Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
File:                     Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft (raw, json)
Hash identifier:          mAv/71Ar8vzy3KCqn+L4V8nVg1qjIgwnY5Kq5K+kAtk=
Subject key identifier:   12:D4:B1:67:41:AF:A0:B9:66:88:E2:2E:9F:45:D5:27:B9:87:BB:99
Authority key identifier: 62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28
Certificate issuer:       /CN=62beaa57c67aeb5bafd99793ab4846850a796c28
Certificate serial:       019EB9C5F0F9478B4C4B2398F9E8167477B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
Manifest number:          0D21
Signing time:             Fri 12 Jun 2026 03:00:17 +0000
Manifest this update:     Fri 12 Jun 2026 03:00:17 +0000
Manifest next update:     Sat 13 Jun 2026 03:00:17 +0000
Files and hashes:         1: HJtkjvlBva8uqcL0XUNpqigQG9s.roa (hash: WkXmQkgs5y2TV+m/F6AQDR1j74heyCTTdW3y6tsfBHk=)
                          2: OUHZPu_PJYtOLDLbLVCMk8yoe-k.roa (hash: Ma69Row9f6EcaHWc23EqgBUIT2c3X7xAnz9i9hXJ3nQ=)
                          3: Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl (hash: qptzU3SCSbi70Ka5v7vJYrkwR6qVIn/L4t0Z5QLDiKg=)
                          4: kz2wF3XWQ2RN8sHvIuIFZYtVNIQ.roa (hash: mNiLwNy9yFADV0O6uoYz7QI7buc164Ngl+VExm6ZaD8=)
                          5: xprcFFAPJjG3UElyOhAJ6E9gXpA.roa (hash: o5pGWYnDSMF3mxP8sdDWWibluTFKuj51TiZS9rC+X/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:c5:f0:f9:47:8b:4c:4b:23:98:f9:e8:16:74:77:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62beaa57c67aeb5bafd99793ab4846850a796c28
        Validity
            Not Before: Jun 12 03:00:17 2026 GMT
            Not After : Jun 13 03:00:17 2026 GMT
        Subject: CN=12d4b16741afa0b96688e22e9f45d527b987bb99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f6:b2:a1:95:39:70:49:81:17:94:99:8e:65:
                    85:6e:26:47:60:ae:75:b1:f9:42:fb:9a:95:89:d8:
                    56:e7:35:5c:ea:5b:1f:0c:00:b8:e1:69:2e:bd:0a:
                    b8:d1:b5:65:af:29:99:5c:37:ed:a4:ef:4e:0d:8b:
                    0c:99:2a:52:06:6d:e8:76:34:40:58:d0:bc:b1:8e:
                    9f:77:5c:d1:b3:2b:90:8b:06:73:ec:1a:6b:fa:4e:
                    71:a6:75:d7:53:01:d0:23:91:bb:87:3a:2d:9a:1b:
                    d0:94:ea:d1:4c:ce:45:6c:d4:63:6f:6e:89:08:3d:
                    c7:88:8a:c1:c8:1e:d3:4f:e1:74:9c:4f:33:da:22:
                    2d:25:bf:6f:57:88:01:5d:a7:71:dc:8d:2b:1e:d0:
                    33:e2:ed:e4:8c:72:b0:09:81:56:75:94:3e:8d:12:
                    6c:44:86:ed:84:4f:21:2d:8b:73:89:fb:ce:91:3e:
                    02:75:7f:17:51:af:62:0c:1b:10:59:ec:db:de:40:
                    a0:f7:6f:80:54:03:b8:13:28:05:d4:ec:56:a9:96:
                    2a:77:4c:66:08:53:f5:d4:8d:a5:61:53:00:76:a4:
                    fe:b0:61:6b:a0:0f:17:85:45:a4:6a:2d:d7:ef:79:
                    ba:cb:99:44:13:55:d9:62:c6:55:3b:54:45:cb:5a:
                    c8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D4:B1:67:41:AF:A0:B9:66:88:E2:2E:9F:45:D5:27:B9:87:BB:99
            X509v3 Authority Key Identifier:
                keyid:62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:33:29:6c:85:3b:7d:f5:1c:c4:63:6a:f1:43:4c:40:f0:55:
         2f:d9:5e:a2:4b:ba:68:d2:b4:7f:12:51:45:31:26:15:9c:ab:
         83:3a:53:ca:c4:9f:81:10:d1:af:b6:43:05:c3:47:85:e6:74:
         42:87:75:6d:e2:77:a8:a1:ac:9d:db:93:be:f4:6b:ac:6b:30:
         9e:4c:e7:12:2c:5f:15:70:b4:23:cf:84:55:fb:66:63:39:e7:
         f1:75:fd:71:c6:01:97:77:9c:14:ce:fc:82:c7:97:5c:1a:84:
         e1:fb:49:8d:0b:a0:5a:36:59:82:ff:9b:c3:67:58:a9:d7:56:
         55:8b:b5:ba:f0:cb:ac:11:6a:a2:af:ec:be:46:0d:23:ba:7b:
         e3:36:a9:a5:53:d3:e3:db:1b:d5:a5:84:57:53:46:73:a6:1e:
         c4:a2:cf:f5:90:0c:39:f8:4e:bc:ff:f6:48:68:07:f2:e4:f8:
         4a:08:05:9a:cb:a5:20:2f:27:9a:a3:3c:81:08:8e:68:cc:86:
         d4:9b:05:6a:de:67:ca:c0:24:ae:58:44:e1:48:3c:31:9c:9f:
         60:40:b2:62:20:5a:54:8a:ae:3d:9e:b7:1b:25:f1:ae:17:be:
         43:8b:6d:30:7d:5d:fb:e8:47:b1:c1:e8:1d:7d:2b:c4:aa:89:
         52:fe:75:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:40:25 2026 by rpki-client