Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
File:                     Y0laTOy-r7Pq327QNJuwuW2kZO4.mft (raw, json)
Hash identifier:          KgVSm+AvUtlo+JjuhJSg64Q+PeEpchlihMpjviKIeXA=
Subject key identifier:   10:71:A8:57:43:52:78:AF:28:7F:38:85:20:4D:6F:94:90:75:4B:07
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Certificate issuer:       /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial:       019FF37C99495A35D702112415B4C5EA5305
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
Manifest number:          108C
Signing time:             Wed 12 Aug 2026 01:00:56 +0000
Manifest this update:     Wed 12 Aug 2026 01:00:56 +0000
Manifest next update:     Thu 13 Aug 2026 01:00:56 +0000
Files and hashes:         1: 9qaqud_c4V53thjjkEblp5yEtNw.roa (hash: 2A6FNxJL63HaW3rs8IFtns/rrq4grW3RAI1BGSdMLWM=)
                          2: Y0laTOy-r7Pq327QNJuwuW2kZO4.crl (hash: 3QY7NMnDCLgyVkxE6tYdDzkDRzF7N03ehLFLRZWln/U=)
                          3: h_hzjLW67wHlOyeEeE48OzILdyk.roa (hash: OBEq0IJXfkXFzJ3vqHNWHMcPsC7MjRnngy52bDrCEpY=)
                          4: tC2pXEfIIS_ssbaAFt1HYp326ls.roa (hash: Pi077bZmvt3rsE2utKBEwLCAlswX9cB3ZU6WM08tylE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 01:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f3:7c:99:49:5a:35:d7:02:11:24:15:b4:c5:ea:53:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
        Validity
            Not Before: Aug 12 01:00:56 2026 GMT
            Not After : Aug 13 01:00:56 2026 GMT
        Subject: CN=1071a857435278af287f3885204d6f9490754b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:79:d7:e0:66:c2:5c:38:69:ee:e6:05:f0:4a:
                    ca:7a:59:b1:4a:8a:65:1f:4f:9e:57:4b:f2:e6:8f:
                    d9:c3:4b:9d:49:4a:4e:8e:b7:cd:c7:75:2c:45:c8:
                    3d:67:6e:5e:80:26:7b:2e:ec:68:50:53:64:a3:7e:
                    2f:6f:43:89:be:da:79:23:a5:e7:a7:07:bc:df:b0:
                    d4:39:d2:6d:fe:f7:e1:a7:ca:0d:b8:fd:c0:16:df:
                    4d:4b:c5:55:41:14:83:42:a8:df:87:fa:2f:3f:1a:
                    76:91:ae:40:6d:3a:03:93:94:b2:7b:f1:42:c3:c3:
                    60:14:cf:e1:25:1f:f3:a4:f0:06:98:96:91:51:b1:
                    68:09:dd:19:30:5b:b9:f9:59:1b:4c:83:36:e0:08:
                    22:a3:fa:33:5b:23:72:3d:c9:63:57:42:02:43:3e:
                    fc:b9:fd:0f:66:98:30:ea:52:05:fe:c7:16:e9:2c:
                    8a:65:07:12:a9:78:56:73:d9:7e:38:e5:a1:f9:53:
                    03:2d:f4:e5:13:23:a3:0a:23:b7:3d:df:65:98:87:
                    16:03:4f:35:a7:d3:74:1f:78:57:b2:1e:15:7e:ed:
                    46:13:d0:62:fd:f7:bd:cb:cf:aa:6e:83:68:1e:59:
                    98:1f:5c:eb:f6:e0:18:81:d6:3c:66:38:df:07:0f:
                    f9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:71:A8:57:43:52:78:AF:28:7F:38:85:20:4D:6F:94:90:75:4B:07
            X509v3 Authority Key Identifier:
                keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:5a:51:c9:3e:e6:0d:5f:24:f0:2f:25:e7:f1:9f:45:45:91:
         3e:7f:99:5b:97:08:62:4e:a5:0a:be:c9:28:c5:ad:35:2e:78:
         e2:a9:68:bb:72:ae:d9:4c:9a:78:b8:99:3d:ef:e9:b2:0c:00:
         11:01:db:e7:bb:f6:b5:6a:65:91:64:db:a5:7e:bf:87:d7:fb:
         a8:b9:88:ca:fb:0d:73:f2:08:4f:2f:20:98:23:d9:ca:c1:4d:
         6c:6b:75:c5:0b:00:86:a8:fd:45:ba:25:e3:bc:ba:bf:27:f3:
         71:24:da:94:83:c2:84:70:29:45:b5:98:fd:d6:30:f6:78:d5:
         ef:be:ea:a4:86:d8:99:6d:05:bd:1a:9e:f6:e4:2c:0a:d9:75:
         d7:6f:70:01:d7:bb:b7:c9:b5:8a:f2:04:68:19:61:05:3f:cd:
         c0:e8:ab:a6:59:95:71:57:d7:8e:cd:c5:43:72:a6:7f:a1:59:
         3e:79:b0:98:59:fe:6b:c8:1a:75:2b:20:f4:29:e3:39:d6:31:
         a3:ba:ff:6c:a8:e1:15:46:5a:60:6c:30:34:ec:31:86:63:f0:
         c6:ca:ff:37:72:98:a1:5a:16:70:65:03:a2:a2:87:da:e4:27:
         ea:21:81:33:ef:89:8a:d7:f5:66:12:19:3e:58:f2:d6:20:5d:
         e7:ba:41:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 10:31:36 2026 by rpki-client