Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
File:                     yda1mpPjJAg_vKQjfkfp9evzcas.mft (raw, json)
Hash identifier:          YnLatE3zbKvjyjK2op3Y6tQrf1kQTCIuHJKMWJlnEU0=
Subject key identifier:   34:06:49:41:AB:89:B8:D4:0E:4B:7E:16:73:30:2F:30:CA:F6:1D:D7
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Certificate issuer:       /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial:       019EE36771E984863B7F4F1CCD9880C9AD70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
Manifest number:          1993
Signing time:             Sat 20 Jun 2026 05:01:07 +0000
Manifest this update:     Sat 20 Jun 2026 05:01:07 +0000
Manifest next update:     Sun 21 Jun 2026 05:01:07 +0000
Files and hashes:         1: FBCGTG64vLpl2gDVPvanQJATgB8.roa (hash: axM4/0Pr+RIyWyZE+LhS3ebRSN92aTrPRUXzdJeL/U0=)
                          2: Gqg2-sCdeAnxIxjnCqOjFkh4pyY.roa (hash: fXnPA1IUb+WwCmX8j2rz10mUAQFbNKLaEL207SLATEk=)
                          3: Xh_fZpcuD-kXAKnMm-XCgP1QCcM.roa (hash: E/KI5295u2flUvuXh7zmO0XDhUT77Ekqi6kGos1unAA=)
                          4: cdMwDxOwsmOgnXKtKxgQS9EwG5s.roa (hash: 9KAJy5B5/gYF9JmztZmHa3vCIGRv+J2QDYi/xV8zpFc=)
                          5: w9cLMtPbCYYrwoKERp06IPmC2bE.roa (hash: ey9n1gs4fwmE4LkooDwQ9cZLvMTfaqnyxO7TGDUAj68=)
                          6: wywpQzax_4ZtKoz9uAZxDjtcPmw.roa (hash: Q0w8drpmsGxodbGwxBVJJ2K2KkXwUZiHuoYb5PWlT/8=)
                          7: yda1mpPjJAg_vKQjfkfp9evzcas.crl (hash: 54YIXYC8rxRWowEH7WxdlHnThj+fwTULsROc6O0Qtg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e3:67:71:e9:84:86:3b:7f:4f:1c:cd:98:80:c9:ad:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
        Validity
            Not Before: Jun 20 05:01:07 2026 GMT
            Not After : Jun 21 05:01:07 2026 GMT
        Subject: CN=34064941ab89b8d40e4b7e1673302f30caf61dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9b:ef:83:57:09:e1:bc:de:49:36:b9:fc:93:
                    67:e0:71:d2:cd:27:41:e3:77:07:77:9d:71:6b:2d:
                    f3:93:88:20:6c:87:58:9e:01:0f:1e:5e:df:05:08:
                    7b:63:1e:f3:93:72:09:06:f6:f5:95:c3:b1:13:ce:
                    b6:f1:49:a3:b1:f5:e5:32:ad:de:35:e8:a6:a9:29:
                    df:3c:c2:38:69:cd:b5:20:ea:de:11:4f:ac:94:c7:
                    ae:e4:3d:7e:a6:8f:dd:f1:aa:a0:bc:98:2c:01:aa:
                    a4:fa:d1:83:30:4e:80:db:8f:86:ac:6c:53:6d:0c:
                    5b:77:58:f2:32:4f:ca:ab:67:46:58:df:3a:fe:ba:
                    ff:f0:11:9e:e3:68:76:16:cf:24:85:a2:a4:0d:5c:
                    25:19:d6:53:a3:65:39:34:e1:c3:3e:4d:ec:07:fa:
                    36:d5:2a:72:02:21:74:9e:c2:89:9b:62:fb:52:16:
                    fc:37:25:91:c0:63:b2:97:32:60:eb:95:61:44:40:
                    f1:60:7f:81:c1:db:88:61:45:4f:41:d1:ff:42:37:
                    9c:d6:0f:d5:a1:70:12:fa:df:55:18:88:3d:1f:aa:
                    11:78:ee:1c:d7:35:62:b7:c7:ee:28:c1:ce:e9:52:
                    c7:1b:70:35:ec:31:3a:e7:a3:d9:7f:29:04:72:d2:
                    ac:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:06:49:41:AB:89:B8:D4:0E:4B:7E:16:73:30:2F:30:CA:F6:1D:D7
            X509v3 Authority Key Identifier:
                keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c5:a4:fc:28:24:d9:60:27:52:b5:11:62:be:58:73:05:b0:
         b0:4b:19:01:ce:5d:ff:65:cf:05:1c:96:de:7d:82:e8:70:a3:
         b8:68:2c:38:77:1e:e9:93:f3:78:05:31:63:de:c4:ef:2d:c4:
         99:f9:f9:88:a2:20:7d:fb:d9:b1:23:d5:a9:5d:fd:96:6b:37:
         03:39:2f:8b:8e:bc:84:cb:f8:57:46:cc:5a:f0:2c:78:1b:a7:
         5d:f0:6e:69:76:70:c1:14:b0:29:49:28:1f:d3:7a:75:27:28:
         b5:f0:62:9b:84:ec:e3:c4:b3:f2:51:11:51:0c:d4:40:eb:29:
         d9:16:7e:44:68:13:a6:6b:ce:06:07:3f:0f:08:44:6e:1c:d5:
         4c:37:56:21:a0:81:9d:26:e3:b8:70:1b:5d:b4:4d:93:11:8c:
         b2:60:46:51:08:29:be:85:cc:fb:93:36:48:8e:43:f5:5a:6f:
         59:59:f0:69:4f:4a:b3:c3:fa:a1:84:23:47:ab:6f:ce:14:bb:
         b2:91:86:da:75:0d:f8:36:cd:94:00:5d:62:38:8e:dc:c7:3c:
         62:a8:f3:3f:a0:c5:e4:54:32:ba:4f:ae:25:64:ce:70:38:0a:
         ab:4b:c8:6d:8b:78:ca:bc:a8:9d:32:f6:e6:c6:39:f3:8c:ab:
         69:20:57:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 12:34:03 2026 by rpki-client