Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.mft
File:                     YdrAqoYffXLG8l1lbwMdoWftqVU.mft (raw, json)
Hash identifier:          LgDku6Aocud2/JW55IZEI/ThkTlCN1xL76pHJDfIOhg=
Subject key identifier:   5C:A7:41:1F:58:00:EB:FA:54:CF:E7:67:C8:8F:C9:FF:0C:E8:A0:72
Authority key identifier: 61:DA:C0:AA:86:1F:7D:72:C6:F2:5D:65:6F:03:1D:A1:67:ED:A9:55
Certificate issuer:       /CN=61dac0aa861f7d72c6f25d656f031da167eda955
Certificate serial:       019EFCF2625DD0BFF9A4D7A995E58CB54F52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YdrAqoYffXLG8l1lbwMdoWftqVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.mft
Manifest number:          6E
Signing time:             Thu 25 Jun 2026 04:03:23 +0000
Manifest this update:     Thu 25 Jun 2026 04:03:23 +0000
Manifest next update:     Fri 26 Jun 2026 04:03:23 +0000
Files and hashes:         1: FlOjCt4LJfQ8IqN1peCaBvqAB2Q.roa (hash: RDwp0/0oDMXql1jT9ebav+hZj67VDM98AjOHB7oE64Y=)
                          2: YdrAqoYffXLG8l1lbwMdoWftqVU.crl (hash: doJQ592KocIfAEPG8Sm/PmrmEnLT/kcnAfOrvk0PoFo=)
                          3: dhtCDXQLsqqlrkZYhsNQj7BUfwE.asa (hash: EzJqcTfM145uC1wp3s4ktIqJ62O99szOvIfXe4xA3So=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YdrAqoYffXLG8l1lbwMdoWftqVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fc:f2:62:5d:d0:bf:f9:a4:d7:a9:95:e5:8c:b5:4f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61dac0aa861f7d72c6f25d656f031da167eda955
        Validity
            Not Before: Jun 25 04:03:23 2026 GMT
            Not After : Jun 26 04:03:23 2026 GMT
        Subject: CN=5ca7411f5800ebfa54cfe767c88fc9ff0ce8a072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:81:f2:8e:b2:ba:56:6e:3f:62:52:1c:af:
                    5e:24:cb:09:d4:78:a2:b4:80:82:44:d9:67:fd:0b:
                    b5:16:65:bd:ec:f2:4c:e0:ae:37:58:16:7b:60:ff:
                    26:15:29:42:78:f2:f5:47:29:66:c8:e8:14:52:75:
                    ea:1d:c5:4f:bf:13:5c:a6:72:4a:e9:01:37:b9:7f:
                    21:de:1f:d4:2f:a9:86:44:8b:d1:80:0f:8f:9a:b8:
                    8c:3f:e6:27:b0:8e:c6:2f:7f:ac:01:1a:1d:5d:4b:
                    ca:5f:a1:f2:58:95:7c:a0:67:7f:9c:8a:ce:34:09:
                    cd:d1:8c:0d:a6:c1:b2:02:3c:a3:e6:37:dd:1e:16:
                    a6:91:ad:e0:5d:d0:09:94:cc:9b:ee:f6:cf:81:33:
                    f6:29:1a:a6:f2:49:eb:7d:bc:60:d0:e8:b1:90:8e:
                    20:f4:47:8d:96:cd:52:ed:6e:ac:e1:2a:60:55:27:
                    17:af:b0:5e:a9:76:b9:1a:89:2b:3a:2e:01:14:bc:
                    3b:c5:6f:58:75:25:2d:23:24:5e:38:31:2b:29:6b:
                    fb:10:f6:b1:81:f5:fd:67:be:5a:14:db:90:29:bc:
                    0c:a2:88:23:7e:f1:c6:dd:12:15:d5:b9:98:1e:4a:
                    28:21:15:47:3b:bd:ac:e2:b6:cb:4f:ee:76:16:6b:
                    e5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A7:41:1F:58:00:EB:FA:54:CF:E7:67:C8:8F:C9:FF:0C:E8:A0:72
            X509v3 Authority Key Identifier:
                keyid:61:DA:C0:AA:86:1F:7D:72:C6:F2:5D:65:6F:03:1D:A1:67:ED:A9:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdrAqoYffXLG8l1lbwMdoWftqVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:23:92:35:b0:97:ea:64:8f:73:65:03:6d:63:b2:23:ba:ff:
         b5:29:c7:82:96:f6:26:16:b3:22:5f:98:ef:f0:d7:44:ee:06:
         c6:ba:fe:40:07:c2:b6:26:18:c9:03:eb:5d:2e:7e:e9:3c:b7:
         24:3d:e8:c3:61:d4:5c:25:6f:e0:4c:d2:1a:16:dc:d6:16:7d:
         4c:de:31:36:8a:0f:2d:5b:22:2f:97:91:2b:03:55:bf:a1:39:
         b6:a0:f1:8a:4d:1d:b1:55:6a:85:cf:41:52:71:5b:0e:bd:48:
         a8:c9:f4:90:a6:1b:32:41:8a:86:59:13:b6:52:e7:c7:dc:62:
         7f:0c:c3:a8:75:3e:21:03:05:71:ed:4a:71:5b:db:b5:cc:1d:
         c2:ca:ef:bd:04:2e:20:4c:6c:60:9b:b8:67:16:45:d8:23:e6:
         c8:9a:96:02:b7:1c:da:2e:d6:e2:7e:a7:70:bf:c0:7a:0b:e1:
         24:78:01:08:c6:5f:a8:e2:ae:85:47:57:2e:8d:40:d5:85:86:
         3e:b6:26:87:06:f5:48:20:49:a4:85:2a:f2:e9:2c:dd:e1:66:
         70:95:02:9d:be:ab:80:42:f0:36:94:ac:4b:69:f0:2a:67:3d:
         3d:6b:95:11:0e:6b:66:8b:79:1a:fc:57:31:f3:eb:24:2d:a5:
         57:22:62:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:26:13 2026 by rpki-client