Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
File:                     lyQtuibtiCs4DavrqzxfOUIAbsw.mft (raw, json)
Hash identifier:          k69IbANCXIvhYyY1VOaZwcCDSI8xDFo7lARv2PqHW/U=
Subject key identifier:   91:29:56:4B:4A:B9:8C:AB:8B:5A:99:75:0D:B9:55:BA:60:B8:09:98
Authority key identifier: 97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC
Certificate issuer:       /CN=97242dba26ed882b380dabebab3c5f3942006ecc
Certificate serial:       01A002EFDD8B7834B3D03DEE1B4478FB6BF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
Manifest number:          1A07
Signing time:             Sat 15 Aug 2026 01:01:09 +0000
Manifest this update:     Sat 15 Aug 2026 01:01:09 +0000
Manifest next update:     Sun 16 Aug 2026 01:01:09 +0000
Files and hashes:         1: KuYHIDTT0pfrZb69d41RvniDU3w.roa (hash: pzsXiQ0yFpyoB+XjLaUAL8JPW4YObE6pxPQc+E3xZNQ=)
                          2: lyQtuibtiCs4DavrqzxfOUIAbsw.crl (hash: nvursaj6H+jfpgP1Cdva2X42RVzVAW9M6eXBgtQJ2Iw=)
                          3: vKZmJ0jDQuc8fHx1GoSSQ_umesg.roa (hash: aKqfhdTXupMXPlpBmxeTWXojTlpX9o9GLhhsywcjHYI=)
                          4: w1fI7tvPLN33WU2I9Rt_Z9orWcc.roa (hash: RojgiRAa+/JdbpS5f+RHbhZYfz5WfXhvE0D2UVq9ASc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 01:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:ef:dd:8b:78:34:b3:d0:3d:ee:1b:44:78:fb:6b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97242dba26ed882b380dabebab3c5f3942006ecc
        Validity
            Not Before: Aug 15 01:01:09 2026 GMT
            Not After : Aug 16 01:01:09 2026 GMT
        Subject: CN=9129564b4ab98cab8b5a99750db955ba60b80998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c8:de:e5:6f:2b:8f:a5:f3:a7:b1:41:e6:d1:
                    0f:c2:bf:02:cc:91:a8:1c:ee:92:ca:c4:cf:d1:82:
                    dc:96:22:da:25:c1:8e:3d:60:ab:87:10:f1:0f:ba:
                    2b:94:30:89:6e:df:87:81:7a:c9:57:30:80:72:c9:
                    78:17:03:48:18:f3:72:58:7a:1e:6c:79:2a:40:5d:
                    1d:e8:71:4c:e2:40:0f:db:ba:04:f2:d8:fe:c9:3c:
                    00:70:dc:e0:56:14:29:ac:25:c5:db:0b:07:fc:3d:
                    1d:1c:e9:70:9a:8e:99:c3:f6:b4:4c:99:ba:d6:80:
                    76:8c:94:b4:2b:14:af:5d:f2:fb:f8:96:15:bf:5a:
                    c1:3b:3e:a6:43:2a:87:35:34:00:68:4d:6a:c0:d6:
                    bc:54:5c:eb:60:4b:23:1e:4b:1f:f7:f4:09:3b:0f:
                    eb:e3:5f:7a:6f:d0:d0:9c:fb:c1:dd:28:07:e8:1c:
                    8e:fe:01:8b:91:9d:39:1a:d8:98:26:25:41:12:ae:
                    ae:8d:b4:17:77:0e:d7:b4:ab:01:cd:4f:10:af:a6:
                    15:e8:4d:b0:87:f9:c1:cc:57:df:e7:2a:6c:b5:18:
                    bc:5e:5e:07:fc:ce:ea:0b:1c:80:44:72:b4:0b:bb:
                    d6:93:dd:fb:a1:40:06:c6:7a:91:48:77:ab:6f:19:
                    28:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:29:56:4B:4A:B9:8C:AB:8B:5A:99:75:0D:B9:55:BA:60:B8:09:98
            X509v3 Authority Key Identifier:
                keyid:97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:59:e6:30:80:ac:3f:37:53:66:41:20:d2:e0:c0:0a:2a:14:
         e0:0f:99:f6:2e:c4:99:f1:15:4b:2f:bb:35:a8:e9:c3:d8:3b:
         b4:3a:1e:49:ac:53:7a:5c:98:73:e7:55:e3:a4:cf:b5:05:74:
         19:9d:5e:04:e3:1b:d9:4c:af:c1:0d:9c:5c:5b:8f:c3:3c:bd:
         9d:d0:b3:0a:d9:fa:46:33:51:8e:eb:15:f7:0e:4b:b7:ea:d2:
         b3:95:97:5f:63:03:52:6b:32:fe:fd:9d:ff:f7:09:51:b2:f5:
         8a:95:73:6b:4f:cb:a2:be:13:f6:28:ee:0d:e5:98:7b:d6:71:
         64:ec:a6:03:16:ee:92:18:ce:14:be:4d:75:89:fe:7e:af:2d:
         b6:c1:5e:85:5d:6c:f9:8a:b6:28:dd:f5:b0:15:cd:73:01:40:
         75:87:80:f1:34:64:82:bd:5b:cd:50:0d:6e:2a:6f:4a:ab:a1:
         d8:67:f6:67:3f:43:83:d3:68:54:03:ce:57:ce:ff:8e:b5:9d:
         8a:9d:db:3a:93:8a:e5:c7:da:e2:d3:cc:85:98:be:cc:16:75:
         16:c5:1b:ea:3e:ae:25:88:9c:95:05:50:b0:7b:a3:48:23:c4:
         9e:d8:e0:0b:66:31:ba:df:3b:ef:74:5f:17:79:ad:44:52:0a:
         a2:2c:5e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:34:47 2026 by rpki-client