Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
File:                     1YzIUG_tu1Bh3pklsH1kmRihmSY.mft (raw, json)
Hash identifier:          M/0AYUpdIxYA2L9s92aR4KEAX6pBXgFCroP5jSPjqcU=
Subject key identifier:   14:D2:A9:A4:14:3A:8F:E7:F1:02:A3:93:59:57:CD:F2:C5:AF:41:65
Authority key identifier: D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
Certificate issuer:       /CN=d58cc8506fedbb5061de9925b07d649918a19926
Certificate serial:       019F178B96D45CC19EB14EF60CE1187EF2D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
Manifest number:          1469
Signing time:             Tue 30 Jun 2026 08:00:51 +0000
Manifest this update:     Tue 30 Jun 2026 08:00:51 +0000
Manifest next update:     Wed 01 Jul 2026 08:00:51 +0000
Files and hashes:         1: 1YzIUG_tu1Bh3pklsH1kmRihmSY.crl (hash: SwF9sKTb1u3mJbOa2K7C55cA3g74giD3TOrSNf4wFVU=)
                          2: HjhcNkYhwKAwsCXy5ZYGbpaMSLg.roa (hash: xX7UUwpJ+KfmGQzUw1STndVlg/7oKae9beZ2g3g7Y4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 08:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:8b:96:d4:5c:c1:9e:b1:4e:f6:0c:e1:18:7e:f2:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58cc8506fedbb5061de9925b07d649918a19926
        Validity
            Not Before: Jun 30 08:00:51 2026 GMT
            Not After : Jul  1 08:00:51 2026 GMT
        Subject: CN=14d2a9a4143a8fe7f102a3935957cdf2c5af4165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ad:88:69:cf:45:b5:e1:e6:d1:7c:b7:44:1e:
                    91:43:b2:d0:2a:96:44:da:1f:e8:08:97:0b:1b:56:
                    f9:cf:ef:af:6d:eb:42:38:62:e8:63:8d:3f:f4:5f:
                    1e:f6:df:0c:eb:26:94:72:4a:bf:7f:43:4d:cf:f7:
                    b3:23:9b:26:97:eb:e5:93:d6:5f:89:4e:69:71:b2:
                    b7:e2:63:a3:8e:0c:39:2e:69:43:28:09:53:68:0f:
                    40:38:70:72:a2:d4:d5:8a:42:da:1a:62:55:46:29:
                    e3:80:1f:b9:1a:8c:22:92:ad:01:bb:b9:df:b9:50:
                    be:87:29:e3:d6:bc:1b:01:71:15:bc:40:0a:6f:9d:
                    19:ca:c6:ac:04:b1:2f:0a:ed:33:63:62:dd:ad:05:
                    85:27:8f:5b:37:ed:a9:ef:7d:f1:8c:6d:68:59:a8:
                    83:6f:a3:68:4e:b1:b6:b8:a8:f1:a5:bf:50:d3:fa:
                    5e:fe:e4:56:b9:9a:77:0b:dc:91:ba:2b:39:cc:dd:
                    5e:75:35:58:f9:3d:b9:23:c3:af:ce:cf:65:89:0b:
                    63:0a:5a:94:bb:a9:fd:04:16:2d:99:b7:96:eb:4c:
                    72:10:ab:a7:f9:29:31:71:4f:c4:d8:fd:87:36:3a:
                    f8:6a:c0:37:77:96:2c:ee:3a:f3:c9:8a:12:63:1e:
                    cc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D2:A9:A4:14:3A:8F:E7:F1:02:A3:93:59:57:CD:F2:C5:AF:41:65
            X509v3 Authority Key Identifier:
                keyid:D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:3d:c8:54:4c:93:7f:92:37:8e:93:44:07:a0:89:c9:7a:a4:
         cf:8c:4a:a8:cb:38:78:34:dd:b1:bb:51:41:78:ba:92:8d:e6:
         79:ed:a0:44:d2:ee:d2:28:b7:0e:f0:14:fd:a6:76:cd:79:d2:
         94:72:26:03:e1:80:83:50:dc:01:79:77:fa:1d:72:6b:4c:c4:
         4c:11:a5:7f:93:a1:5e:37:cb:42:be:78:46:b7:90:41:23:8a:
         aa:ac:cb:95:dc:5f:59:1e:25:71:35:00:f8:a6:3c:0c:13:23:
         93:86:d3:2b:c8:60:bf:03:66:63:af:a2:a4:57:e7:5d:a9:ea:
         fd:06:6b:9c:45:92:2f:78:c0:94:b5:02:32:39:46:09:55:33:
         9a:f5:01:f3:fa:71:2f:01:90:d1:fc:0f:f4:19:93:f3:a8:b8:
         19:f9:6b:d2:b5:3a:13:e8:c0:fb:77:0c:75:ba:46:17:4c:a4:
         19:ca:b4:fb:c2:f9:be:18:4a:9f:51:04:7d:60:8c:83:1a:f1:
         cc:23:77:e9:26:3e:a6:56:b2:d1:2e:9c:b7:1a:d4:63:38:77:
         d1:ea:62:a9:46:c9:4e:03:e0:98:a0:13:48:d5:1b:cd:b1:27:
         a5:a4:59:89:12:a1:54:32:44:cf:55:1d:07:81:ff:9e:21:c0:
         6f:09:6a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:34 2026 by rpki-client