Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
File:                     0YpW1qFOZ2P8dzOopflDHbdWjLU.mft (raw, json)
Hash identifier:          HmhIutYcHok068uZLKw+ozHS0d7C32atz5hbkPkb4Bw=
Subject key identifier:   48:63:B0:3C:F4:63:49:04:04:0E:E7:C5:F1:43:E3:EE:88:02:C5:CA
Authority key identifier: D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5
Certificate issuer:       /CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5
Certificate serial:       019F111C721B35707C9A2FD7AA0BAC497107
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
Manifest number:          1919
Signing time:             Mon 29 Jun 2026 02:01:44 +0000
Manifest this update:     Mon 29 Jun 2026 02:01:44 +0000
Manifest next update:     Tue 30 Jun 2026 02:01:44 +0000
Files and hashes:         1: 0YpW1qFOZ2P8dzOopflDHbdWjLU.crl (hash: xddCxYUWbjff/fSJqdM3DZRRD1nJUXgZD6Ael6U7kqw=)
                          2: 1-BUCojs1oWaXAaxy03s5Db9MiJk.roa (hash: tiMBJlRoBCDWpjG2YxYym9l9MTTcSiD5be7NjPI5OEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:1c:72:1b:35:70:7c:9a:2f:d7:aa:0b:ac:49:71:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5
        Validity
            Not Before: Jun 29 02:01:44 2026 GMT
            Not After : Jun 30 02:01:44 2026 GMT
        Subject: CN=4863b03cf4634904040ee7c5f143e3ee8802c5ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8e:25:53:39:b7:2e:4a:8a:d8:b9:4a:f3:f2:
                    73:ca:18:de:89:f3:93:23:00:cb:21:44:63:0d:b8:
                    31:c8:e0:b5:28:67:05:f4:32:ea:b7:78:6e:18:ce:
                    f3:5b:30:7c:f7:73:9a:74:af:1b:3f:e6:46:1b:75:
                    76:81:d7:c9:79:d9:1b:6b:57:ce:9c:cf:f9:a1:9c:
                    a6:c8:ce:df:24:48:f3:c4:68:f5:f9:2a:e8:ca:99:
                    72:81:f3:92:f9:65:0f:9c:7f:a2:6f:5f:5c:9d:92:
                    bd:6a:b5:79:63:1b:ab:e2:84:03:be:e3:fd:2d:3a:
                    e6:98:ec:cb:30:22:e0:e4:7e:40:f0:3e:6f:1d:fe:
                    52:3c:9e:f4:4b:00:46:b0:64:fb:ca:f9:6c:c0:27:
                    80:c3:5c:f4:a1:1e:90:6a:9a:86:35:61:e0:c5:63:
                    4c:37:3f:82:2e:82:2b:4b:c3:63:76:6c:19:96:23:
                    db:c2:ef:b2:a8:07:37:84:9f:da:b3:28:14:9a:03:
                    1a:46:ae:8e:c6:89:be:03:bc:7e:e1:6a:29:22:4b:
                    07:16:56:ce:ad:7f:80:bb:51:65:04:bf:ed:0f:95:
                    11:16:2e:58:bc:3f:b4:a3:7d:43:9d:63:61:f3:04:
                    f5:f0:db:12:34:53:47:db:ad:c6:6c:8d:a4:cc:6c:
                    a7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:63:B0:3C:F4:63:49:04:04:0E:E7:C5:F1:43:E3:EE:88:02:C5:CA
            X509v3 Authority Key Identifier:
                keyid:D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:09:d8:46:9d:42:89:50:1c:de:98:d3:84:27:1c:7c:fb:b1:
         63:80:ea:0d:6a:0b:34:06:a9:e1:3b:8e:a6:d6:b7:20:6c:ff:
         77:6c:34:b1:3d:07:5b:c4:09:1c:d0:08:44:18:60:ec:ac:a3:
         eb:67:53:e2:75:e0:ef:49:ae:6f:49:0e:47:31:7f:09:37:72:
         1e:07:68:33:a9:ce:b9:1e:07:02:65:26:32:3b:ce:d2:b4:d2:
         41:bb:98:7d:dd:f8:d7:18:3f:36:c3:eb:dd:b4:b3:9b:ac:c6:
         1d:60:20:a3:af:03:88:f2:fe:c2:f1:a8:64:0e:12:e9:97:ab:
         7d:68:34:9a:cc:83:f9:7b:b5:b3:7f:d1:72:e6:3b:b3:12:44:
         f0:e0:31:b2:ed:c7:f0:30:b0:1d:10:8c:bc:3f:f4:5c:f6:1a:
         d0:b5:39:c4:08:9a:8a:ad:1f:01:b1:61:2e:7f:5c:74:f1:02:
         a9:e1:db:d6:e1:56:a1:56:e4:25:f9:52:e9:ff:28:93:38:46:
         ce:be:e8:a0:64:da:a6:74:51:c1:b6:b5:d1:4f:42:97:df:c9:
         d1:22:dd:e0:94:1d:a7:c1:8d:4a:6e:3f:9c:c4:b5:98:16:ee:
         95:a9:1a:ac:47:26:69:19:76:ab:2f:ef:8f:57:c3:ec:f4:af:
         9b:fc:31:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:06 2026 by rpki-client