Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
File:                     yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft (raw, json)
Hash identifier:          u0Qqn50frlXCpz9BsSiuWceHn9uw+0CiZu1XIVB2ynI=
Subject key identifier:   43:2D:BB:BD:43:EF:9E:51:DD:36:FB:F5:3D:EF:1A:A6:77:A3:EB:75
Authority key identifier: C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
Certificate issuer:       /CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Certificate serial:       019E9D3C5E4DAD2B3F6E976C385AEC3E2404
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
Manifest number:          15DD
Signing time:             Sat 06 Jun 2026 14:00:39 +0000
Manifest this update:     Sat 06 Jun 2026 14:00:39 +0000
Manifest next update:     Sun 07 Jun 2026 14:00:39 +0000
Files and hashes:         1: YjABWXq1K-e_wEund0ue5nxCxOU.roa (hash: PI1L0CXgsAmafCm4unnTqfAaCBg3v/MEpLRsMdPwg9s=)
                          2: yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl (hash: fBC7elrIn0FaPlw/asS08gJePPGeodXXSiqFlw9N7OU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9d:3c:5e:4d:ad:2b:3f:6e:97:6c:38:5a:ec:3e:24:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
        Validity
            Not Before: Jun  6 14:00:39 2026 GMT
            Not After : Jun  7 14:00:39 2026 GMT
        Subject: CN=432dbbbd43ef9e51dd36fbf53def1aa677a3eb75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:09:27:c2:72:ba:5c:42:85:3d:6f:e7:6e:5e:
                    69:d8:73:a1:37:b5:5f:09:59:ce:b5:c7:82:89:fd:
                    8e:25:22:52:cd:4f:00:e2:de:cc:22:26:8f:56:68:
                    a0:8c:fd:7f:76:c3:1d:01:8b:da:ec:51:84:60:81:
                    20:8e:0a:0f:dd:f0:9d:17:0a:42:a3:64:a9:a5:5c:
                    2e:17:11:e3:b3:e7:e4:17:b9:ac:31:c1:06:2b:18:
                    61:0d:9f:e1:1e:97:72:cb:f9:be:9a:52:c8:4f:ce:
                    d1:f0:c4:f8:64:32:7d:28:bb:1f:e5:b1:98:b4:54:
                    81:5f:f3:b1:cf:8a:e8:5e:af:02:fd:ba:9f:d6:9e:
                    04:a9:ce:e0:2d:c6:00:5c:51:f0:d9:18:76:3c:d0:
                    8a:c2:46:64:d3:de:71:0e:fc:33:82:88:4f:ee:5e:
                    af:2f:16:76:17:24:88:77:0b:3c:e1:74:30:fb:94:
                    d6:42:d9:66:a9:2a:6d:3c:16:e0:56:24:4f:65:31:
                    f7:6b:45:cf:74:84:b5:7c:a7:12:dc:4f:37:69:e0:
                    2d:8b:c9:df:75:2e:e5:4a:1f:69:57:92:3a:a5:ad:
                    06:b3:28:6b:ef:b4:66:45:c4:10:1b:ef:53:f0:1e:
                    fd:b8:b3:0f:82:69:e8:c3:89:ec:c6:95:4b:f5:d9:
                    e6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2D:BB:BD:43:EF:9E:51:DD:36:FB:F5:3D:EF:1A:A6:77:A3:EB:75
            X509v3 Authority Key Identifier:
                keyid:C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:8e:7e:94:f9:b9:cb:0f:b7:1f:3f:f7:aa:6f:3d:ab:04:f7:
         e9:93:d9:b2:a0:36:63:c7:3d:71:b2:ac:e4:f8:b9:a5:fa:da:
         6e:15:b4:19:95:c3:79:21:e9:9d:1e:16:3f:53:49:ba:be:45:
         3a:b9:de:a2:64:9b:fd:1b:8c:1f:d5:d0:f8:06:bb:bc:4d:d0:
         0e:7a:58:54:41:26:dd:de:58:21:4c:44:87:a1:62:05:a2:b5:
         ad:9d:2b:05:e0:1d:b3:93:5d:f1:cd:ae:96:c0:d9:3a:78:64:
         56:ce:2f:ea:b0:c3:55:c3:af:a1:24:2e:a1:93:34:c9:42:da:
         d4:53:bf:6a:47:73:4f:36:d9:4c:d9:6f:d0:19:e9:0d:91:95:
         1c:ba:4b:eb:57:4c:c9:e4:94:e9:f7:2f:ea:4a:3a:5b:e2:9b:
         32:5b:b7:dc:ef:4f:c9:0a:67:fa:a8:15:d4:8f:ef:bb:a0:22:
         7a:85:2a:ef:31:37:ee:c5:e0:c5:ff:0b:c7:ca:2a:62:11:5f:
         fc:d1:46:a6:3e:ae:9c:97:4b:b6:f8:1e:2c:39:67:39:df:4a:
         da:58:61:3b:f7:27:bc:12:3e:a9:f2:bd:ec:b0:9d:d9:de:80:
         5b:b2:99:14:26:90:06:49:1c:84:32:c2:ad:14:05:df:e2:02:
         4d:74:f7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 20:36:33 2026 by rpki-client