Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
File:                     yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft (raw, json)
Hash identifier:          ONUKRWo2vS1vqzm/+0Vf7CBp8MABedxNhKrB1TAa+go=
Subject key identifier:   17:D8:8B:C9:C6:E0:72:45:AA:DF:D1:BB:74:97:9E:18:2E:6B:88:E1
Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
Certificate issuer:       /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Certificate serial:       019EBC90E7C56631647D7A2F98A82AD4C2A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
Manifest number:          0DB2
Signing time:             Fri 12 Jun 2026 16:01:13 +0000
Manifest this update:     Fri 12 Jun 2026 16:01:13 +0000
Manifest next update:     Sat 13 Jun 2026 16:01:13 +0000
Files and hashes:         1: E2zzXQ54xG7WLQ4EAWvDS5mcEy4.roa (hash: 1CmVUeU/gi0IzJZ7FqgYWAYmrsykqbvWe2Uux9ESnfc=)
                          2: M16a-01DtEnUChbTQJhjr1Iefi0.roa (hash: MvFHVj8+o4PtyZlfLnoWLUlGFyHMzdje5B5jzpVV+ao=)
                          3: fYFb1Y-NrescEZS13kBhzxAZwCo.asa (hash: PK8fg+eevsgYRUzK5CVwRm3AD9wujkCIUbycGA1SZNY=)
                          4: yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl (hash: 12VhfrDrQl2PIaXMqAu1PCWA2KAreu4XhOMqVoLp+Sc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 16:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bc:90:e7:c5:66:31:64:7d:7a:2f:98:a8:2a:d4:c2:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
        Validity
            Not Before: Jun 12 16:01:13 2026 GMT
            Not After : Jun 13 16:01:13 2026 GMT
        Subject: CN=17d88bc9c6e07245aadfd1bb74979e182e6b88e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:36:b7:4a:ae:18:c5:3b:ba:00:a3:a9:96:e6:
                    4b:c7:65:c0:9e:01:05:7c:ed:37:ee:64:f4:8a:7c:
                    e3:36:25:58:18:0f:e6:2e:c5:93:c8:d5:36:a8:ff:
                    11:86:3a:33:93:08:ee:7f:e9:92:06:73:6a:f2:2b:
                    eb:e0:fd:c9:99:d8:85:43:69:7a:43:27:5a:32:bb:
                    ab:18:a8:3e:fb:c2:20:63:7b:b2:8b:e0:39:de:1b:
                    b8:6f:74:32:55:ec:c4:9b:dd:bb:04:fc:59:a4:9a:
                    a4:86:a4:c4:b2:f2:3f:d5:8e:f0:73:d2:8e:ac:a9:
                    2a:d2:16:d6:e6:12:5e:1a:8e:9c:67:00:a0:76:d4:
                    d5:09:95:8a:41:96:46:a7:ff:59:7f:c5:58:5c:fc:
                    8d:4d:a9:5c:60:5f:e4:05:2b:fe:6b:78:2a:5e:24:
                    b1:96:12:52:a5:57:85:d5:e9:02:c6:48:30:e2:89:
                    56:d9:34:31:05:b3:b3:f8:13:b5:6f:6a:44:01:4a:
                    10:f1:24:55:0b:05:5d:74:53:1b:a8:67:3a:58:da:
                    13:62:e5:07:ed:f2:be:29:46:a8:3a:a2:ac:6b:08:
                    f7:d5:47:a6:9a:2f:41:96:31:6f:13:82:89:42:5c:
                    73:cd:eb:a4:b1:32:8b:5c:be:71:3f:83:df:61:ae:
                    68:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D8:8B:C9:C6:E0:72:45:AA:DF:D1:BB:74:97:9E:18:2E:6B:88:E1
            X509v3 Authority Key Identifier:
                keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:79:ca:2b:4d:98:73:0b:58:66:83:df:aa:3a:e2:49:e2:5b:
         b9:32:cd:06:6a:37:5d:ca:e5:c2:12:8d:ba:2b:be:27:54:3b:
         55:ef:a6:77:fa:8b:d1:96:61:b0:22:52:6c:d3:a0:a5:df:63:
         1e:c8:14:a5:32:2e:92:e5:9a:ae:68:21:a1:68:2d:e4:2b:97:
         9b:8f:b6:3c:e6:ca:75:59:6b:88:d5:d7:88:69:b5:9b:1e:d8:
         c7:a5:0c:5d:49:87:57:d6:75:40:ee:10:98:84:18:b3:66:77:
         c4:af:a8:9f:48:95:b7:61:9d:8d:2e:40:7e:bc:db:c6:79:13:
         45:b2:1b:75:df:46:51:09:1e:f0:f7:6e:61:44:ba:ce:e8:19:
         04:71:78:bb:f8:46:c3:09:1a:41:7b:19:4a:44:79:43:c8:80:
         cd:36:f7:59:1f:a6:ea:66:63:ea:34:c2:cc:33:8a:b3:b5:b8:
         94:ce:69:3f:7b:0c:cd:fc:c2:90:04:a3:d7:46:ae:0f:fd:d4:
         80:ab:80:38:95:69:47:81:92:45:f3:16:f6:4d:dc:1b:16:74:
         e1:8a:5f:28:80:d7:6f:51:51:58:a4:d9:3d:7b:84:59:b6:f5:
         f5:31:d8:53:3b:61:1e:6f:0c:13:5d:45:b2:59:1c:4e:20:61:
         b6:6f:f2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 02:15:34 2026 by rpki-client