Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File:                     CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier:          czhHjTAm7i2utcFbOI8PyJlBlD0h/WnZMms3hLrzm8A=
Subject key identifier:   AD:BD:0D:AC:48:03:0A:12:9F:D6:C4:AD:DC:44:D7:F4:AC:35:9E:6F
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer:       /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial:       019F08BD3342D0D83668653453A92186BAD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number:          0DAC
Signing time:             Sat 27 Jun 2026 11:00:44 +0000
Manifest this update:     Sat 27 Jun 2026 11:00:44 +0000
Manifest next update:     Sun 28 Jun 2026 11:00:44 +0000
Files and hashes:         1: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: QtBmOBy/cBPWCgEdKX1fprEBBdHANw0z+8sgn5KL1Xw=)
                          2: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
                          3: StKopN7mKY_G686fwWfLGQIs1ZE.roa (hash: Lt0qVcoh5gF6hn1K+QcayMd775gMjWFzF0XYTOVMzcE=)
                          4: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=)
                          5: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=)
                          6: h5YHyc0MmzGvq4YgXx8Mpbt82CY.roa (hash: hT18pU7cTeKJ68OyFrQNbEbvLKO/d8ePLsbG9hT8IJE=)
                          7: kT1MhOs2pjWPveWnnzpZvLwHE8I.roa (hash: PObzTeTNqjikv/tj+DTeCD2L5aW2W4bJwFPcLIU6GHY=)
                          8: mMhcTAUsEq-DNycXZbZCJR0srtQ.roa (hash: IfB3ppygA/MuKvduBRn6Oad+w/QpUoS9p6uwhj/GpXM=)
                          9: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
                          10: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:08:bd:33:42:d0:d8:36:68:65:34:53:a9:21:86:ba:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
        Validity
            Not Before: Jun 27 11:00:44 2026 GMT
            Not After : Jun 28 11:00:44 2026 GMT
        Subject: CN=adbd0dac48030a129fd6c4addc44d7f4ac359e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:13:df:20:b5:9b:8a:8a:a2:0c:87:98:ef:
                    78:e3:80:6a:9a:01:05:de:b7:1d:39:82:ad:14:0a:
                    c0:98:93:e3:f5:c7:00:18:f3:fd:ff:c1:6f:ba:f7:
                    ab:a4:a1:30:b9:92:81:15:b9:81:18:7e:d4:00:27:
                    25:b3:1d:92:09:af:b4:46:e5:89:f1:6c:b2:28:78:
                    ca:7a:d0:93:3a:6a:e8:55:45:fe:4f:39:bf:9c:42:
                    01:e7:e5:8d:11:92:26:b6:f5:dc:35:39:7d:60:a6:
                    df:7f:d9:4e:87:10:43:dd:5f:34:62:78:43:f6:1b:
                    00:e0:c1:94:00:3e:92:f8:77:fe:51:7e:9d:15:25:
                    80:a8:ac:d7:ca:4c:2c:6d:2d:da:f2:08:4f:87:f2:
                    a4:2c:03:f9:ed:bf:7c:54:72:a6:9a:cc:31:8d:22:
                    6e:d8:ae:8f:93:61:ef:45:47:04:44:9f:3a:9b:76:
                    9a:5e:6d:75:81:8c:23:12:25:4a:89:46:5c:e3:0b:
                    00:9e:3e:3c:8e:1d:71:2a:61:c9:11:12:46:67:6a:
                    8b:bb:d7:7d:fe:6c:07:76:12:ca:96:1f:2a:a9:80:
                    37:9f:53:2c:38:e7:42:86:0e:e9:1c:b5:cf:5f:99:
                    03:43:86:6f:97:08:47:a8:0e:3a:68:e9:d2:6c:59:
                    ac:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BD:0D:AC:48:03:0A:12:9F:D6:C4:AD:DC:44:D7:F4:AC:35:9E:6F
            X509v3 Authority Key Identifier:
                keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:89:a8:07:cb:55:f5:dc:5b:46:06:17:2a:59:31:91:fe:b3:
         ae:de:de:01:4c:c9:3f:8e:33:d0:7b:40:69:25:2f:d3:9f:ca:
         e3:82:6b:ae:6d:75:0f:31:6f:ff:0b:c5:d7:4d:8e:33:92:4d:
         13:e0:0f:a7:6d:eb:ef:b9:43:28:90:07:8f:7e:e0:4e:3f:4e:
         76:1c:01:5c:be:6f:4d:43:93:15:ae:8d:fe:5d:ef:f7:02:cd:
         6c:f2:4e:d1:45:42:60:f9:34:d8:7a:83:ce:e7:93:94:fd:b6:
         49:62:75:48:59:b2:af:52:bb:f5:56:d0:53:9d:75:8d:b5:2a:
         93:8d:d4:76:ba:ba:3d:d0:31:a0:2c:3b:cd:05:3c:70:6c:8e:
         3b:2c:48:7d:e9:4d:42:14:5b:8c:7e:9a:38:fd:ee:76:a2:e6:
         08:7b:05:cf:f6:91:78:af:0f:0c:c1:85:90:fe:18:67:bb:d1:
         00:5b:dd:78:fd:67:6b:d8:a5:7e:12:0e:73:86:1d:32:db:89:
         1f:42:85:ff:0d:13:b9:ab:48:a0:04:01:f3:51:92:40:72:9b:
         61:61:05:f0:18:f4:78:b7:a0:4d:e2:40:c7:5f:c7:0e:5a:74:
         b5:de:34:fe:8d:ce:95:3f:5a:9c:49:ab:4b:11:2c:02:3f:85:
         46:07:08:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 15:47:30 2026 by rpki-client