Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
File:                     yuzkHLwsMGJu8qKNGDny1sR1fz8.mft (raw, json)
Hash identifier:          r6LkDORWvk5EZrpP02+Un83rNyi3WcvpHEwlKmJh+i0=
Subject key identifier:   14:0F:E3:32:ED:99:DE:38:9E:A7:69:66:83:6A:96:A9:47:E9:F2:3B
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Certificate issuer:       /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial:       019EB9FCE9BBE621E15F26A98A6C92D5DE2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
Manifest number:          1963
Signing time:             Fri 12 Jun 2026 04:00:20 +0000
Manifest this update:     Fri 12 Jun 2026 04:00:20 +0000
Manifest next update:     Sat 13 Jun 2026 04:00:20 +0000
Files and hashes:         1: C0mI0v3AUYRPG8yTqF1QgFx7xU0.roa (hash: NZkJ/jcOZzqhSAxEfG1FbsPeSS23tdRhxk92nPlXNFM=)
                          2: JTcKp_-HzhWS07Rh-pfbwQal9BE.roa (hash: K+FwMVfzlkVxN/6tFJRIps6Jd4mzYW6vjm8IFKOQH8g=)
                          3: U-ONT3QFPmL6bgDFPQrkc4UkItw.roa (hash: jHrm5ubltObAwz/kEr5+twdpGR7UoJHw+XLZONVGw4I=)
                          4: fIbLyWDcpEVajMwX0IRFmbRboBM.roa (hash: qO1PWw5QDsqq+kEFxL2W+jiNK15/wTUl2EHHtmkWM64=)
                          5: nbAQ4BPt9n4nKfMqMproTXSCv8M.roa (hash: XXF2LQVa1HbRIXhKxBQckeiuDt9Ut4eLmMQeCOw1aKI=)
                          6: qcBd1Q5bVW4seHpjXwWwpkJfYnQ.roa (hash: dRY1xnWd/ZI7zspxffS1quMRwGNyT+a2Sy2Dp6pe8Ys=)
                          7: rZHZ_k5hgir55AATjETSpEWsH80.roa (hash: 8tYYoFYaWJCj2Pb7rbLdOHuTB+Gfcdd0okrBmCgEOAE=)
                          8: yuzkHLwsMGJu8qKNGDny1sR1fz8.crl (hash: v6zqDcvyKUpOGhYLM+ctBZ5ND1XbpY97U2Cx6CnKSjs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:fc:e9:bb:e6:21:e1:5f:26:a9:8a:6c:92:d5:de:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
        Validity
            Not Before: Jun 12 04:00:20 2026 GMT
            Not After : Jun 13 04:00:20 2026 GMT
        Subject: CN=140fe332ed99de389ea76966836a96a947e9f23b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:78:9a:a2:59:ae:07:4a:37:ed:6d:00:22:4c:
                    67:62:a6:d7:6a:7d:2c:b1:54:8d:c4:69:bb:41:02:
                    83:db:cc:41:26:b3:e4:03:55:ad:e2:e9:67:ff:46:
                    02:40:ed:94:5d:d0:0d:ab:86:cd:f5:14:47:31:a3:
                    de:c3:33:5b:f7:99:8a:6d:f1:78:83:01:75:34:a1:
                    93:9b:4b:55:f5:2c:63:ba:d8:ab:30:3a:4f:3f:fc:
                    11:e8:14:be:56:e6:d9:26:af:c4:dd:2d:c5:74:43:
                    aa:f0:43:46:33:c9:dd:88:e6:ff:95:51:21:6c:20:
                    c1:1d:60:d4:ba:3a:7a:d4:ba:ac:fc:1f:9b:12:51:
                    ec:37:ef:fa:f1:b9:7e:f5:26:6a:7b:66:4e:c1:06:
                    c6:ed:a8:00:b1:46:65:2e:39:7d:5b:8d:df:11:9d:
                    f2:0c:e6:87:77:5a:6f:e8:37:94:c3:7b:a2:f6:14:
                    55:f7:28:b3:af:f0:2d:b0:24:a8:2a:4a:be:a5:4a:
                    e5:53:2d:46:5f:2f:c3:28:c8:02:81:3c:b8:9e:b2:
                    77:6f:8c:50:7b:12:bb:16:ea:db:df:68:9d:23:7c:
                    fd:a3:2e:ca:09:c9:d1:1c:d4:30:ec:dc:6d:f6:04:
                    72:e7:a7:c8:ad:5f:ae:33:11:6d:68:81:a8:57:5d:
                    bb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0F:E3:32:ED:99:DE:38:9E:A7:69:66:83:6A:96:A9:47:E9:F2:3B
            X509v3 Authority Key Identifier:
                keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a5:09:17:d2:48:7a:da:cc:1a:fc:f7:d3:41:cc:e6:87:f8:
         00:0a:f6:63:92:dd:5b:30:b9:f6:18:ad:c7:17:10:e7:01:10:
         b2:8f:31:5c:72:45:4b:db:47:97:60:b0:57:b9:9a:18:20:a1:
         63:9a:e2:10:ac:8a:ec:00:fd:3e:32:e0:3e:87:42:8e:c8:3a:
         38:c6:8c:b7:d1:6b:80:38:6e:1a:5f:20:45:07:77:20:43:54:
         d7:bf:ae:6f:84:fd:6d:c7:6e:ef:ee:8a:17:18:0e:13:99:35:
         88:3f:c6:a2:86:59:30:51:78:6a:c1:42:a2:94:10:63:1e:0d:
         18:0e:31:f1:bc:b2:28:ec:b4:96:ba:67:86:0f:66:ae:9b:59:
         61:0a:76:a4:56:6c:27:30:4b:8c:f2:53:07:58:52:37:12:f4:
         c5:ce:51:b5:ad:87:95:e8:f8:0e:14:14:b2:d3:c0:de:83:b7:
         ce:63:7e:38:4e:cf:b3:ac:b7:19:b5:c9:52:3f:99:bd:90:63:
         a8:be:a1:24:ae:71:2b:b7:82:9b:c3:1f:c9:e5:c5:e8:99:ce:
         cf:9b:c6:4e:91:71:37:39:39:3d:7f:d3:68:4b:7f:cf:ed:eb:
         e7:88:15:68:e9:5d:25:71:65:4e:bc:85:87:1a:60:d9:1a:33:
         5c:df:dd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:54:31 2026 by rpki-client