Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
File:                     SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft (raw, json)
Hash identifier:          daYyimdEpNACLGOr4sHs0z5a7N1Y2uxKlnBRU2wYeOs=
Subject key identifier:   A3:97:FD:C7:05:B6:F8:8A:AF:79:98:78:E2:EA:D8:76:8C:38:53:02
Authority key identifier: 49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D
Certificate issuer:       /CN=49850f1bfd98d840a2aa8a83fa4f0894439d998d
Certificate serial:       019FA1F25EA39894C39A2E3D3ECE348E1697
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
Manifest number:          07DF
Signing time:             Mon 27 Jul 2026 05:00:43 +0000
Manifest this update:     Mon 27 Jul 2026 05:00:43 +0000
Manifest next update:     Tue 28 Jul 2026 05:00:43 +0000
Files and hashes:         1: KgqOJvnjitpRt1U686ywPTayP5A.roa (hash: RoNo13qMkmhokM2MMXGnBD9uvJP9pS8UBZJLsr3FWfw=)
                          2: SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl (hash: MA1Khv9w9Eln3o1GTWzdjxxepp8wOzP+bO1mkVxTXek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 05:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:5e:a3:98:94:c3:9a:2e:3d:3e:ce:34:8e:16:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49850f1bfd98d840a2aa8a83fa4f0894439d998d
        Validity
            Not Before: Jul 27 05:00:43 2026 GMT
            Not After : Jul 28 05:00:43 2026 GMT
        Subject: CN=a397fdc705b6f88aaf799878e2ead8768c385302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:14:8d:ea:7d:ae:08:6a:6e:6c:ec:bd:eb:ef:
                    cb:af:47:ba:f1:81:06:98:36:75:78:dd:28:58:29:
                    09:72:8c:e9:d5:4a:69:2c:33:95:39:49:97:33:2b:
                    5f:aa:e7:72:c3:d3:4a:66:39:63:d5:27:42:e3:b7:
                    84:a8:54:0c:31:a5:ac:79:1a:e9:f7:33:ff:ae:c8:
                    7c:d5:3b:82:7d:f6:ed:98:38:b9:5d:86:76:74:49:
                    a1:bd:32:6c:3f:67:fc:30:f2:6b:29:22:13:58:93:
                    1d:4a:61:17:c1:bf:84:d0:be:9e:73:25:e4:fb:85:
                    b6:a2:f8:84:fe:ee:a3:f8:13:44:69:6b:e4:be:5f:
                    ff:16:dd:8d:d2:0f:d6:01:2e:31:1a:eb:3e:9d:9f:
                    d6:8e:24:33:60:ed:af:90:ab:fa:0e:c0:57:7a:0d:
                    e0:05:c0:96:d2:28:d3:d6:65:7c:39:ac:dc:6b:8b:
                    c4:dc:ed:aa:1d:85:03:b0:e7:72:b8:fd:05:bc:e8:
                    a4:cd:04:41:ee:58:08:28:bd:ea:5a:69:71:8a:3a:
                    11:a1:9b:f9:ce:e9:80:a3:03:84:ce:50:d1:83:83:
                    a7:99:13:04:b3:90:a6:03:98:35:3b:3c:8c:8d:26:
                    a8:e8:cb:42:ad:52:19:b7:06:22:d2:51:a4:66:1f:
                    ff:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:97:FD:C7:05:B6:F8:8A:AF:79:98:78:E2:EA:D8:76:8C:38:53:02
            X509v3 Authority Key Identifier:
                keyid:49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:e6:8b:dc:39:2c:80:c6:ee:59:81:c3:86:a8:a3:03:67:2a:
         86:5a:c5:34:23:1e:04:d9:e2:68:4d:d2:7c:2a:aa:0c:fd:1f:
         04:6b:df:12:86:c7:08:d0:cd:42:17:71:88:0d:39:68:b8:ee:
         d8:1a:cc:41:bb:de:4a:01:6b:7d:2f:e4:c1:6f:15:2b:6e:4e:
         1c:f8:6b:5e:5e:19:dc:5f:16:70:ea:81:28:a0:a1:4c:12:20:
         31:19:f0:03:51:5d:39:6d:3c:96:12:14:5b:86:7a:8d:b3:e3:
         d9:d1:58:a3:4f:cf:0c:a7:5a:e6:62:ed:02:7b:6f:32:4b:1c:
         7b:be:55:53:5d:c2:23:e4:e6:0a:d2:84:6f:31:12:25:32:f8:
         0a:a7:d4:e3:34:d3:8c:66:08:38:dc:06:08:77:06:60:58:00:
         41:49:f8:e9:b7:ce:2e:c4:4c:e3:51:d4:8f:63:1c:13:cb:d8:
         18:14:76:ce:25:b8:fe:87:63:03:dd:d4:f9:ff:93:89:06:43:
         9d:01:11:44:18:24:6e:c5:b3:cf:4f:d6:d1:25:ce:86:df:0f:
         b0:22:2a:4d:5a:bc:4c:d3:5b:8e:14:d4:37:2e:a9:6c:8e:26:
         53:7f:b5:a2:ec:e0:ae:b5:b2:e6:01:a0:51:c9:4d:01:4a:d5:
         02:15:23:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:09:01 2026 by rpki-client