Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
File:                     YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json)
Hash identifier:          8Ck/LtYOtnDrIUxneanEJNWHJhPGowB27+XmPDJ9x+A=
Subject key identifier:   9F:B3:D3:D4:DB:C4:4A:14:6E:5C:F1:3F:D2:01:F4:65:67:71:1B:12
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Certificate issuer:       /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial:       019EB958B96F28B50625B413F1E43E4BD51A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
Manifest number:          1958
Signing time:             Fri 12 Jun 2026 01:01:00 +0000
Manifest this update:     Fri 12 Jun 2026 01:01:00 +0000
Manifest next update:     Sat 13 Jun 2026 01:01:00 +0000
Files and hashes:         1: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: KRmRCVSJjKuWzPuTanexYKLpxYPJfhe7UWCX7f7tANc=)
                          2: aEsbh_haMhsqIB5wCxd9t5IabFM.roa (hash: Ne5BDRQ7SBRIMJmF2NPdjnl9j7TlWo9N5JJSWBtw7bI=)
                          3: yrgQph9zHMA3wU0ZObxjZhTJQrM.roa (hash: XV/X6CYSDEZtr00aa1x8ls6ykfziXhFe1fHOXXDEkhE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:b9:6f:28:b5:06:25:b4:13:f1:e4:3e:4b:d5:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
        Validity
            Not Before: Jun 12 01:01:00 2026 GMT
            Not After : Jun 13 01:01:00 2026 GMT
        Subject: CN=9fb3d3d4dbc44a146e5cf13fd201f46567711b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:69:a2:2a:30:ec:42:06:75:bb:bd:55:11:1a:
                    b8:d6:cf:ed:72:83:49:ee:8a:26:a3:55:2b:b5:33:
                    77:a3:01:bb:6e:76:db:95:3f:2a:d9:f6:7d:53:1d:
                    cc:f1:6f:3b:ba:c2:04:6d:92:74:d7:19:ce:3a:42:
                    0c:3f:29:2b:ed:84:46:de:d1:ac:57:f5:a7:a7:fa:
                    5b:f9:77:4d:c8:37:31:b5:b5:46:10:3b:f5:2e:a2:
                    37:31:6a:13:4a:40:10:9e:2e:5f:07:2b:0c:72:3e:
                    13:77:d2:83:96:e8:9d:ce:02:7f:56:05:ce:d1:f9:
                    9d:e7:88:e0:5a:7a:13:a2:7d:ba:fd:28:e5:8e:5f:
                    ed:5a:81:c7:df:67:8b:6c:9f:80:13:9c:fc:58:34:
                    69:bc:cf:b4:4c:11:db:3d:a4:76:da:21:6b:d3:45:
                    86:05:0c:21:cb:61:06:ee:95:70:41:b3:dd:95:3f:
                    63:4d:23:a8:e2:0a:a2:3f:94:da:3e:39:f6:be:b4:
                    5b:e0:ea:d0:0c:ef:ab:b0:ba:a7:38:4b:0d:d2:5b:
                    a8:fc:d1:86:8c:14:e8:49:f4:08:20:ce:45:7f:a6:
                    75:59:20:df:b9:c2:71:dc:31:5e:93:44:73:7d:49:
                    d8:f9:f4:39:64:de:5a:9a:cb:c8:ae:aa:64:81:f3:
                    65:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B3:D3:D4:DB:C4:4A:14:6E:5C:F1:3F:D2:01:F4:65:67:71:1B:12
            X509v3 Authority Key Identifier:
                keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:6b:9b:7f:3e:58:06:bc:55:1b:ae:84:fd:4e:ab:c2:f6:99:
         47:2e:27:0b:f5:c3:f6:bb:df:60:ce:ad:f1:86:1a:22:6d:9d:
         c4:32:6a:db:ba:55:fb:7a:2a:56:87:98:96:53:4a:22:cc:7c:
         69:d0:28:0e:9c:7c:99:0a:de:92:27:9f:bb:7a:bb:c3:fc:b5:
         11:8c:76:99:1e:01:43:f4:c4:36:b0:31:e2:8c:4e:8d:44:90:
         19:41:f1:d0:0f:ef:4a:bc:d6:b3:03:88:ea:c9:b2:39:a1:16:
         21:87:3b:9e:b3:4a:9e:88:1d:5e:99:79:b2:64:66:7c:a2:4b:
         e2:87:c7:30:3d:2c:f6:0e:d8:91:31:a8:57:08:83:4f:09:6b:
         9e:62:ec:89:31:62:cc:fb:55:8e:c8:0e:43:f7:1b:ed:f2:a8:
         83:41:61:68:1d:e1:bd:ee:95:05:ac:9d:b0:fe:56:84:d0:0e:
         47:d5:99:78:88:91:d7:58:ba:a1:a0:26:d9:57:d1:00:98:18:
         73:e3:22:ee:07:c3:31:55:bf:e3:94:6f:b7:9a:55:67:7c:57:
         ec:d1:3c:e5:d4:bc:e3:38:7b:d7:36:31:fe:ab:f8:6a:65:ee:
         95:67:37:ac:3e:60:d2:2a:cb:9c:f2:18:bf:76:06:07:43:47:
         40:ce:3b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:04 2026 by rpki-client