:11:4e:9b:cf:
                    c2:6d:5e:1a:d1:8b:d3:1e:08:9b:d4:23:fe:78:21:
                    93:da:18:a8:71:de:fc:88:c2:5f:2c:c9:97:cd:73:
                    43:e1:c3:05:14:04:13:b4:0d:64:19:f7:06:28:a4:
                    e3:79:7d:16:f8:3c:8c:e1:3a:e1:52:70:c3:6c:3c:
                    be:84:8d:66:c1:f1:67:3f:57:d4:fc:80:c7:e0:69:
                    3c:3e:66:b1:8f:4b:17:76:93:7b:e6:80:c9:71:cb:
                    5e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8B:6A:36:57:1D:29:84:A0:76:7C:93:1B:0B:E5:C7:75:40:F7:3D
            X509v3 Authority Key Identifier:
                keyid:C8:CA:F4:A7:81:7D:9A:C5:96:1D:42:A4:C7:E5:AE:1A:B1:D1:83:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMr0p4F9msWWHUKkx-WuGrHRg_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:35:a9:00:1b:53:b5:7b:9e:b1:b3:9e:ef:71:bc:17:61:a1:
         fe:3d:41:f9:89:c6:51:cb:68:66:ec:b7:bf:0e:e6:9f:b3:9a:
         de:d6:ba:ad:95:5f:2a:d6:0f:3b:56:48:f7:08:50:3a:cb:b6:
         23:7e:9b:b6:c8:a9:e0:99:3b:7b:f4:d0:4c:1c:53:fa:5e:2d:
         4e:bb:ce:8b:83:fb:2b:0d:e6:ca:cc:55:44:ab:94:7e:30:7d:
         5f:8a:fb:e6:ed:1c:c6:6a:12:ad:5f:82:c7:98:a5:01:c3:06:
         93:9e:fa:25:b1:e8:dd:5e:1a:c9:8d:b4:aa:04:40:ef:5a:6e:
         e2:97:51:a3:17:81:f2:10:c8:56:ad:b7:3b:45:19:aa:09:23:
         71:c5:e3:99:a1:94:c6:5a:87:ae:b6:cf:be:a3:5a:97:6b:71:
         ed:4a:41:3b:87:e4:db:a2:bd:8b:bf:9c:87:13:1d:37:51:f5:
         93:72:3f:7b:20:95:00:27:43:fd:2a:27:b9:ec:05:aa:4e:d4:
         97:9c:d8:aa:8a:2a:b7:ab:49:60:81:50:b0:51:78:e8:dc:0c:
         d1:c4:db:7b:f5:e0:7f:c0:a1:fb:a0:59:50:e9:89:c4:23:66:
         df:33:13:5f:60:06:3e:31:be:ae:17:99:fb:d9:7d:96:7b:aa:
         fe:e6:1e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 23:18:07 2026 by rpki-client