Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
File:                     1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft (raw, json)
Hash identifier:          R5FOsPmCasLIuVHG4qZFz/KuphF26ay2SzI0B1qO/Zs=
Subject key identifier:   79:02:A7:35:D9:33:59:2D:FB:36:90:45:D2:A3:78:23:D4:76:61:2E
Authority key identifier: F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
Certificate issuer:       /CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Certificate serial:       01A0005C1F9FB972E42E343EDB162748B7B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
Manifest number:          1585
Signing time:             Fri 14 Aug 2026 13:00:32 +0000
Manifest this update:     Fri 14 Aug 2026 13:00:32 +0000
Manifest next update:     Sat 15 Aug 2026 13:00:32 +0000
Files and hashes:         1: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl (hash: j97aw6qjXGKJ7lFDEz38v/pzCL5yH2cffygnqNx+4Q0=)
                          2: oIFDamMFsaAUv3_QXk-wIETOecI.roa (hash: R//1hT9e0Lq7We4cMvCWKxDCXrukd4OXlMU1MKxnozg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:1f:9f:b9:72:e4:2e:34:3e:db:16:27:48:b7:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
        Validity
            Not Before: Aug 14 13:00:32 2026 GMT
            Not After : Aug 15 13:00:32 2026 GMT
        Subject: CN=7902a735d933592dfb369045d2a37823d476612e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f0:62:86:0c:31:6a:0e:0f:f8:83:d7:b3:78:
                    c0:d3:b6:94:71:21:cc:35:ca:ce:0a:0f:1a:a4:b6:
                    54:57:7e:03:77:85:7d:cc:c7:03:61:e6:72:bb:fc:
                    55:fd:c8:fc:ad:59:2b:59:5d:40:33:41:ef:37:7a:
                    32:ff:07:07:5d:fa:5d:ec:c8:4a:52:73:eb:0f:26:
                    3e:a0:5a:fe:26:b4:0e:e7:5e:0b:ac:32:86:61:cd:
                    b4:b4:bf:c1:86:ad:da:fe:97:8f:49:fd:5c:a4:06:
                    63:14:66:6b:66:5c:8b:d5:a9:49:22:92:62:95:f0:
                    27:fb:30:e7:e1:e7:22:e3:c8:73:af:ca:57:98:40:
                    1f:d3:76:0e:87:a6:87:2b:dd:88:61:c4:9f:25:d6:
                    d5:5b:a3:cc:6b:36:51:be:d8:f2:57:e5:1a:ea:aa:
                    d8:6a:83:d5:81:00:67:d0:e0:62:55:c3:0d:b4:e5:
                    ab:ae:b8:34:71:99:e1:9d:cf:da:fd:40:6e:b4:9f:
                    86:e1:c6:31:c1:f6:56:a3:21:1e:22:6c:eb:88:bf:
                    4a:69:14:ad:ad:7b:ec:16:07:30:23:3c:d6:a1:e9:
                    e1:1c:a0:87:8d:3c:a8:14:31:11:d4:a7:b3:19:1f:
                    35:94:a7:e4:08:a8:4d:f3:13:de:c7:e7:c5:07:dd:
                    4e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:02:A7:35:D9:33:59:2D:FB:36:90:45:D2:A3:78:23:D4:76:61:2E
            X509v3 Authority Key Identifier:
                keyid:F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:8e:4b:09:2c:c8:b5:b2:41:7f:20:d8:b8:ab:32:d5:44:8d:
         36:09:6b:a5:69:c0:1e:20:91:1c:94:5b:21:b7:40:52:0a:ea:
         12:f1:01:38:fc:95:c1:c2:7c:17:3d:4f:bd:c4:ec:ee:01:b1:
         59:62:b9:cc:0f:40:27:4f:dd:81:be:38:c0:61:da:64:6b:2e:
         a0:7c:28:75:81:f0:4f:01:b3:0f:37:71:02:4e:e8:97:82:4d:
         87:08:86:7d:a3:d9:90:a9:6b:74:20:d3:31:28:2a:b7:c8:67:
         e8:1e:6f:30:bd:a4:b7:29:af:ae:e2:01:d4:40:69:19:a4:b2:
         21:66:92:16:49:cd:8a:b0:73:5d:36:3c:f1:32:35:f7:6e:cc:
         23:04:cb:5d:41:1a:7c:d7:f8:76:39:d1:af:fb:6f:b6:e7:19:
         19:6b:bb:0a:5f:05:6e:c6:d8:d5:74:1e:32:a3:f4:32:13:08:
         df:c0:6a:e0:2e:ee:32:34:3e:2f:a9:f1:74:b2:c0:81:66:0b:
         d6:5e:75:2e:e7:8a:02:f9:20:e8:80:fe:cb:86:48:32:b5:7c:
         6f:bc:53:fd:66:06:3b:34:27:f4:3c:04:00:f7:55:b0:dd:5b:
         70:b4:d2:3e:23:54:42:51:fe:73:b0:f9:21:1d:4f:a8:0a:49:
         46:c8:9a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:37 2026 by rpki-client