Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
File:                     Mya5UKRaLGusFQX80E2UDMCWj5Y.mft (raw, json)
Hash identifier:          9i4lJ5CIA8JFtOZNuQYBKLG+M1yrLAyCAF2AP3cpZFg=
Subject key identifier:   C4:93:F0:77:7C:E4:4F:F4:D4:C5:AE:35:8E:C3:BD:1A:1D:78:99:0A
Authority key identifier: 33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96
Certificate issuer:       /CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
Certificate serial:       019E999697B79074CDBAF385C7986C41971F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
Manifest number:          082F
Signing time:             Fri 05 Jun 2026 21:00:43 +0000
Manifest this update:     Fri 05 Jun 2026 21:00:43 +0000
Manifest next update:     Sat 06 Jun 2026 21:00:43 +0000
Files and hashes:         1: Mya5UKRaLGusFQX80E2UDMCWj5Y.crl (hash: bGdSPy5YFRLB69i/S5jbRTrPtvScGN2jT+brDTKrtQU=)
                          2: YZYDQXVhkyQEU7FXMxc6oaYUT_4.asa (hash: eA77gr7KIuI04ACTqilmeBAOd+qmU/Ry9/nDfmBIbL4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 17:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:99:96:97:b7:90:74:cd:ba:f3:85:c7:98:6c:41:97:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
        Validity
            Not Before: Jun  5 21:00:43 2026 GMT
            Not After : Jun  6 21:00:43 2026 GMT
        Subject: CN=c493f0777ce44ff4d4c5ae358ec3bd1a1d78990a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:93:44:21:e0:cb:89:be:b8:8f:e3:22:92:
                    6b:1e:96:95:dd:8c:8b:b1:72:0d:63:7a:3f:45:47:
                    ff:3e:03:c8:55:b4:7b:6f:56:49:aa:08:92:95:d8:
                    c8:f0:bd:3c:f1:b8:8b:72:bf:c2:8d:34:e4:fd:f2:
                    9e:27:fa:d4:d3:a1:57:2e:7f:7c:ec:cf:3b:96:48:
                    06:ac:6b:3a:cf:d8:f6:bd:91:c4:31:db:81:e9:5f:
                    92:68:11:ed:6d:2b:cf:63:8c:1c:06:a1:f0:0f:83:
                    78:dc:2a:b4:1c:81:cf:53:dc:9d:66:ac:c8:0d:3f:
                    d3:72:b5:33:cd:9a:97:c5:87:d0:42:af:00:7c:5f:
                    a9:e5:86:25:63:e3:03:3d:39:7c:c8:bf:dd:5f:ab:
                    b7:03:39:3b:37:33:5e:ef:b4:34:16:13:ad:e7:8b:
                    f1:bb:12:b3:af:c4:e8:8b:9d:5f:36:69:c9:c1:07:
                    80:65:5f:36:ac:71:a4:aa:21:3a:42:f3:e4:f6:af:
                    1c:f4:68:86:4d:65:9c:5c:8d:9e:07:29:38:05:06:
                    5a:6b:b5:36:3e:8e:30:a3:0c:ab:da:8c:8f:49:bf:
                    54:d2:d4:87:73:5a:ea:a4:3f:4c:3e:ec:e4:9d:66:
                    d2:a9:ab:1e:69:fa:dd:55:99:04:5a:71:9b:ce:2d:
                    84:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:93:F0:77:7C:E4:4F:F4:D4:C5:AE:35:8E:C3:BD:1A:1D:78:99:0A
            X509v3 Authority Key Identifier:
                keyid:33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:21:1b:d5:5b:84:fa:a5:2c:8c:da:65:76:45:a7:c2:1c:00:
         c8:74:03:c3:e0:68:a4:0c:c9:b0:7c:ee:40:cc:0f:a9:3b:a0:
         82:79:6a:15:64:e9:07:95:f9:2b:6f:3b:34:04:27:97:8f:ef:
         12:04:0b:2f:b8:c4:f5:bc:02:73:29:37:6d:a4:c1:96:6e:08:
         63:44:e8:69:45:38:1d:7b:2b:db:8c:30:44:34:54:22:e3:80:
         e2:de:6a:bf:3a:80:3d:32:91:1e:93:82:7f:0b:d0:a0:85:9d:
         b2:13:a5:fa:e8:be:89:35:48:42:45:2a:71:ac:d5:f3:3d:3e:
         43:51:b5:fd:b6:17:ab:2c:45:91:1c:ae:7f:55:b3:ca:6d:dc:
         49:76:f9:6d:f5:a0:e1:08:45:d7:2b:2b:a1:cf:58:ae:3a:2d:
         95:9a:30:a4:de:8b:16:04:25:ab:47:d5:ff:2f:1c:c1:8e:d3:
         0a:63:87:8f:e3:57:57:9b:6d:04:2d:42:8e:d7:5d:9c:4a:bc:
         1c:c3:1d:30:39:65:fb:bf:04:1b:82:6d:09:60:7e:14:51:76:
         57:11:1e:83:b0:da:cd:70:51:0f:7a:48:0c:2a:42:89:aa:68:
         32:59:2a:aa:d3:a9:8f:50:ee:d2:b4:6a:a9:73:18:56:75:e4:
         cd:af:0c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:47:09 2026 by rpki-client