Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
File:                     YhoTCpDLA344A_6gv0ZaoIL-NJg.mft (raw, json)
Hash identifier:          ghoZJbQyF/nYIhjkEqWVa9v2zhwnt36Yj4ztR3Qs1dg=
Subject key identifier:   1A:AB:05:B0:46:C1:76:9A:06:76:6A:53:88:8E:70:FC:3D:D2:C8:B7
Authority key identifier: 62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
Certificate issuer:       /CN=621a130a90cb037e3803fea0bf465aa082fe3498
Certificate serial:       019F42E41C1C35FEF840A97720CC706C70EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
Manifest number:          07C6
Signing time:             Wed 08 Jul 2026 18:01:13 +0000
Manifest this update:     Wed 08 Jul 2026 18:01:13 +0000
Manifest next update:     Thu 09 Jul 2026 18:01:13 +0000
Files and hashes:         1: Rmbqki6sfeVONmSCUKVbSwnLV2w.roa (hash: m02OGs1ERDq2Tep5VBBDirUwK9M85zv/SGcl5/T9Gng=)
                          2: YhoTCpDLA344A_6gv0ZaoIL-NJg.crl (hash: 0UDdZEFbId7zhyUxDQ7rRph1YMlznDpGXwo/2pht7Z0=)
                          3: YrjDjaI3_Q6KPQ90f8RoYBEvTqI.roa (hash: VmD17BnA3G7W1dMkZraFPy0h1sdRJ/jQerJj3HVgUI8=)
                          4: mEMBpqCiAZX-66IM2v28OLBYmaU.roa (hash: D0q/tQQJTMQWefAkqZBJ1Tlw8AdCPKqxL86ZtoZ1fgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Jul 2026 13:45:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:42:e4:1c:1c:35:fe:f8:40:a9:77:20:cc:70:6c:70:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=621a130a90cb037e3803fea0bf465aa082fe3498
        Validity
            Not Before: Jul  8 18:01:13 2026 GMT
            Not After : Jul  9 18:01:13 2026 GMT
        Subject: CN=1aab05b046c1769a06766a53888e70fc3dd2c8b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:25:28:da:fc:9e:c6:a3:e7:24:c9:ff:0c:2c:
                    d3:47:0f:52:f4:da:47:06:ff:5b:ef:2a:10:32:43:
                    2c:c5:90:c0:aa:27:40:f7:2a:34:b7:99:19:7e:b3:
                    a5:f2:a5:58:95:aa:10:22:41:b0:e3:fa:33:30:3e:
                    e7:a0:87:cd:3a:15:39:45:cf:55:56:b0:03:9d:63:
                    d1:d8:81:74:67:37:08:04:1d:57:8b:25:7a:91:b2:
                    52:e1:cf:46:dd:f4:43:a8:d7:e6:a0:57:10:c7:3b:
                    c0:88:8e:d9:ad:28:53:7f:f7:38:06:a1:05:f5:ad:
                    6e:72:f8:0b:e3:29:f3:55:d2:9b:00:bc:17:b6:6d:
                    a9:3b:60:f2:a4:41:53:5b:14:a4:3d:1b:43:37:a0:
                    81:7f:ea:fe:f3:19:09:2d:be:44:99:14:f2:a9:d4:
                    e4:38:e3:23:1e:9d:a0:39:58:5a:76:2f:cd:e0:88:
                    4e:8b:3e:8a:ff:bd:17:0d:9f:04:45:cf:1f:28:1b:
                    47:e8:ce:cc:90:47:65:97:4c:4e:5e:e1:a4:da:41:
                    33:26:e4:69:e3:a0:52:99:b4:a8:43:5a:5e:dd:d3:
                    53:c8:d6:7b:e7:17:70:8d:b6:75:57:0b:70:09:13:
                    ee:a5:5f:72:de:48:3b:7b:75:74:55:ee:40:45:1e:
                    c9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AB:05:B0:46:C1:76:9A:06:76:6A:53:88:8E:70:FC:3D:D2:C8:B7
            X509v3 Authority Key Identifier:
                keyid:62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:aa:b4:f7:bb:86:1d:cd:79:e9:45:cd:eb:3e:ec:15:b1:de:
         25:40:36:22:17:fa:cf:f8:73:d0:02:ec:0c:06:0d:78:4f:22:
         db:c6:bf:55:de:09:57:18:fe:ff:29:93:20:27:86:c3:8f:d1:
         ba:0e:55:34:2a:d6:da:1f:c0:23:b7:ff:9a:3b:e0:50:93:00:
         d4:d2:e3:61:ac:34:55:a0:e6:38:86:ab:46:91:c8:bf:96:b3:
         62:ce:23:7a:43:36:09:77:f9:dc:3c:79:b3:57:ec:51:4e:4b:
         67:5f:3e:ab:58:11:96:9e:5f:7d:13:c8:87:ce:5e:42:bd:a4:
         f4:38:95:d3:5a:eb:1e:ec:94:cc:00:54:97:3e:8d:f0:ae:74:
         6d:bb:c5:8a:bb:b3:f2:26:d0:07:e2:40:42:88:14:04:f7:a9:
         87:62:9c:b5:c4:30:55:fc:34:2c:32:8e:44:09:77:e7:76:cd:
         cc:64:a7:b5:5b:00:4c:07:40:80:21:ef:be:2b:f2:c8:bf:47:
         35:31:93:23:6a:53:0b:e1:b5:00:16:d4:92:4c:ba:50:3e:44:
         d8:43:5d:ef:21:79:73:ce:00:c2:35:ce:b8:ae:6e:81:94:c3:
         19:be:bd:05:2b:ec:19:2a:c1:c6:a0:70:3a:46:41:a9:e9:81:
         4f:3b:d2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:03:23 2026 by rpki-client