Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/Yu32KoGIYqbSD3178dLzH5KSDD8.mft
File:                     Yu32KoGIYqbSD3178dLzH5KSDD8.mft (raw, json)
Hash identifier:          ZTCKDTrCyC15vdt21ee0Dae8hNbgnuI4EiFQRw2Usss=
Subject key identifier:   DB:C2:64:9B:6F:56:FD:14:6A:F4:19:25:3A:C4:FD:B7:28:AC:EC:14
Authority key identifier: 62:ED:F6:2A:81:88:62:A6:D2:0F:7D:7B:F1:D2:F3:1F:92:92:0C:3F
Certificate issuer:       /CN=62edf62a818862a6d20f7d7bf1d2f31f92920c3f
Certificate serial:       019F4BE7B24BCCA409754D71F590FAAFBF5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yu32KoGIYqbSD3178dLzH5KSDD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/Yu32KoGIYqbSD3178dLzH5KSDD8.mft
Manifest number:          1C
Signing time:             Fri 10 Jul 2026 12:01:43 +0000
Manifest this update:     Fri 10 Jul 2026 12:01:43 +0000
Manifest next update:     Sat 11 Jul 2026 12:01:43 +0000
Files and hashes:         1: Yu32KoGIYqbSD3178dLzH5KSDD8.crl (hash: xvwL/mcMDLpMO/kXw8z9d5FARrTfTTum6tFfuNtMVco=)
                          2: dWX59-IgymwSWp5lVJHTizv1LNg.roa (hash: 7OpM1Q/nHvN11x8BC9ZSmIDVqJ0iu0AQ8UlElrKQjM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/Yu32KoGIYqbSD3178dLzH5KSDD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/Yu32KoGIYqbSD3178dLzH5KSDD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yu32KoGIYqbSD3178dLzH5KSDD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 Jul 2026 12:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:4b:e7:b2:4b:cc:a4:09:75:4d:71:f5:90:fa:af:bf:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62edf62a818862a6d20f7d7bf1d2f31f92920c3f
        Validity
            Not Before: Jul 10 12:01:43 2026 GMT
            Not After : Jul 11 12:01:43 2026 GMT
        Subject: CN=dbc2649b6f56fd146af419253ac4fdb728acec14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:4b:c1:b6:9e:25:47:9a:1f:7b:99:9d:08:e5:
                    59:b7:37:d0:0f:6b:89:5b:83:6c:5f:ef:2a:62:ef:
                    82:57:f5:8e:1c:de:56:df:cb:df:39:f4:24:e2:b8:
                    84:24:3b:56:34:9a:dc:90:22:2e:84:1e:9c:1b:b4:
                    c7:cb:7a:c2:f5:22:2c:cc:38:d2:9e:fa:be:18:19:
                    fa:ee:43:27:2d:cd:cd:4c:b8:d3:e8:cb:1d:9e:d6:
                    52:c5:f5:6c:0b:1e:cc:ac:19:23:6e:16:db:1b:31:
                    07:bf:c9:4c:9d:e5:f6:7c:14:80:44:35:c6:11:c1:
                    75:f7:e2:fa:54:71:98:be:53:83:55:1f:c6:89:cd:
                    70:51:86:fc:e7:a7:7c:00:5a:6f:e8:a4:46:7b:37:
                    8f:bd:80:f8:6f:d9:95:dc:eb:c3:15:08:6e:64:0e:
                    a3:dd:cf:9e:f5:65:aa:f5:fa:5f:27:08:6e:b6:24:
                    25:87:c1:68:83:67:97:ba:54:ea:09:d6:f4:73:78:
                    99:f5:37:67:6d:16:95:ac:20:85:dd:01:0f:2d:3d:
                    e7:ec:c1:f6:81:50:2b:8d:6e:49:42:c9:91:ea:30:
                    c7:b3:36:d2:c3:1d:cc:34:a3:49:69:82:35:1a:05:
                    c8:80:83:f9:2c:02:c1:97:15:49:f3:62:99:29:e9:
                    94:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C2:64:9B:6F:56:FD:14:6A:F4:19:25:3A:C4:FD:B7:28:AC:EC:14
            X509v3 Authority Key Identifier:
                keyid:62:ED:F6:2A:81:88:62:A6:D2:0F:7D:7B:F1:D2:F3:1F:92:92:0C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yu32KoGIYqbSD3178dLzH5KSDD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/Yu32KoGIYqbSD3178dLzH5KSDD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/Yu32KoGIYqbSD3178dLzH5KSDD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:e4:a4:f7:1d:7c:7d:da:e1:0b:92:f8:cc:ff:39:8e:e0:a8:
         42:e0:2d:35:11:30:a5:2a:86:50:24:ef:23:6f:5f:e8:5a:45:
         47:08:26:3b:07:4a:bb:b4:fd:eb:ff:a1:1d:b1:1c:5f:21:0f:
         07:6d:47:4a:5b:1a:51:9d:bb:57:02:a4:1a:d0:49:51:41:6d:
         db:83:4a:1a:c3:57:cc:74:0d:1b:6e:86:10:e9:dc:d3:ed:c4:
         0c:d1:a7:f8:06:96:a2:96:5f:6c:f0:b7:e0:38:69:94:27:10:
         9a:bf:4d:2d:75:d5:0a:4d:98:4e:ec:b4:46:00:dd:8e:70:27:
         4e:05:9d:6f:7f:12:36:8c:34:59:08:2a:d9:5d:f4:54:e9:98:
         83:aa:56:66:ba:58:a9:93:3c:06:ef:cf:fb:b1:12:4b:84:ec:
         5c:e7:88:99:a0:89:33:7f:6d:91:d3:25:3d:9d:b6:1e:a0:c1:
         4d:b4:ef:3f:37:3b:69:29:2c:c8:2d:86:1d:81:78:d8:0b:6a:
         89:8a:00:35:59:87:56:18:b0:28:f4:d1:5a:76:07:b2:65:85:
         15:7f:dc:1e:9f:34:6b:6a:74:40:22:ec:62:99:a0:d1:4e:c2:
         4e:a0:fe:a6:d3:cd:46:f1:e8:6b:8e:5c:44:06:79:76:28:d8:
         a2:4b:fe:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 18:47:58 2026 by rpki-client