Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
File:                     ytecEmuC93zGO1prbNi9rm4PWjw.mft (raw, json)
Hash identifier:          39fh6uMaSF/tw4qaF7d5drQiJVfDm7DEzXKNe50hYVk=
Subject key identifier:   72:B5:94:5B:1D:8B:B8:1F:9F:82:85:B0:AB:8E:E0:99:C6:6B:6C:6C
Authority key identifier: CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
Certificate issuer:       /CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Certificate serial:       01A002B94C8A40534165A92CB2389FCC54B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
Manifest number:          1994
Signing time:             Sat 15 Aug 2026 00:01:33 +0000
Manifest this update:     Sat 15 Aug 2026 00:01:33 +0000
Manifest next update:     Sun 16 Aug 2026 00:01:33 +0000
Files and hashes:         1: 39TW_rteZEmG2yqgCNBCF7PjZJA.roa (hash: QiC1evAcCRcezlzRHbRvqDU6mKjNFQuGOEOLFGB1NnM=)
                          2: ytecEmuC93zGO1prbNi9rm4PWjw.crl (hash: Fvt2Ja+kM+bCmB1IpJDj4Tyz6PDuKrAjBIpABosD/Eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 00:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b9:4c:8a:40:53:41:65:a9:2c:b2:38:9f:cc:54:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
        Validity
            Not Before: Aug 15 00:01:33 2026 GMT
            Not After : Aug 16 00:01:33 2026 GMT
        Subject: CN=72b5945b1d8bb81f9f8285b0ab8ee099c66b6c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dd:68:62:c3:75:37:e0:b1:2b:56:1a:a2:45:
                    60:0c:08:9c:3f:5e:87:50:ad:19:f3:60:55:71:99:
                    68:ca:41:0c:34:55:7b:05:5b:a2:10:f9:ea:7a:1f:
                    fd:0f:58:20:59:47:1b:2b:a6:30:58:69:95:4b:28:
                    53:ff:ce:12:53:46:e7:bc:a6:0c:d9:3f:4e:bc:07:
                    02:c6:88:10:54:11:f6:f6:97:68:89:59:ef:9d:3d:
                    4b:58:d4:60:69:1a:49:39:63:76:8c:64:0c:fc:5d:
                    2a:92:76:c8:a4:da:c8:8c:60:fd:0c:76:5a:12:6c:
                    e2:5e:0d:f7:ed:4f:7a:a2:e2:af:89:e0:8d:26:36:
                    a8:b2:fd:cd:63:fc:6d:aa:12:50:d1:f4:6f:fd:55:
                    5a:0b:76:1a:c5:51:59:47:59:e7:4a:8b:66:14:c4:
                    ef:26:b7:53:66:93:4b:68:b1:e2:8d:0e:b5:aa:a1:
                    b5:ae:a4:aa:8e:55:6a:f4:5e:bc:1e:f2:46:92:8a:
                    dd:70:01:d6:42:fc:22:26:1a:5f:9d:06:10:c1:f8:
                    00:be:8d:b1:8c:95:ab:bc:74:5a:fa:f2:a7:89:57:
                    59:32:15:d1:fa:6d:99:55:5e:2c:da:14:02:1f:dd:
                    8f:41:7f:93:b4:d4:81:1e:eb:0c:c4:48:86:ff:bf:
                    1b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B5:94:5B:1D:8B:B8:1F:9F:82:85:B0:AB:8E:E0:99:C6:6B:6C:6C
            X509v3 Authority Key Identifier:
                keyid:CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:d8:0c:2d:48:d6:c5:5f:a3:34:15:8d:13:63:58:9b:6f:f9:
         fe:70:e3:14:b0:15:f0:0e:bc:d6:8d:c0:a5:49:6f:c9:e2:38:
         0a:eb:80:f2:39:48:ad:7a:7a:24:66:a5:b9:ed:61:66:79:fa:
         a6:fe:f4:97:7f:96:dc:37:1d:64:39:7a:6d:88:9e:36:98:e7:
         ce:f9:16:69:2a:40:0e:97:ac:92:53:9a:6a:44:c9:e8:2d:64:
         0b:b0:27:e9:e3:73:d5:d6:d6:92:6f:6d:9e:c4:b7:d1:f8:96:
         7b:0a:fc:76:eb:98:8e:69:14:e8:6f:3d:5a:3f:97:b4:78:bf:
         1b:72:f2:be:10:d2:ae:c4:65:e1:b4:32:c5:f7:02:31:a8:2e:
         ad:91:83:3e:41:13:1f:16:4b:d8:fb:91:64:67:e8:ef:db:bc:
         bb:07:2f:fe:4b:8f:5e:79:32:e0:7f:6e:1b:c9:fa:ab:88:0c:
         4c:6b:ee:a8:c9:d1:04:e5:2f:e9:2e:27:54:f5:6b:cc:01:9f:
         98:d2:87:70:84:cb:47:10:84:93:76:ee:c2:b5:ef:90:66:bb:
         85:e2:d8:df:cc:28:9c:ab:ec:6e:a0:c1:9d:eb:75:77:9f:b9:
         83:63:bb:89:20:f6:9e:da:cb:5c:cf:e3:dc:3a:1a:ce:60:2a:
         e0:36:a9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:44:54 2026 by rpki-client