Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
File:                     YihBc2HBxAaumnJX2qn7BiB4LTU.mft (raw, json)
Hash identifier:          4diXuIx8TX4KVvAe0hyHFqmq1W8+q2eCfGH6cw+EU9E=
Subject key identifier:   2F:19:33:40:65:B0:BB:04:51:F1:90:AB:79:95:6D:94:A7:53:02:33
Authority key identifier: 62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
Certificate issuer:       /CN=6228417361c1c406ae9a7257daa9fb0620782d35
Certificate serial:       019F848CCDD0D3E05A249E52310F6B089963
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
Manifest number:          1265
Signing time:             Tue 21 Jul 2026 12:00:47 +0000
Manifest this update:     Tue 21 Jul 2026 12:00:47 +0000
Manifest next update:     Wed 22 Jul 2026 12:00:47 +0000
Files and hashes:         1: 0821mhhu_dqdcqQbxajhPPTXDuU.roa (hash: ooSLPjcpcEvK3V7j97ECx3S8mqo+5KuosVxep9334Qg=)
                          2: YihBc2HBxAaumnJX2qn7BiB4LTU.crl (hash: o8rm6oosp+SXRTqjO8yYyYyZ1AsUEXyI0DVUfZ0ePQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 12:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:8c:cd:d0:d3:e0:5a:24:9e:52:31:0f:6b:08:99:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6228417361c1c406ae9a7257daa9fb0620782d35
        Validity
            Not Before: Jul 21 12:00:47 2026 GMT
            Not After : Jul 22 12:00:47 2026 GMT
        Subject: CN=2f19334065b0bb0451f190ab79956d94a7530233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d0:46:7e:bc:1e:64:3c:a7:c7:eb:5f:c0:a4:
                    f4:4d:2e:05:5b:27:4a:5b:be:26:58:6b:d3:9d:1e:
                    66:73:17:43:c7:a4:55:ed:86:d8:cf:0a:99:84:2d:
                    f9:02:17:59:b4:10:05:f8:24:a0:b6:58:d3:b2:73:
                    61:98:9b:6b:da:38:1e:29:12:36:ae:79:0f:76:28:
                    30:9a:d5:eb:55:d5:35:cb:38:5d:65:8b:a6:b7:8d:
                    2b:fe:37:23:1b:e9:a8:cc:54:fc:3c:d5:e2:e9:c3:
                    e8:1d:33:9a:95:dc:f3:e0:4c:1e:01:1d:cc:cd:91:
                    8b:69:19:bc:33:63:71:92:44:2a:8f:72:17:45:c0:
                    1a:db:52:d8:4d:57:57:f0:f2:ab:59:77:5b:71:f8:
                    db:0d:ab:76:ae:f5:74:03:e9:e7:23:24:73:bb:b6:
                    4e:76:76:a1:d9:e4:05:f9:ce:76:37:de:ca:7c:b3:
                    f5:5b:be:47:d2:91:f9:31:6d:02:91:f9:16:33:ea:
                    2b:8a:07:b5:bd:8f:fa:d4:ff:f1:c7:6f:39:73:59:
                    a9:f1:25:85:85:5a:e1:f0:f5:01:86:40:a8:95:e4:
                    f3:02:b0:e3:59:ed:62:54:67:a9:61:0d:16:14:2a:
                    9b:94:94:09:6c:f8:38:4c:b1:73:25:ee:c8:7a:2b:
                    f8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:19:33:40:65:B0:BB:04:51:F1:90:AB:79:95:6D:94:A7:53:02:33
            X509v3 Authority Key Identifier:
                keyid:62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:89:4f:19:b0:ad:89:9e:67:cb:1c:d1:61:64:55:d3:a7:76:
         ed:8b:d7:c4:c2:ef:8c:d9:48:04:2e:90:c2:d5:bd:df:d6:3d:
         06:18:38:34:47:36:7a:94:72:3e:8f:5b:0d:5e:ed:31:9c:f7:
         b6:41:50:39:33:f5:dd:5d:69:2b:c4:9b:1a:84:4e:ee:82:d9:
         65:8f:f8:f6:4b:0d:91:c8:19:2a:ce:f1:ff:11:56:c2:f2:c4:
         13:db:14:66:64:c1:d6:ce:99:48:55:64:43:e7:3c:8e:2e:97:
         ca:5c:04:94:7d:d4:df:15:a3:38:fd:c4:72:e8:c2:4e:bf:c2:
         10:3f:96:00:7f:1e:ee:da:87:74:6f:2e:d4:f8:a8:76:11:bc:
         9f:26:1f:17:9c:fd:34:2e:3d:bf:7b:07:cf:91:3b:0c:4c:96:
         59:ec:89:c6:a0:f9:a7:e8:38:11:9c:87:5b:d0:f1:9a:75:c6:
         5b:41:ef:9f:fb:27:ab:65:97:b0:6d:64:7b:49:38:02:ca:a7:
         31:5e:3c:85:6e:36:b2:dd:fd:7d:3b:04:78:4b:8a:c1:a7:db:
         bd:3e:43:5b:67:27:1a:04:50:47:25:4a:44:de:d0:78:4d:5b:
         26:2b:c8:25:02:fe:3f:c8:75:f5:db:c1:d0:9f:a0:72:87:8e:
         c9:30:3d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:05:40 2026 by rpki-client