Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
File:                     YRuftFY550kvKzYx9kD2q5r7YpA.mft (raw, json)
Hash identifier:          VcZc2TQNvuI+fagUNgzp/UL3FlS8DQ8LfPFP8kuaA94=
Subject key identifier:   C1:F3:17:F1:3B:04:83:51:77:24:53:46:02:7A:F7:6F:AD:05:9F:D9
Authority key identifier: 61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
Certificate issuer:       /CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Certificate serial:       019EB5E93ACA8703EC5923816D66341AFB37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
Manifest number:          03F7
Signing time:             Thu 11 Jun 2026 09:00:21 +0000
Manifest this update:     Thu 11 Jun 2026 09:00:21 +0000
Manifest next update:     Fri 12 Jun 2026 09:00:21 +0000
Files and hashes:         1: 3-z9WVuuMK0MQ-O8ytcjQmUulmQ.roa (hash: QlGcIApQxI3USCeOW3H47w4RX3p+KD+avqAifqggosI=)
                          2: YRuftFY550kvKzYx9kD2q5r7YpA.crl (hash: ZiCj2urmFIRirMF1EtVbLSGlo21kaMOFD6L576VfAgE=)
                          3: eYKGIFqmXxArxKrm4dHPlBfdDkQ.roa (hash: OjAQmRNCdlZ/ho0O0hjfQYZhYcPqc7W3tUBnTWwRO0M=)
                          4: i8JTjG8kAd1c1HqV5LoJhukgMAE.roa (hash: u27SpMwjFzAC7wQTCgUg0cr2wavmv6lyaTijyCZtCvI=)
                          5: uKdnnQsot7mlRO752cNll6GISRQ.roa (hash: VbgboVS4OB0UdrRSp+d5djlaTMUsF7uI2qR/6y5b4JE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 09:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b5:e9:3a:ca:87:03:ec:59:23:81:6d:66:34:1a:fb:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
        Validity
            Not Before: Jun 11 09:00:21 2026 GMT
            Not After : Jun 12 09:00:21 2026 GMT
        Subject: CN=c1f317f13b04835177245346027af76fad059fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:63:cb:bb:17:79:e1:67:73:53:48:dd:19:06:
                    67:8f:b2:c7:13:67:10:5d:4b:2c:9c:44:34:06:e0:
                    dc:7f:43:78:62:0a:6b:00:23:97:a1:3d:03:65:77:
                    ad:1a:b3:6f:d7:39:45:7d:c3:9c:57:d7:81:59:02:
                    a6:2b:2f:2b:1c:bb:87:08:07:a8:51:ad:92:f7:62:
                    5e:ab:b6:83:a6:9f:18:dc:c7:e8:34:aa:76:07:4b:
                    bf:02:7a:19:ff:08:f9:8a:ed:dd:a0:85:9a:98:fd:
                    07:28:ed:bf:00:41:81:27:59:64:04:ed:61:f2:0a:
                    e9:33:ae:bb:fb:69:23:24:a1:1d:b3:75:3f:b5:2d:
                    90:9e:af:83:28:17:eb:55:fe:84:ab:1c:38:01:53:
                    9a:c6:24:b2:be:1a:db:94:df:d2:81:1d:aa:1e:09:
                    89:f1:86:5d:ad:1b:c1:3a:69:ac:77:40:8e:dd:1c:
                    58:0b:cc:28:d5:bc:13:3c:99:00:2e:a6:58:d8:87:
                    e6:5e:9f:90:38:a4:f1:7d:9a:c0:89:19:1f:ad:8b:
                    03:56:3a:86:fc:6d:b4:0d:ed:81:b7:88:71:df:94:
                    70:c6:98:4f:75:02:1d:6d:91:31:49:30:5d:4e:67:
                    4a:9d:15:3e:8e:1b:27:49:d4:42:88:a1:70:54:6a:
                    78:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F3:17:F1:3B:04:83:51:77:24:53:46:02:7A:F7:6F:AD:05:9F:D9
            X509v3 Authority Key Identifier:
                keyid:61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:1e:1d:9c:1c:1f:83:96:63:3f:5c:4c:76:60:92:b1:98:4f:
         e9:89:ab:42:f8:07:3e:39:ab:d7:8e:a9:c3:6f:66:00:fd:f8:
         1e:9f:f5:24:d6:03:f7:e3:80:c1:75:e2:72:c0:bb:98:ee:ee:
         d6:6e:f0:dd:f7:43:bd:76:5a:d5:ba:21:f3:91:cd:69:fe:53:
         39:aa:3c:59:22:a4:7f:a3:2e:51:02:2c:f2:b3:b3:1b:b6:f9:
         3e:29:71:ac:3c:01:23:85:dc:56:14:fc:6e:5f:31:ad:e4:32:
         8d:2b:8a:77:5d:7b:34:dd:98:e4:0a:f3:83:2a:02:1a:9d:62:
         51:bd:64:c1:9f:be:d0:79:b7:e3:b6:d2:3f:0f:85:84:d8:87:
         5b:e0:f1:fc:0c:c1:89:b6:32:a5:3a:8b:e5:b8:8c:f1:0a:f3:
         2c:b4:1e:da:09:36:b7:24:c8:c9:04:66:0b:3c:38:f3:2f:86:
         9a:4a:54:bd:e7:ed:68:33:36:dd:4f:4b:c4:e8:b1:1d:6d:f5:
         dd:21:d3:5a:59:31:af:01:16:7d:52:3d:56:15:c7:81:99:dc:
         d6:11:ba:cf:0c:b5:6d:e3:22:83:be:9a:ff:0a:06:3b:c3:0e:
         82:ce:cc:59:36:73:10:99:d3:f3:6c:c9:fd:8d:5f:7b:3d:9e:
         6f:c4:b2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:49 2026 by rpki-client