Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/2ff188-67de-42a0-8bcd-34d29bb1cd85/1/Y19_IAVMT72i3k7Yf19kH5NbA4Y.mft
File:                     Y19_IAVMT72i3k7Yf19kH5NbA4Y.mft (raw, json)
Hash identifier:          yFIATB8nHehcpFLsg38TxO4RlivgP7a2yplL7/NdUsg=
Subject key identifier:   AE:F3:5E:9A:16:64:16:9F:08:85:64:2E:62:D8:51:B7:71:9A:98:04
Authority key identifier: 63:5F:7F:20:05:4C:4F:BD:A2:DE:4E:D8:7F:5F:64:1F:93:5B:03:86
Certificate issuer:       /CN=635f7f20054c4fbda2de4ed87f5f641f935b0386
Certificate serial:       019FA372DDB9CF13DAC04EA00E025890BF3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y19_IAVMT72i3k7Yf19kH5NbA4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/2ff188-67de-42a0-8bcd-34d29bb1cd85/1/Y19_IAVMT72i3k7Yf19kH5NbA4Y.mft
Manifest number:          B7
Signing time:             Mon 27 Jul 2026 12:00:41 +0000
Manifest this update:     Mon 27 Jul 2026 12:00:41 +0000
Manifest next update:     Tue 28 Jul 2026 12:00:41 +0000
Files and hashes:         1: KpSiFlpQT5dMSWFR8bhyaB5lV0E.roa (hash: b+M/pWTjrzDu/kT2jGIzR1Dtt5OUtfCqD8vNrO/FXP8=)
                          2: Y19_IAVMT72i3k7Yf19kH5NbA4Y.crl (hash: zikewxQz5nGMO4TjVRmiF/f4DYc9KaUqNoQ0S7wF2T0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/2ff188-67de-42a0-8bcd-34d29bb1cd85/1/Y19_IAVMT72i3k7Yf19kH5NbA4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/2ff188-67de-42a0-8bcd-34d29bb1cd85/1/Y19_IAVMT72i3k7Yf19kH5NbA4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y19_IAVMT72i3k7Yf19kH5NbA4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:72:dd:b9:cf:13:da:c0:4e:a0:0e:02:58:90:bf:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=635f7f20054c4fbda2de4ed87f5f641f935b0386
        Validity
            Not Before: Jul 27 12:00:41 2026 GMT
            Not After : Jul 28 12:00:41 2026 GMT
        Subject: CN=aef35e9a1664169f0885642e62d851b7719a9804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3d:eb:89:1f:b2:ca:03:22:48:75:c9:1b:a0:
                    1b:8a:0f:52:40:59:e8:45:c7:2d:5f:bb:0d:bb:76:
                    f0:74:14:a4:95:92:33:be:b7:dd:f1:7b:0b:36:66:
                    6b:cf:8e:45:65:61:e3:c7:02:57:03:39:94:81:27:
                    be:e6:70:e1:13:82:e6:39:f2:ad:cd:ad:69:fe:3a:
                    f6:52:14:74:1c:b7:68:3b:01:f5:e2:04:5c:18:21:
                    61:24:e3:61:98:e3:55:5a:a1:d2:54:0b:8c:de:79:
                    1b:13:e1:bf:e8:94:03:57:be:14:26:d7:f7:03:fc:
                    e6:73:dc:b6:a0:69:e4:a6:20:a3:78:a9:84:67:7a:
                    92:55:7e:20:81:71:01:01:7e:39:48:72:8e:8f:1d:
                    61:c2:89:65:82:7c:c4:3c:5c:08:52:2a:0d:bd:14:
                    18:88:ae:0b:bf:cb:1b:29:04:e3:2a:e3:94:d9:83:
                    14:13:fb:a0:1b:43:f5:28:dc:fa:46:34:9d:e1:7f:
                    fa:ae:48:40:27:65:8a:06:ae:e3:7f:8e:5d:ef:c1:
                    c6:99:6d:33:f4:92:b2:2f:3c:4b:37:f7:b2:32:75:
                    1c:63:10:a7:22:d6:32:1d:73:91:bb:68:82:8e:fa:
                    48:0a:5e:19:d1:77:e9:f8:31:50:92:38:3a:6c:3c:
                    b0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F3:5E:9A:16:64:16:9F:08:85:64:2E:62:D8:51:B7:71:9A:98:04
            X509v3 Authority Key Identifier:
                keyid:63:5F:7F:20:05:4C:4F:BD:A2:DE:4E:D8:7F:5F:64:1F:93:5B:03:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y19_IAVMT72i3k7Yf19kH5NbA4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/2ff188-67de-42a0-8bcd-34d29bb1cd85/1/Y19_IAVMT72i3k7Yf19kH5NbA4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/2ff188-67de-42a0-8bcd-34d29bb1cd85/1/Y19_IAVMT72i3k7Yf19kH5NbA4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:df:17:0b:14:4f:8c:dd:dc:4a:f5:87:ec:43:98:6f:e3:0e:
         d3:1d:ae:de:18:b5:82:e5:1d:c3:e1:c5:83:5e:e6:46:ad:c3:
         37:c2:99:bf:ec:af:0c:b1:08:67:aa:d8:af:42:e8:2f:ea:3e:
         be:1c:c2:cc:8e:d8:bd:b2:93:c1:6f:8e:4b:24:a7:e4:3b:f0:
         ac:d9:71:7e:46:76:0b:69:d1:b4:2d:34:b9:bb:a1:76:10:ac:
         96:b1:31:11:87:f0:49:f6:35:2b:aa:61:f9:52:ed:55:15:5c:
         7f:d6:a8:9f:52:23:cd:96:33:df:55:15:4c:8b:93:a4:2c:98:
         26:5e:43:79:bb:6f:07:4d:9b:0e:6a:39:27:c6:87:ac:56:5d:
         65:0b:8b:62:29:3b:80:a0:82:9d:0e:21:d5:c3:60:ba:13:36:
         f3:03:c4:88:96:33:20:9b:15:e9:b2:bc:99:ad:0a:bd:91:56:
         63:7e:ba:63:57:c7:90:53:ec:0f:4f:c3:25:28:91:44:5b:53:
         64:ea:aa:ce:11:ae:eb:ed:b4:3b:d6:f8:90:1a:60:2c:55:4a:
         9c:ea:5d:f0:79:4d:9c:9c:0f:0e:61:40:f4:73:60:77:4c:d6:
         6a:f3:5c:d4:04:f5:61:86:d2:da:cd:e2:15:23:e2:1d:94:81:
         50:02:65:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:13:07 2026 by rpki-client