Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
File:                     Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft (raw, json)
Hash identifier:          TP7gtkaxnSzwertjc7iTPa6dvd9ylu8c7/LvdV3YBRc=
Subject key identifier:   B3:A6:D7:C7:0D:F4:C4:CF:ED:A9:B1:A1:25:75:D2:7D:5E:14:AF:DC
Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
Certificate issuer:       /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Certificate serial:       019FA3AA199788DB6EA2935EC90309FC99CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
Manifest number:          19D2
Signing time:             Mon 27 Jul 2026 13:01:01 +0000
Manifest this update:     Mon 27 Jul 2026 13:01:01 +0000
Manifest next update:     Tue 28 Jul 2026 13:01:01 +0000
Files and hashes:         1: 1-Npj9uH2lNWYpla7MTqgqwt83iQ.roa (hash: JQmankrBVBlqdCQ8Vwvu+tFNWtJX5/kU02hONf99fCo=)
                          2: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl (hash: JTYAoqnsSaLcPTn9g0qE6ZbcojdjZ8FhrFOvTpG58V8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:aa:19:97:88:db:6e:a2:93:5e:c9:03:09:fc:99:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
        Validity
            Not Before: Jul 27 13:01:01 2026 GMT
            Not After : Jul 28 13:01:01 2026 GMT
        Subject: CN=b3a6d7c70df4c4cfeda9b1a12575d27d5e14afdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e2:e9:af:66:a3:16:84:ee:c5:95:fb:b2:d0:
                    36:2c:02:8b:c9:91:71:51:38:76:83:f3:c7:38:fd:
                    41:0b:0d:c0:c7:18:cb:23:47:0e:f7:bd:8b:20:24:
                    b2:7a:49:10:de:e9:ca:5e:0a:61:eb:a9:b3:3d:12:
                    cb:78:a9:d2:f3:f7:8e:4f:d9:7c:80:ab:5f:4a:86:
                    47:64:06:a4:f7:61:b9:01:f1:24:4c:ae:5b:d1:85:
                    80:91:ff:b8:82:fc:61:06:1e:25:99:26:78:e5:b3:
                    68:c2:e3:c4:3a:4b:39:48:c6:d8:fb:f6:31:f8:00:
                    8d:35:70:3f:f6:6f:b0:9e:c5:3c:e7:41:b0:20:d5:
                    bd:ed:f1:f1:9a:88:84:02:51:7a:14:7a:03:7c:de:
                    df:05:1b:fd:38:59:86:b8:9e:d5:30:32:09:0b:17:
                    ed:43:65:7d:51:89:12:33:d0:d2:44:0b:b6:7a:00:
                    56:ed:aa:77:a9:e8:1e:a3:56:8f:f0:dd:6f:09:9f:
                    39:52:68:54:6b:24:c9:28:7a:a9:a7:e8:9b:e0:e2:
                    05:43:5a:e0:30:14:8b:70:7d:49:88:6d:d6:98:87:
                    46:6f:c4:9b:08:78:c2:7e:14:50:02:6e:49:c1:17:
                    36:7c:80:d6:c6:02:ba:85:60:72:9f:94:85:7e:5b:
                    32:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A6:D7:C7:0D:F4:C4:CF:ED:A9:B1:A1:25:75:D2:7D:5E:14:AF:DC
            X509v3 Authority Key Identifier:
                keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:8d:09:ac:05:31:8e:a7:39:65:47:99:d0:87:be:b4:eb:08:
         a3:91:42:a5:53:b1:a2:06:51:cf:41:34:aa:7b:86:38:de:87:
         e4:21:9e:a9:d9:0e:84:7e:63:b4:14:a5:48:d0:58:7d:2a:b5:
         0a:fd:f0:0d:93:dd:df:9b:91:ee:3c:b8:a4:b8:77:9c:b6:06:
         a0:02:e6:cc:01:0a:b1:07:d4:69:12:40:20:d6:70:41:e7:3f:
         0e:2f:96:62:06:89:0b:4b:de:8e:dc:e3:43:96:58:7e:b1:21:
         2c:79:85:23:43:de:f4:65:1a:ba:73:c3:3f:d6:04:1f:13:e2:
         0c:5b:11:2b:ae:83:37:e6:ee:85:8f:92:ed:d2:25:a2:fb:bc:
         3a:a2:fb:2a:f2:bc:02:00:6d:eb:79:f3:09:6a:70:46:b8:19:
         bb:87:52:12:d3:d0:f9:62:9c:ca:9d:5f:66:b4:8d:7b:a6:32:
         f4:d6:20:9b:06:f8:6e:40:f5:24:65:49:8e:72:5d:6b:67:eb:
         53:0e:de:dd:b3:d1:b9:f8:4c:4e:79:5c:e2:28:f1:89:56:11:
         08:06:8e:01:bf:c3:e8:a9:a3:3a:09:a9:cf:b0:36:1c:6b:f1:
         46:ff:1a:97:b0:e5:a5:52:bd:6b:4c:fd:21:df:38:67:c4:2a:
         96:17:80:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 20:22:30 2026 by rpki-client