Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
File:                     yeG79grg631AB2JxhcXxRyP_864.mft (raw, json)
Hash identifier:          q2rzEA4LV749S4M4l2cyy5RGIKrsGuQXpk3WZgwNU0o=
Subject key identifier:   93:FC:17:C6:C2:CD:B7:A6:A1:7D:F7:1E:A3:F5:10:16:F4:21:24:7A
Authority key identifier: C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE
Certificate issuer:       /CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae
Certificate serial:       019F1AFA6E640983FE814AA3FC809DB96F52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
Manifest number:          04CD
Signing time:             Wed 01 Jul 2026 00:00:47 +0000
Manifest this update:     Wed 01 Jul 2026 00:00:47 +0000
Manifest next update:     Thu 02 Jul 2026 00:00:47 +0000
Files and hashes:         1: T-09y-oUF-oVxc0rII_IKxv-tqo.roa (hash: mtxY/euYWXc5W24bVNJKERPEbeVn8RYrIiTpc8jewmU=)
                          2: yeG79grg631AB2JxhcXxRyP_864.crl (hash: zOZ8TMV11USmRCSH50FCEbnpkCGnQMyE3D2fjxbRMbM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 20:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:fa:6e:64:09:83:fe:81:4a:a3:fc:80:9d:b9:6f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae
        Validity
            Not Before: Jul  1 00:00:47 2026 GMT
            Not After : Jul  2 00:00:47 2026 GMT
        Subject: CN=93fc17c6c2cdb7a6a17df71ea3f51016f421247a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e4:50:99:09:34:5e:0a:64:0d:09:38:fe:23:
                    e4:c6:b7:d4:c0:56:db:2e:b5:31:0c:46:6e:76:dd:
                    93:08:68:71:14:84:73:d6:2e:b5:48:b5:07:e3:67:
                    5a:3a:8f:12:20:45:da:cd:25:4c:9f:e3:cb:58:2d:
                    40:df:cb:2f:21:e0:05:08:aa:89:16:cf:2b:1d:78:
                    ba:3c:25:d0:37:09:bf:a8:10:79:ea:e6:27:96:3a:
                    7c:0f:86:59:42:2e:8d:c7:3c:d2:ee:40:18:fb:cb:
                    fc:b0:8c:0c:dd:49:cd:b7:f8:44:e3:d6:80:5f:4a:
                    a3:d5:2f:a3:b7:ed:1a:fb:ef:fb:3f:16:00:1d:7a:
                    cd:ce:2f:c8:30:80:3c:44:02:c8:f7:d4:e1:6a:b9:
                    fb:66:80:aa:01:ed:44:22:82:eb:a3:bd:20:b2:ca:
                    4d:f3:78:19:0b:80:64:d0:0f:e6:a9:53:d2:34:f4:
                    8d:42:18:af:6d:d1:eb:7c:3f:62:b3:57:3d:c8:51:
                    f4:0c:e4:08:81:d5:5b:f8:14:33:13:92:0a:3c:05:
                    03:6a:a4:76:9e:58:63:d5:5d:b5:a5:b4:ef:df:64:
                    c3:d5:43:d5:56:cc:58:b6:12:ba:91:b3:d9:1d:6c:
                    b7:03:9e:c8:26:b4:b5:10:71:fd:bb:2b:a9:b1:1a:
                    8b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FC:17:C6:C2:CD:B7:A6:A1:7D:F7:1E:A3:F5:10:16:F4:21:24:7A
            X509v3 Authority Key Identifier:
                keyid:C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:e8:87:4f:5b:48:80:3d:34:92:d2:c0:33:1c:4b:10:d8:22:
         60:e1:48:57:fb:97:b7:b9:d8:27:52:82:13:90:27:3b:78:19:
         bc:71:54:ff:b9:c3:9c:04:a3:3a:2b:a1:c9:8e:59:fd:a9:ba:
         bd:d8:ee:9b:f1:2a:de:b5:4a:2f:35:0e:db:43:bd:15:07:88:
         f8:3d:4b:00:60:58:62:7a:4b:6b:3d:73:4e:1d:98:5d:ca:94:
         9f:51:67:e7:c1:31:50:c8:1b:ae:df:af:5c:96:b7:c4:0a:b5:
         d1:1c:77:1d:84:1d:a8:ce:46:70:80:77:42:e6:27:db:2c:76:
         38:f4:bd:3a:4d:ed:52:80:df:34:fd:a6:3e:3a:b0:cc:0c:67:
         3e:b5:7e:be:7e:79:2d:e8:6f:f6:61:73:18:59:b3:4c:62:92:
         2b:c2:86:a2:4c:71:0a:d1:c1:07:40:8e:a8:7a:b0:42:1a:36:
         9d:1a:8d:65:58:31:63:69:c0:63:31:62:1a:8a:20:2f:40:a2:
         f2:8b:07:f5:ce:e6:d6:74:a6:e0:69:26:58:dd:be:fa:c4:36:
         16:dc:71:ad:be:a9:52:a0:c6:bb:dc:f1:83:e5:2f:0d:8b:73:
         85:c8:c5:f4:f0:7d:ca:c9:84:b6:46:80:a4:f8:d2:ef:6e:3a:
         b4:c3:0f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:18:52 2026 by rpki-client