Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File:                     yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier:          H8lX3074f9DCpCHzTOKOdQCIix9g6z2aa9jeZ5/CS+0=
Subject key identifier:   5C:D7:C6:B4:07:96:9D:0E:B3:DC:68:FC:AE:9C:F3:BA:07:8D:7E:1E
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer:       /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial:       019F4163EC0FF7E35BDF63668A0291C3B972
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number:          124B
Signing time:             Wed 08 Jul 2026 11:01:35 +0000
Manifest this update:     Wed 08 Jul 2026 11:01:35 +0000
Manifest next update:     Thu 09 Jul 2026 11:01:35 +0000
Files and hashes:         1: 0Lwj5i1c4Zxo9S7reLT043tZQto.roa (hash: YQ43Pzm8kIwiUn3utvGc8HdrkEgRWVgYKvbGV3IgZ04=)
                          2: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: jtlSwqsfKwr0XGyMicOm8uBfMve0ZymL8p2UQtVD8ds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Jul 2026 11:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:41:63:ec:0f:f7:e3:5b:df:63:66:8a:02:91:c3:b9:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
        Validity
            Not Before: Jul  8 11:01:35 2026 GMT
            Not After : Jul  9 11:01:35 2026 GMT
        Subject: CN=5cd7c6b407969d0eb3dc68fcae9cf3ba078d7e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8c:ac:86:b0:c7:73:38:3a:76:3f:8c:c6:92:
                    6f:ef:3d:fe:6c:39:6c:37:d2:18:f7:35:2c:76:b7:
                    f7:93:d1:66:f4:e9:19:96:a8:ea:a5:10:86:eb:6a:
                    30:1e:6b:f7:8e:e5:4e:16:01:e0:a1:19:19:59:d4:
                    16:b0:24:17:32:62:4c:61:5f:1a:cc:a8:cc:2c:97:
                    25:e0:8e:eb:1c:7c:e6:e8:ec:bb:f3:36:17:0a:da:
                    b8:a3:f3:42:2f:b1:63:bf:98:14:2f:44:2d:ae:96:
                    18:8e:e9:85:ba:79:64:11:c9:a4:a9:d5:ca:93:4a:
                    22:be:ff:e3:c6:b3:63:e6:d6:ce:87:c7:ae:9e:dc:
                    16:60:02:1b:4c:92:aa:fb:03:9d:ad:c1:7b:0d:9f:
                    c6:24:ec:65:a0:d4:a1:f9:37:8f:6e:77:77:de:e2:
                    2d:3a:02:0c:3d:a4:ae:ad:a0:76:f1:ed:5b:34:5c:
                    8f:b7:b6:44:45:ec:65:4a:70:73:41:ab:9e:f2:b6:
                    2e:8c:0f:a0:f1:9c:1b:ed:a9:66:d1:ab:4a:19:14:
                    9a:e7:07:51:ba:96:87:82:cb:d7:20:9b:0e:87:4d:
                    f4:1a:ca:13:39:3a:46:c8:b5:d7:f9:41:f7:08:90:
                    34:4a:1d:1d:be:73:4d:88:75:7f:6e:32:ae:88:f0:
                    7d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D7:C6:B4:07:96:9D:0E:B3:DC:68:FC:AE:9C:F3:BA:07:8D:7E:1E
            X509v3 Authority Key Identifier:
                keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:d8:1b:23:cc:07:3e:ff:b1:03:ca:e1:18:00:37:8f:5e:fa:
         96:e6:ca:70:87:b7:76:72:de:93:30:b1:fd:77:40:ef:94:58:
         f5:e3:cf:c5:01:49:64:15:63:55:2e:56:6f:22:20:28:d9:3d:
         f8:98:a4:f5:93:c7:7b:c7:3a:42:7b:5c:5f:d5:96:76:17:a5:
         12:d2:5e:24:1a:a1:70:3b:db:bf:4f:86:c3:5a:7c:8f:4a:ee:
         58:04:f9:d8:10:26:61:01:5d:21:53:26:cb:3f:19:74:4b:50:
         71:7f:3f:72:bd:05:cf:e2:b5:f5:e5:94:06:1a:e7:71:da:88:
         93:90:60:43:08:d2:ee:ed:3d:71:16:be:1d:d8:e6:65:f7:ce:
         e3:e6:c8:22:da:b9:9e:fb:ac:86:aa:4d:73:35:12:dd:b7:a4:
         f7:3c:27:8b:18:92:28:25:3a:d3:91:27:0f:4e:86:19:2c:e3:
         a7:61:a0:18:bc:8b:6b:40:c8:65:41:60:b3:a7:f8:b8:ff:6b:
         8b:71:35:05:78:02:a0:b7:3f:dd:78:c5:b6:6a:32:f8:05:3c:
         29:6b:88:17:7b:39:7e:1f:30:40:aa:15:a4:d8:4a:e5:ae:8f:
         dc:cb:57:8c:cb:d7:b9:86:29:ad:dd:bb:61:e3:08:be:cf:89:
         a6:7e:a7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:30:07 2026 by rpki-client