Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
File:                     sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft (raw, json)
Hash identifier:          wY0tJSnrlGeNmX7QSmEU+2UX60IBE+9JQtNLDLXPbmA=
Subject key identifier:   24:17:66:F9:BA:21:41:3C:47:76:4B:CB:49:5D:2B:08:80:DD:4A:B6
Authority key identifier: B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
Certificate issuer:       /CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Certificate serial:       019EB9585D59B0F198435DB1604D70B51157
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
Manifest number:          0C77
Signing time:             Fri 12 Jun 2026 01:00:36 +0000
Manifest this update:     Fri 12 Jun 2026 01:00:36 +0000
Manifest next update:     Sat 13 Jun 2026 01:00:36 +0000
Files and hashes:         1: 6tRNFOHlYPyCYFIHgatSgb5gCeA.roa (hash: E6/vpznSWjmg4YEWxQ9xApX1IggzL3noXqAm0pLp65E=)
                          2: sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl (hash: FEtQwMGVlbPZ4NYMNXfghM9biefHAxFcOk/7B2GtpWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:5d:59:b0:f1:98:43:5d:b1:60:4d:70:b5:11:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
        Validity
            Not Before: Jun 12 01:00:36 2026 GMT
            Not After : Jun 13 01:00:36 2026 GMT
        Subject: CN=241766f9ba21413c47764bcb495d2b0880dd4ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:53:e3:9c:b6:71:57:c0:d1:54:c1:25:04:34:
                    30:bf:11:77:fc:57:d7:75:b6:a3:e7:dc:09:ea:b9:
                    b3:ba:73:cb:eb:80:a0:19:97:b3:ed:36:71:24:e7:
                    6c:a6:41:04:5f:6f:b3:37:f5:a8:d2:29:c2:71:b8:
                    99:30:85:07:02:05:b1:5b:57:64:d1:01:33:9e:7f:
                    6a:54:55:11:43:a6:e7:01:e1:a3:19:f5:4f:0c:67:
                    15:63:9c:b6:65:a1:da:12:63:18:f0:bc:25:5f:ed:
                    5c:1f:8a:c4:59:b8:1c:e1:49:a6:6a:82:10:83:06:
                    f4:9a:1b:04:53:f9:e3:a9:72:ae:f0:fc:8a:3c:d5:
                    9e:4d:be:bf:e0:01:e9:1d:f5:58:d5:20:b5:f3:ed:
                    b5:e1:a1:16:04:ab:5f:46:81:aa:13:1c:82:42:8c:
                    f2:23:c1:8a:8e:15:12:24:0b:1b:36:7f:5f:35:4b:
                    58:a9:84:83:2d:ec:2f:55:e2:0b:e4:20:4f:81:a6:
                    b2:59:f9:df:f2:25:1a:2b:24:a9:cb:d1:a8:9f:4e:
                    e8:4c:94:47:60:b6:80:07:0d:2a:d4:78:d9:f0:21:
                    d9:29:01:b7:a9:8e:5a:68:26:f6:6c:c7:15:98:0f:
                    45:94:86:6f:03:57:f4:73:00:c4:01:fb:b8:3d:92:
                    df:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:17:66:F9:BA:21:41:3C:47:76:4B:CB:49:5D:2B:08:80:DD:4A:B6
            X509v3 Authority Key Identifier:
                keyid:B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:0d:6e:fc:be:ce:c4:c9:12:21:2a:4e:ae:2f:d2:c3:ab:cd:
         13:78:cd:2a:c3:34:4b:0f:26:39:ad:12:11:c5:ca:34:e5:d2:
         70:a9:e7:ca:5e:20:49:f8:1f:b8:2c:72:22:00:fd:3c:1e:57:
         0b:7e:de:28:08:b2:87:a8:9a:cd:56:71:fb:66:12:7a:44:df:
         5b:53:d2:11:db:76:c1:5a:e0:9f:c5:e2:0b:b3:c2:02:e2:33:
         f3:08:51:ae:8f:9f:04:61:95:a9:74:e5:cf:d1:6f:db:38:87:
         7e:fc:f1:d0:f0:71:2e:fc:2d:2b:c7:5e:2f:c1:ce:dc:d2:11:
         49:52:60:7d:26:f0:a4:77:54:89:58:1f:d6:6a:39:6e:d2:93:
         dd:36:ad:6c:ec:d7:4d:08:3d:4f:a8:1f:9f:13:47:56:bb:71:
         53:a4:eb:8d:c7:42:00:e3:bd:b4:8e:da:ab:e9:21:86:80:17:
         9a:e5:64:8a:8d:b4:38:52:53:21:b6:67:c5:e8:4f:a3:37:a0:
         ae:d1:67:19:f8:ca:a9:08:41:52:7d:d7:cb:69:db:f6:37:5c:
         1a:31:1d:ad:a1:3d:df:cc:11:79:57:23:6a:45:d6:22:14:54:
         9c:e1:82:b6:54:53:93:13:56:6e:8a:9d:45:d1:1d:47:44:fd:
         a2:99:cb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:13:45 2026 by rpki-client