Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
File:                     mY3mCoZ7SdsppifG99IjomajIqk.mft (raw, json)
Hash identifier:          bKAqLo7y6KLIHrj9Kintp+nxsm3jwKQVs/oRt2Z3ZDE=
Subject key identifier:   95:69:D0:CB:1A:D5:FA:39:98:06:9F:B5:A8:E1:F4:D1:8C:EF:95:CA
Authority key identifier: 99:8D:E6:0A:86:7B:49:DB:29:A6:27:C6:F7:D2:23:A2:66:A3:22:A9
Certificate issuer:       /CN=998de60a867b49db29a627c6f7d223a266a322a9
Certificate serial:       019F70CFA58CE76F9404245F219EBEA272A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
Manifest number:          0270
Signing time:             Fri 17 Jul 2026 16:01:24 +0000
Manifest this update:     Fri 17 Jul 2026 16:01:24 +0000
Manifest next update:     Sat 18 Jul 2026 16:01:24 +0000
Files and hashes:         1: GhN1yKMoFu8y6eUgkMzzqDeEy_w.roa (hash: zyNIiHMxPOjGUgXy6RCPzfPzuqWlzRBZzmEpfhP+cR4=)
                          2: UXW4TwBbqAg2KVwromTqDGJrE20.roa (hash: iC2l8xQ6yq60AZmCDOxhtpG1B+XfVb2gALUB/AI2BAQ=)
                          3: mY3mCoZ7SdsppifG99IjomajIqk.crl (hash: WrtO/nftGRT1dF1Jb92WYwf7RiIpD2bLIIBWznJxv1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 16:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:70:cf:a5:8c:e7:6f:94:04:24:5f:21:9e:be:a2:72:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=998de60a867b49db29a627c6f7d223a266a322a9
        Validity
            Not Before: Jul 17 16:01:24 2026 GMT
            Not After : Jul 18 16:01:24 2026 GMT
        Subject: CN=9569d0cb1ad5fa3998069fb5a8e1f4d18cef95ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e2:d9:2d:8a:7e:00:8a:61:6f:d4:5c:6c:25:
                    4a:59:ff:cc:f0:39:82:08:9b:69:45:52:44:cb:e6:
                    86:e9:d5:1d:6f:dd:32:b1:3d:fd:62:5c:55:c2:70:
                    f7:aa:f0:1b:dc:86:e0:c3:83:fd:7c:8e:46:70:ed:
                    36:a6:25:b9:37:cd:7d:30:58:a1:72:0b:ed:d5:dd:
                    2f:a1:ba:b3:e9:9b:e7:99:32:31:0d:18:12:6d:ee:
                    64:d5:6d:f6:e4:53:13:06:07:7b:a8:07:0f:5f:41:
                    01:c4:c8:c7:0b:ad:2f:4d:d5:46:32:61:bc:a7:2b:
                    64:d0:21:6a:ea:3c:82:f0:ac:97:5c:dc:03:49:a5:
                    e2:54:38:19:84:ff:90:f1:46:dc:ee:77:f4:73:36:
                    c4:fc:73:ed:cb:a7:52:3b:81:79:39:58:20:66:f6:
                    d3:c4:87:74:ef:d0:6b:93:59:94:98:d4:7e:3f:4a:
                    1f:b1:49:80:60:05:75:84:44:9e:92:13:47:c1:84:
                    c1:a4:80:75:2f:01:b5:1c:67:50:e7:a4:07:9a:e0:
                    14:83:5b:28:6b:36:57:99:0c:ce:7f:54:9c:5e:d6:
                    34:54:af:8e:58:cf:ef:42:29:7d:f2:8f:33:3a:b4:
                    09:eb:d7:8a:d5:1a:59:1c:7f:db:4c:8d:52:7c:5f:
                    ba:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:69:D0:CB:1A:D5:FA:39:98:06:9F:B5:A8:E1:F4:D1:8C:EF:95:CA
            X509v3 Authority Key Identifier:
                keyid:99:8D:E6:0A:86:7B:49:DB:29:A6:27:C6:F7:D2:23:A2:66:A3:22:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:52:f2:04:9b:a3:f3:3a:d4:fd:45:82:6c:f5:45:1b:03:cd:
         29:1c:be:b6:d8:04:c4:92:e0:bd:db:9d:63:14:73:2c:c7:69:
         c0:71:6c:26:8a:92:0e:13:e1:eb:99:4d:06:44:07:ea:44:30:
         2a:e7:ea:07:52:87:29:82:4f:b1:c6:f5:dc:67:6c:9f:6b:e1:
         9a:0e:06:90:e4:be:cb:96:f1:4e:09:65:df:1c:7a:b7:14:88:
         72:5b:a1:c7:cd:43:7d:ba:b4:20:7c:8a:0a:4c:7a:8b:0f:72:
         23:68:6e:a9:61:44:b2:fa:3d:6f:4c:00:e2:80:68:f0:55:ce:
         4d:8b:54:58:7a:26:f9:86:bb:9f:0e:57:f4:a5:42:c4:2f:6f:
         74:b2:45:10:d0:37:79:12:ac:ff:cf:2c:ba:77:4c:f1:ce:ba:
         0e:d7:84:f0:61:d6:8c:1e:e8:8b:c8:d7:05:3b:eb:21:60:f3:
         35:54:5f:cb:35:3b:5c:6a:21:26:d8:16:7c:e5:8c:62:cd:a0:
         08:94:ed:bf:ce:a9:18:85:32:bb:ff:53:c3:51:a9:ad:9f:42:
         bf:c2:37:b0:c0:16:e8:ef:b9:34:17:38:2f:83:31:6e:6e:66:
         72:76:04:90:bd:b1:fd:ac:1e:06:60:6c:0c:ca:1c:54:58:82:
         44:57:cf:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:20:07 2026 by rpki-client