Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
File:                     Y9nR2VwetxbugZUEWnfLohgdeew.mft (raw, json)
Hash identifier:          wLFscp1q0uFvBo/mOlsSwPnQgemRzEU1TDmD8JELM4g=
Subject key identifier:   F1:AD:B6:72:75:72:1B:A2:AF:FE:5E:3C:72:68:54:13:39:A8:FC:51
Authority key identifier: 63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
Certificate issuer:       /CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Certificate serial:       019EB80F304FC8BEF18BFC5DE2094ECA167F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
Manifest number:          1969
Signing time:             Thu 11 Jun 2026 19:01:03 +0000
Manifest this update:     Thu 11 Jun 2026 19:01:03 +0000
Manifest next update:     Fri 12 Jun 2026 19:01:03 +0000
Files and hashes:         1: 4IporOiK6JktRpGESiSAAQpMF7U.roa (hash: lg+Ex4UPGBW/ZbBLSg9owvXX4yPCqEFw5/NmsjkdpGk=)
                          2: NkORSlpsNzTNf4Yu6bNI9qrV2xQ.asa (hash: wbUaskZvxVYhABFMYZHgXLXqscELVMuo7ua+/E/mtdY=)
                          3: Y9nR2VwetxbugZUEWnfLohgdeew.crl (hash: mOPsYy5JPf8ryB3dG1R1FywFxrC8k7YzbwB+6mvH24I=)
                          4: fNxI3dXScPmMR3z1E-3FYKWMeS8.roa (hash: aphBfexzTqun+pqPzK9ahrBEriTPK5GbP96jBpZa6kw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0f:30:4f:c8:be:f1:8b:fc:5d:e2:09:4e:ca:16:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
        Validity
            Not Before: Jun 11 19:01:03 2026 GMT
            Not After : Jun 12 19:01:03 2026 GMT
        Subject: CN=f1adb67275721ba2affe5e3c7268541339a8fc51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:23:c9:c3:37:0a:9e:cd:10:08:f6:3c:71:df:
                    8e:1d:26:3f:6c:39:f0:f7:33:40:f3:2b:f8:7f:9d:
                    a5:96:ad:ee:b7:e7:d6:0a:69:56:71:2c:f7:a0:df:
                    ef:84:5e:78:19:3b:11:29:6f:9d:11:d6:b2:bf:be:
                    ad:36:4b:82:af:ab:8e:84:49:b6:2f:27:98:52:0a:
                    62:36:2e:97:36:66:9d:37:0d:e4:04:61:0c:6a:5d:
                    ee:9e:0e:28:96:64:e0:e1:ff:d0:83:a1:d5:17:df:
                    86:1e:6c:f7:5b:62:dd:3c:f2:c9:86:79:63:d0:1b:
                    91:43:22:9c:ac:58:63:3c:d5:4a:ed:e3:ec:f7:bd:
                    04:ad:fd:a6:26:b5:c6:d7:b6:48:48:89:4a:2c:85:
                    40:73:33:00:e7:2e:33:a9:80:6d:eb:16:07:8a:fc:
                    f1:73:3d:41:af:8f:b1:89:da:d6:fb:7c:8f:69:25:
                    37:24:01:01:47:56:39:10:32:40:a8:7d:1a:28:cf:
                    f4:9b:d8:01:7d:13:72:c4:7a:9e:46:f3:1a:cd:36:
                    af:02:69:0c:21:d2:03:ae:d7:eb:f7:26:fb:47:87:
                    c2:e5:9b:24:f1:46:75:5b:5e:5f:11:a1:d2:a1:12:
                    e8:35:8c:64:ce:69:b4:68:94:da:0f:f7:01:fb:25:
                    5f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AD:B6:72:75:72:1B:A2:AF:FE:5E:3C:72:68:54:13:39:A8:FC:51
            X509v3 Authority Key Identifier:
                keyid:63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e3:5b:6d:3f:93:69:02:d0:9d:2a:2a:e6:82:be:da:47:b9:
         be:24:e5:ab:31:82:09:00:a5:07:f8:0b:95:87:d0:0e:ea:23:
         14:36:2e:8c:73:87:b5:2e:7b:81:b2:29:85:fb:3c:1b:f3:e2:
         c9:3c:48:33:91:7a:75:19:c9:99:05:c2:b0:bb:5a:f3:95:f6:
         1d:c9:23:bc:96:70:0b:65:65:99:f7:fe:1f:61:da:1a:4a:86:
         13:57:18:ca:f0:30:7f:4f:f1:3e:bd:e2:13:ea:19:a2:02:35:
         a5:a6:cd:3f:7e:2a:a4:00:52:a5:38:63:ea:b1:ba:ec:bb:5f:
         54:36:84:5d:3d:b5:d3:bf:8a:69:b0:c1:6a:f8:2d:3b:26:a9:
         cd:51:f9:c1:1b:fc:ff:a3:c0:74:ca:28:71:39:db:bf:41:b0:
         01:2f:02:42:6e:88:45:ce:61:ee:56:aa:17:e7:43:f2:c9:d8:
         87:9e:66:76:57:91:a4:43:16:01:c8:c5:25:13:3f:f1:ea:2e:
         79:22:c7:7b:55:e0:44:59:a0:a9:42:8c:81:d2:c4:b5:69:28:
         e3:51:c3:7b:b2:30:c8:90:78:85:e9:70:be:ea:9b:a2:c0:3e:
         2d:c6:59:25:86:d5:47:11:68:1b:b6:bd:05:04:53:b5:23:ea:
         bc:2c:da:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:58:44 2026 by rpki-client