Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.mft
File:                     YOPZchUzu192hceOyY34FPrV1nw.mft (raw, json)
Hash identifier:          zgJP/ZLjEHhm+15Y4ZQdKDJ8r9ZB7gvSFeHHe2ZCAiw=
Subject key identifier:   7C:0C:4C:C6:2F:B5:FC:AD:F9:A5:14:C5:52:9E:61:9A:08:E7:05:5F
Authority key identifier: 60:E3:D9:72:15:33:BB:5F:76:85:C7:8E:C9:8D:F8:14:FA:D5:D6:7C
Certificate issuer:       /CN=60e3d9721533bb5f7685c78ec98df814fad5d67c
Certificate serial:       019EB76A5FBCADD9BC8BBAE88C7F4C477AB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOPZchUzu192hceOyY34FPrV1nw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.mft
Manifest number:          85
Signing time:             Thu 11 Jun 2026 16:01:02 +0000
Manifest this update:     Thu 11 Jun 2026 16:01:02 +0000
Manifest next update:     Fri 12 Jun 2026 16:01:02 +0000
Files and hashes:         1: YOPZchUzu192hceOyY34FPrV1nw.crl (hash: JQDzUVAzDlzYTg5hpEZX6mb+ehjYtn/rTPW2vkX/KSg=)
                          2: cUpkjaDP4LJticYxAdxvejamI7s.roa (hash: NYs65YNfWkOoclb0FiT35oPaVvQTLiTbCeZBVy6gqu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOPZchUzu192hceOyY34FPrV1nw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 16:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:6a:5f:bc:ad:d9:bc:8b:ba:e8:8c:7f:4c:47:7a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60e3d9721533bb5f7685c78ec98df814fad5d67c
        Validity
            Not Before: Jun 11 16:01:02 2026 GMT
            Not After : Jun 12 16:01:02 2026 GMT
        Subject: CN=7c0c4cc62fb5fcadf9a514c5529e619a08e7055f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:9f:de:19:f9:de:f7:27:e5:13:12:ba:73:
                    01:85:3f:b3:56:77:8e:9d:6b:80:03:38:f0:4f:7f:
                    a6:96:da:b3:73:34:b2:58:c1:a0:09:3c:e0:91:9a:
                    06:8c:ca:ca:9b:d9:f2:3e:80:36:0b:09:c0:32:7d:
                    26:58:e6:94:98:91:43:38:33:8e:64:8d:9b:05:d5:
                    64:bc:fa:28:81:d7:63:1c:42:fe:a1:ab:42:42:03:
                    bd:82:d0:0d:3b:22:d8:7f:7b:d5:7f:3e:d6:7f:a2:
                    f7:b6:55:9e:2a:a6:53:7d:68:f3:76:3d:72:6c:7b:
                    59:0b:74:b9:a3:fc:c2:a3:d4:db:a4:a3:5c:f6:0e:
                    75:bc:4f:7d:93:6d:28:f7:2f:b5:f8:4c:50:c6:ea:
                    84:41:ea:3c:56:5f:30:e0:43:8d:7f:d1:0a:a1:22:
                    4a:ca:47:57:db:08:a8:06:6f:fe:cf:d5:cf:e3:29:
                    c3:42:7a:b7:03:7f:f4:1a:2b:e3:27:66:cb:0d:23:
                    07:2c:78:b6:4f:54:49:dc:0f:92:a0:d0:02:5f:9b:
                    9c:0e:39:bb:ed:7b:74:5b:e4:48:bd:ee:a4:8a:6b:
                    fa:15:ce:30:ed:ff:da:34:63:f7:29:cd:c5:04:b6:
                    50:8c:54:db:a4:e3:48:ea:47:76:e1:51:46:4d:d5:
                    02:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0C:4C:C6:2F:B5:FC:AD:F9:A5:14:C5:52:9E:61:9A:08:E7:05:5F
            X509v3 Authority Key Identifier:
                keyid:60:E3:D9:72:15:33:BB:5F:76:85:C7:8E:C9:8D:F8:14:FA:D5:D6:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOPZchUzu192hceOyY34FPrV1nw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ea:11:e5:c7:8e:d3:da:f7:b0:40:f8:1a:4d:b9:0a:aa:95:
         a4:0b:64:87:e7:57:6e:24:85:02:3b:df:4e:1d:3d:92:9a:8e:
         9b:32:ba:e9:57:fc:ba:99:0b:98:39:e1:42:3a:c0:51:b9:0f:
         1c:63:fd:18:f2:94:d8:a1:d0:6a:b4:29:fe:37:5b:a9:63:9a:
         f6:78:33:72:2d:66:f8:20:13:d7:5c:c6:a3:c9:e6:f9:5a:52:
         a3:1c:4e:03:96:24:65:ab:2c:38:f4:59:57:aa:31:3c:da:dd:
         df:da:de:a1:b8:7f:4c:9d:98:83:77:d6:ed:41:8c:84:da:e3:
         ce:c1:29:8a:fd:3f:3e:97:3e:a2:5c:89:3a:7e:f9:ca:c8:aa:
         15:35:ec:42:a0:cf:f9:17:d8:42:cf:d3:ad:10:fc:7c:fb:a5:
         a6:c7:d0:31:76:64:ed:d7:38:25:85:ff:f4:e1:49:a8:69:b2:
         f7:7b:b5:4e:d4:6e:3b:64:5d:95:f7:aa:9f:c9:43:e1:8d:1e:
         8f:c9:d2:c2:e5:20:d5:08:20:9a:9a:34:8d:7f:eb:a2:85:ea:
         6f:91:21:8f:03:e3:9d:88:01:75:a3:35:d4:e4:46:93:e0:3e:
         7f:a5:11:85:7d:b5:4e:02:f0:eb:ba:47:50:f4:74:e4:ab:1a:
         d0:83:5f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:40:42 2026 by rpki-client