Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.mft
File:                     Rych442ItIUuLgmCd6L7IKsMgbM.mft (raw, json)
Hash identifier:          8APAENKp5aB8NWXl4nJRz2lM3TvTfO6RgUmER0IP6S4=
Subject key identifier:   08:CF:5A:E6:51:27:78:A3:BD:FD:A6:17:CE:57:72:C8:07:4F:99:BB
Authority key identifier: 47:27:21:E3:8D:88:B4:85:2E:2E:09:82:77:A2:FB:20:AB:0C:81:B3
Certificate issuer:       /CN=472721e38d88b4852e2e098277a2fb20ab0c81b3
Certificate serial:       019F9EF201CFF168542F62AB08E6BDCB2742
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rych442ItIUuLgmCd6L7IKsMgbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.mft
Manifest number:          47
Signing time:             Sun 26 Jul 2026 15:01:27 +0000
Manifest this update:     Sun 26 Jul 2026 15:01:27 +0000
Manifest next update:     Mon 27 Jul 2026 15:01:27 +0000
Files and hashes:         1: Rych442ItIUuLgmCd6L7IKsMgbM.crl (hash: cYQIRPWZno3nioWY+tvuJkb5/PSvHnoW5QRbkpK4fKE=)
                          2: Sh6wUutUQFoAhZbyc9mJ5TkoVys.roa (hash: jlA4qWWIetKLdd6pQUmLfLeRwFINjNkS5gKXoUmiZho=)
                          3: ZsYV7B7rXiV9Sd4d1WORwRKLc0M.roa (hash: ZZC9xuQEACqHh/6sNaCAxnay+gwuPiQeRofUXPKfCak=)
                          4: ndXtEXhaQsCV3FdMrXZs6wJq0fw.roa (hash: AhakacNqL0L3QNvTgK4DkPjXfP1L2yY1VMxHtjyhGWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rych442ItIUuLgmCd6L7IKsMgbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:f2:01:cf:f1:68:54:2f:62:ab:08:e6:bd:cb:27:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472721e38d88b4852e2e098277a2fb20ab0c81b3
        Validity
            Not Before: Jul 26 15:01:27 2026 GMT
            Not After : Jul 27 15:01:27 2026 GMT
        Subject: CN=08cf5ae6512778a3bdfda617ce5772c8074f99bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f5:4a:6c:e0:a6:a9:01:57:c4:b5:dd:57:d7:
                    3f:f3:94:7a:8e:9e:96:c0:50:f1:f3:63:e8:80:57:
                    a4:81:fd:57:c3:91:19:76:c5:9d:6f:14:26:b2:55:
                    a8:72:a6:71:c9:53:ff:28:d7:c4:52:85:be:3d:0d:
                    c6:8d:6f:a0:be:9a:0c:41:b9:59:7d:af:53:62:ab:
                    bd:dc:4d:e7:29:97:30:bd:9d:2a:40:d7:41:77:23:
                    aa:78:a6:4d:a0:ce:2c:8b:08:a8:28:a4:87:d9:ea:
                    a8:40:7d:23:20:c0:a7:fa:15:5c:07:ef:cd:f7:18:
                    9f:13:6c:d6:84:98:e4:3b:02:36:65:4a:ff:de:29:
                    61:8c:61:2e:51:7b:1d:b3:b7:ae:b0:c8:e5:04:92:
                    66:e4:7d:9b:79:2d:c6:9f:a7:f6:e6:d5:54:c7:02:
                    92:50:90:99:ee:4e:4e:6b:10:b8:e3:ff:02:8c:f3:
                    57:a0:84:ae:ef:f1:b4:8d:06:9e:72:6b:8f:ad:5e:
                    da:52:b1:fa:e0:4e:00:58:0c:48:6f:0d:eb:18:0f:
                    ac:24:14:97:c2:18:78:d6:76:75:4c:b5:90:76:7e:
                    ac:69:4e:49:80:77:05:4c:bb:dc:d4:c8:ff:43:6f:
                    4d:0e:14:70:4a:a9:06:c4:65:11:07:6f:42:16:12:
                    29:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CF:5A:E6:51:27:78:A3:BD:FD:A6:17:CE:57:72:C8:07:4F:99:BB
            X509v3 Authority Key Identifier:
                keyid:47:27:21:E3:8D:88:B4:85:2E:2E:09:82:77:A2:FB:20:AB:0C:81:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rych442ItIUuLgmCd6L7IKsMgbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:b1:6b:90:65:b5:ed:80:39:7b:74:5e:63:13:32:99:22:67:
         c5:3e:33:33:7b:d9:ea:30:74:11:67:64:8b:c1:2a:ac:40:4f:
         f8:2f:99:6c:89:45:9e:df:6a:63:74:7a:f0:ea:36:97:65:f8:
         0e:a5:71:ca:b9:1b:a8:5d:51:d2:4e:cc:df:c5:07:47:ec:5a:
         20:4e:43:2d:95:27:20:13:d5:53:f6:e6:59:ef:ad:66:92:84:
         9b:2e:af:6c:df:81:3b:b0:50:6f:b5:62:58:32:8e:2e:b3:f9:
         8d:46:68:e5:bb:f1:bc:5b:1a:33:42:93:c5:96:16:c2:c5:f3:
         43:86:48:8f:37:b0:18:56:97:e0:b8:da:ca:cb:f9:5f:40:66:
         c1:e2:19:4c:8a:6f:f0:5a:61:42:e5:5d:45:4e:c5:c0:42:0d:
         7a:52:6b:a4:07:ea:5c:bb:3b:11:03:73:91:d8:ed:3b:ce:28:
         08:de:c2:14:eb:04:9d:69:e5:e1:1c:96:ee:65:4b:f9:8f:05:
         e0:f8:f1:ba:9a:03:0f:66:3a:55:48:1e:cd:cc:b7:63:44:87:
         78:96:85:7a:36:de:9b:9e:dc:23:66:4a:6e:ba:e7:f6:7a:b5:
         37:42:c9:7b:a3:06:13:bd:d8:37:93:4c:55:d4:a3:df:f7:1a:
         70:0b:8e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:43:49 2026 by rpki-client