Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
File:                     YzCxTOdPYKjqSrtuqmDuRHD0On8.mft (raw, json)
Hash identifier:          yURLXY4EMg3QPU/QjgXtOf1jXJrZOdOOhAh1y6+rrlc=
Subject key identifier:   BD:C2:D6:67:34:6F:28:4C:74:F9:43:59:AF:F9:E2:20:32:94:0A:7A
Authority key identifier: 63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F
Certificate issuer:       /CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f
Certificate serial:       019F9EF1A80760740D648C8D18325D76DD3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
Manifest number:          032E
Signing time:             Sun 26 Jul 2026 15:01:04 +0000
Manifest this update:     Sun 26 Jul 2026 15:01:04 +0000
Manifest next update:     Mon 27 Jul 2026 15:01:04 +0000
Files and hashes:         1: 30S6gV2oh78DXtrqvndtvSPPKd4.roa (hash: OcTAJVeDjRXR19iBC0Wj5Tjt34V2Iwuh2sKP2/1+Fgg=)
                          2: YzCxTOdPYKjqSrtuqmDuRHD0On8.crl (hash: 87WMP8+eXcghodcRwwklPR3xmqs6HGIt9SK/sGPAhT0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:f1:a8:07:60:74:0d:64:8c:8d:18:32:5d:76:dd:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f
        Validity
            Not Before: Jul 26 15:01:04 2026 GMT
            Not After : Jul 27 15:01:04 2026 GMT
        Subject: CN=bdc2d667346f284c74f94359aff9e22032940a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ab:cf:a0:95:dc:1c:41:74:da:42:74:52:7c:
                    c2:09:3d:8f:bd:c3:72:fb:8f:f1:8b:69:cb:5f:c0:
                    0a:27:68:b9:b6:23:ef:cb:26:78:64:16:2d:d0:f9:
                    f0:f8:c2:80:79:24:4d:d0:7d:b1:18:19:69:06:b3:
                    b5:02:98:f4:70:2a:50:9d:ae:95:47:27:b0:76:98:
                    f8:bf:05:64:31:41:62:ff:af:df:ce:d1:c9:f9:ec:
                    e7:ca:1c:20:01:99:ae:6d:db:3f:46:7c:17:ab:01:
                    e4:16:30:f0:26:87:a0:ec:e0:f0:54:5b:ae:f9:3f:
                    46:05:fa:4f:ed:61:36:ad:db:86:c8:3e:60:64:6b:
                    f3:6d:7d:1e:0d:a7:7e:4c:fa:65:3c:bf:3d:89:fa:
                    94:62:9f:ab:40:d5:7a:6b:bf:08:e1:11:18:88:17:
                    8a:1d:68:f7:35:c7:4b:5e:55:e7:ac:96:cc:ea:ea:
                    5d:02:2d:dc:ba:12:95:7b:a2:da:2a:a3:c5:95:dd:
                    e4:c8:5d:36:d9:9e:e4:7b:a0:e3:ac:f6:86:a4:dc:
                    c3:66:98:a2:97:ce:8b:a9:70:d3:4a:84:ca:e1:b4:
                    cf:be:c2:e5:ee:90:b5:11:db:3b:1a:46:1e:b3:3c:
                    77:4a:85:d0:83:4a:af:ee:f3:5e:c7:9a:58:f0:67:
                    65:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C2:D6:67:34:6F:28:4C:74:F9:43:59:AF:F9:E2:20:32:94:0A:7A
            X509v3 Authority Key Identifier:
                keyid:63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:23:1c:4f:79:bd:fd:06:d0:b9:cb:68:14:d1:e7:4a:33:e5:
         3f:6f:6c:a9:cb:79:33:9e:47:f2:e8:2e:12:0d:51:97:b1:88:
         e4:e7:fe:c8:90:8a:1e:17:15:b2:ad:20:58:4d:3b:d5:f1:6a:
         97:0c:20:88:52:e2:d9:5e:03:0f:25:92:8a:81:52:43:42:e0:
         d0:a8:53:b8:d3:b5:c4:27:24:4b:84:6c:f2:d5:8e:28:f3:e5:
         89:a1:da:fa:31:12:f4:ab:f8:f0:43:de:b4:7b:f9:3b:bf:5f:
         27:91:22:b0:63:3c:0a:20:10:68:b6:a0:0c:14:1e:5f:25:b3:
         ba:62:f2:bf:ef:77:0d:11:cf:9a:ea:c3:fc:21:1a:40:5a:ea:
         36:15:03:ac:f7:c4:01:38:f0:51:d3:bd:31:ff:30:ae:c1:f7:
         27:4d:11:75:13:f6:5a:13:52:11:fc:81:5a:80:ff:3e:18:81:
         42:c1:65:11:cc:c5:29:d6:7e:31:3b:9c:da:c8:03:19:e9:5d:
         99:c0:0a:86:39:e0:92:6a:b6:9d:e6:20:61:ca:df:6f:48:8c:
         7d:dc:c1:07:3d:28:70:56:40:51:77:ee:aa:72:b2:10:76:c9:
         3e:1d:bd:57:51:5f:df:59:a0:44:a8:96:90:71:dc:90:4d:3c:
         6e:ea:5a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:32:41 2026 by rpki-client