Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File:                     CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier:          IelIGc6V0HeRxLsefTlUfqGr3Cr2lzVvVc00mUwE03g=
Subject key identifier:   22:6B:9D:2E:43:36:37:1F:34:A1:B5:77:B3:38:DE:AD:5B:16:79:7A
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer:       /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial:       01A002F01E9F4684A3B8B27CBBB153D8FDB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number:          0E30
Signing time:             Sat 15 Aug 2026 01:01:25 +0000
Manifest this update:     Sat 15 Aug 2026 01:01:25 +0000
Manifest next update:     Sun 16 Aug 2026 01:01:25 +0000
Files and hashes:         1: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: J7LwOxDfCYH5kx6fQQ6FL16IL+aAsDVoVzM4jWL60LA=)
                          2: DMNBtHWgTEhz4n5BZo-OdnF1Gpw.roa (hash: tiqfuYupTq2O4jaXvwB3uzDDlD4pfPMY6A9tdmzUNQM=)
                          3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
                          4: byfII41hx7v6GfkLHOOgwLy3GLA.roa (hash: Zo/z6gr7446Px1jbq5uM2vZhtDDjC3+TH8hqZRTm9rc=)
                          5: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=)
                          6: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=)
                          7: i536I-ayrDn5uau328WAcV3xqS0.roa (hash: OfbLI9YXTmvxu2gEIcYeYiXzwlAZoObo2hHIuI7VBac=)
                          8: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
                          9: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 01:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:f0:1e:9f:46:84:a3:b8:b2:7c:bb:b1:53:d8:fd:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
        Validity
            Not Before: Aug 15 01:01:25 2026 GMT
            Not After : Aug 16 01:01:25 2026 GMT
        Subject: CN=226b9d2e4336371f34a1b577b338dead5b16797a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0b:40:af:d6:89:9f:89:86:9c:b4:bc:09:8b:
                    a9:21:be:e7:6e:6f:d2:30:16:7e:5d:98:ca:2d:7f:
                    29:48:bd:8e:9c:92:47:7b:d3:d4:0f:77:d6:ee:5a:
                    4f:29:64:62:7c:82:5c:00:e3:9c:cf:53:d5:89:68:
                    45:0e:30:81:92:9c:94:32:8a:3c:6b:1f:66:3b:de:
                    34:a1:f3:53:8d:e6:28:29:51:2d:08:9e:62:75:e6:
                    a2:d2:0e:da:9f:da:c2:a2:05:21:bc:b7:5c:df:83:
                    16:ec:bf:44:9b:39:85:65:25:0d:c8:64:cb:e2:d4:
                    c9:5f:51:0b:76:f4:2f:e7:2e:b8:84:9e:32:1e:62:
                    b7:2c:89:54:f7:cb:e0:5a:95:98:31:e6:45:39:d3:
                    09:d0:05:c1:d2:05:0a:b9:14:1b:0f:a5:be:72:b4:
                    08:48:c6:98:7d:34:6a:02:69:48:b7:53:86:b9:42:
                    42:a8:91:4c:a0:23:03:c0:e3:3e:02:3d:c3:e5:e7:
                    76:1a:5e:52:5b:38:9b:17:ca:58:9c:f4:4a:3b:50:
                    4b:0d:c1:7c:16:59:ef:6d:60:20:67:a7:cb:2c:22:
                    b2:2e:39:d0:18:95:f3:ad:8a:4b:df:04:33:c5:35:
                    fe:10:22:f5:45:cb:7f:90:e5:9d:43:3e:bc:07:4a:
                    ad:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6B:9D:2E:43:36:37:1F:34:A1:B5:77:B3:38:DE:AD:5B:16:79:7A
            X509v3 Authority Key Identifier:
                keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ee:f0:9b:82:1d:ef:0c:36:7a:b4:11:ff:be:83:02:d2:ea:
         9f:97:1b:06:22:8a:58:ca:1d:ae:5b:2f:fe:45:9b:ba:41:64:
         c0:34:47:ad:80:30:68:a2:25:f4:46:fd:59:6c:38:12:63:8f:
         e7:f1:63:40:60:01:e8:db:8f:0e:94:f0:fa:fb:f9:a5:7e:c1:
         08:3a:c1:e8:c4:5f:57:6a:0f:57:61:32:d5:42:bf:48:05:e7:
         74:56:26:bd:a3:04:c2:55:0e:e7:cf:69:96:4b:0f:05:20:06:
         b9:25:81:06:fd:71:7b:c9:e9:13:d4:76:e1:18:e8:a5:c0:10:
         b0:62:70:49:6d:a8:fb:6a:af:04:33:d4:85:37:f1:75:95:43:
         cd:68:10:58:7d:80:fe:2d:8c:29:c9:15:7d:4a:70:f9:19:5c:
         e0:2a:17:63:4e:1a:ff:a8:a2:d3:5e:77:6d:63:97:a6:00:ad:
         6e:c6:a6:c2:2a:83:bd:8e:13:fa:82:4a:0a:4f:c3:5e:d2:db:
         0e:26:4e:ba:da:ed:e7:3e:10:9a:d4:03:58:3c:2f:aa:57:57:
         76:cf:de:33:f0:15:0a:9f:ee:7e:03:13:3f:c0:9e:ad:f1:4d:
         8e:05:e0:0d:72:7b:54:49:29:c9:9a:a0:3d:ba:0d:2c:60:ed:
         e0:3f:04:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:02:38 2026 by rpki-client