Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
File:                     YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft (raw, json)
Hash identifier:          b8ZYFGqFft0zy0RhvH+jC/7KSGQjDSWpmvTuK/RxWj4=
Subject key identifier:   E2:DA:83:B4:4A:4A:C4:B2:A8:B4:7A:B1:56:C1:8B:10:87:B7:7E:55
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Certificate issuer:       /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial:       019FA0E020107EDAA4574524E5B34DA962A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
Manifest number:          0A35
Signing time:             Mon 27 Jul 2026 00:01:10 +0000
Manifest this update:     Mon 27 Jul 2026 00:01:10 +0000
Manifest next update:     Tue 28 Jul 2026 00:01:10 +0000
Files and hashes:         1: 1-oc31O5yGfJm_mzZWVg8lkL2Wxc.roa (hash: Zj2r9ATg5ynR2EMFecfZew5Um/8F+DW2YUnerFrqrJY=)
                          2: YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl (hash: ondtnB3N5j/9wEUTuZf6KaA0MSl7CBucpw8tiiwrhtw=)
                          3: _3UUxWfdIKjZ94RP_R__5_MA69o.roa (hash: xEub+d4iGHet4J1D7KwTY4kCPRXkdFvIc+V+yAPzmjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e0:20:10:7e:da:a4:57:45:24:e5:b3:4d:a9:62:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
        Validity
            Not Before: Jul 27 00:01:10 2026 GMT
            Not After : Jul 28 00:01:10 2026 GMT
        Subject: CN=e2da83b44a4ac4b2a8b47ab156c18b1087b77e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a5:e6:11:a8:9f:25:73:c2:e1:71:02:e8:92:
                    87:e3:24:78:67:71:f5:e8:a8:61:ec:9f:92:96:34:
                    8a:fc:22:c6:a5:6b:40:ee:98:b4:96:96:80:a1:d2:
                    60:c1:61:d3:6a:b5:8a:a8:10:0b:2d:99:c5:e8:93:
                    0e:7c:a0:58:a9:60:1f:da:4e:fd:c2:13:8a:76:68:
                    c3:7b:90:85:64:73:f0:0d:d4:3a:e7:a9:3c:23:9c:
                    11:80:72:f5:1f:46:6a:ac:70:d6:74:40:be:db:b0:
                    3c:82:19:c9:bd:59:7d:03:d5:96:cd:99:72:53:4e:
                    73:2b:47:28:21:8f:69:7a:21:eb:f0:f7:c4:63:46:
                    32:78:94:a3:8f:68:82:5f:4f:ea:28:89:cb:d0:ef:
                    12:69:cf:ca:64:bf:d7:1a:af:4f:cc:df:a9:35:ad:
                    29:8f:8d:6d:98:23:45:0c:ee:cd:45:ac:29:fe:76:
                    c0:93:3e:dd:0f:d5:6a:d6:3f:82:eb:8d:5c:65:26:
                    d1:f1:4d:9e:d7:d3:aa:f0:35:a3:6b:1d:e2:71:eb:
                    cc:f3:a4:1a:5c:47:10:1e:cf:fe:ed:c6:58:8a:a9:
                    77:55:f9:f0:fd:50:cf:9a:4c:1a:97:4d:e4:b1:8e:
                    b1:59:5b:11:69:ca:35:08:d7:4b:28:e4:b8:97:33:
                    12:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DA:83:B4:4A:4A:C4:B2:A8:B4:7A:B1:56:C1:8B:10:87:B7:7E:55
            X509v3 Authority Key Identifier:
                keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:0a:a4:b6:cd:8f:6f:80:9c:a1:e0:05:e2:38:9b:93:25:41:
         06:1c:7e:36:79:0a:6c:a6:28:fb:ad:bc:17:f2:76:11:3e:74:
         e9:04:ee:9c:c0:71:42:c7:90:51:ea:f9:f9:ef:8d:79:46:c1:
         f4:61:e1:12:5d:dd:e1:51:c2:b5:1e:77:b8:48:eb:af:2e:cc:
         aa:7f:c3:8e:f8:91:1c:df:6a:20:a6:e3:21:75:e2:1c:da:10:
         3b:9d:af:93:dd:c1:16:07:c8:7a:4d:6f:f4:63:67:6d:d5:39:
         4f:7e:55:78:30:34:69:8c:be:82:d4:71:12:89:a4:10:3d:f8:
         77:c2:b8:26:57:05:aa:29:e3:d2:29:99:77:73:fb:02:6f:59:
         9f:1f:43:f1:7b:f0:cf:d4:ec:51:73:24:55:15:b5:ad:95:d6:
         df:90:a6:00:b4:8f:01:ec:62:92:ec:d6:1c:6a:c0:b9:41:49:
         f1:2d:ed:0d:5d:73:2f:fc:58:d5:18:b4:c9:dd:2d:7f:fe:d4:
         87:a8:b9:34:48:ec:7b:47:08:a7:79:0a:3b:6c:91:fb:25:ec:
         75:cc:87:88:9b:8f:d3:da:d0:68:16:a3:66:a0:27:f6:14:98:
         09:94:5d:18:fc:f6:9d:6b:8a:6c:d2:9d:1a:d1:f2:02:dd:d6:
         67:e4:2d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:28:25 2026 by rpki-client