Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft
File:                     Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft (raw, json)
Hash identifier:          EDpK8ajjzqktYyGpns6KHHVQyZy6XUAIGcYgd7Wxa6I=
Subject key identifier:   FC:23:3D:1F:FB:1D:64:92:D4:9D:69:BF:6F:4B:16:74:01:9B:AF:1C
Authority key identifier: 62:EF:97:75:50:FA:7C:81:3D:EE:5C:1B:90:E9:51:1B:9C:68:DD:0A
Certificate issuer:       /CN=62ef977550fa7c813dee5c1b90e9511b9c68dd0a
Certificate serial:       019E3306234888CCA6D7AD5689D7DE82241D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft
Manifest number:          0C54
Signing time:             Sat 16 May 2026 23:01:40 +0000
Manifest this update:     Sat 16 May 2026 23:01:40 +0000
Manifest next update:     Sun 17 May 2026 23:01:40 +0000
Files and hashes:         1: Yu-XdVD6fIE97lwbkOlRG5xo3Qo.crl (hash: d4UGQopvGQ2+suw8U8q7mpDalmQKuyDaKAPfanmWUTk=)
                          2: rt1jmEWcts8v82w_w-CIFAF6XNA.roa (hash: 2a8J88cRjXc2S0NbaaMIdvXvo0cjbAPhTxZH/dueltY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:33:06:23:48:88:cc:a6:d7:ad:56:89:d7:de:82:24:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62ef977550fa7c813dee5c1b90e9511b9c68dd0a
        Validity
            Not Before: May 16 23:01:40 2026 GMT
            Not After : May 17 23:01:40 2026 GMT
        Subject: CN=fc233d1ffb1d6492d49d69bf6f4b1674019baf1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b2:e5:cc:77:69:36:46:92:39:74:c2:fc:e7:
                    05:14:f2:c6:c5:9e:3e:15:25:d2:fe:99:18:da:37:
                    6a:5e:6d:82:3b:8b:2d:79:0e:62:70:a9:c4:9d:5d:
                    6b:59:4f:c5:08:1f:5c:5b:8a:f8:9a:e0:cb:3c:1c:
                    4d:08:dc:63:ff:f8:0e:71:8d:f1:4c:99:80:a3:26:
                    65:2f:a5:26:a6:69:59:90:01:68:b0:8a:cd:b2:5f:
                    df:3b:f8:1a:d9:8d:4d:21:64:44:2e:9c:13:e0:63:
                    28:c3:3a:c9:c6:04:88:fe:3f:05:6a:52:24:36:45:
                    0d:96:ed:6e:a6:02:ae:66:20:e2:b4:69:c4:d6:91:
                    c3:0f:d3:d5:4d:82:2b:f6:fc:44:7d:54:57:2d:78:
                    8e:8e:ad:fa:5e:f8:95:82:1a:be:21:de:ca:61:2c:
                    88:c0:1d:a0:74:05:bb:e6:c8:b4:a2:b3:f8:0c:47:
                    14:73:9b:79:16:0e:2b:e0:be:0f:77:2a:c4:1e:06:
                    7c:11:12:e7:6d:68:cc:13:f6:f6:c1:1b:34:d3:4d:
                    c6:74:5f:77:78:9e:25:fe:24:61:cf:b9:2b:40:57:
                    f5:66:a6:ce:21:36:ad:b6:7a:2e:a2:46:a4:05:3b:
                    f6:59:5a:9a:0e:7b:bf:77:ed:0c:fa:5a:a5:8b:84:
                    e0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:23:3D:1F:FB:1D:64:92:D4:9D:69:BF:6F:4B:16:74:01:9B:AF:1C
            X509v3 Authority Key Identifier:
                keyid:62:EF:97:75:50:FA:7C:81:3D:EE:5C:1B:90:E9:51:1B:9C:68:DD:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:66:86:fa:89:be:03:6c:95:cc:50:24:37:9b:ed:db:fc:f5:
         56:49:85:57:0a:7b:a6:e7:f5:1c:18:eb:87:eb:fc:51:21:69:
         f7:c0:69:91:99:28:bb:ab:3c:4a:80:a8:c6:71:85:da:d3:32:
         fe:fe:f8:8a:11:e2:31:e4:dc:a6:54:8c:53:21:78:ac:82:19:
         86:d9:ae:7b:49:10:2c:00:1e:42:e2:2e:ba:8c:9e:26:12:a2:
         89:48:83:a3:6d:c0:e2:d2:38:ad:24:d8:5c:bc:be:1e:44:7f:
         fc:f1:b4:34:9e:83:c2:d9:b4:09:b8:cd:75:d6:f7:6b:a1:79:
         5b:b5:cc:64:46:10:4b:2a:b4:4d:5c:bc:d3:ad:43:48:1b:de:
         cc:ca:fd:58:1c:ca:04:d7:5f:bd:00:5a:6f:2e:73:40:27:95:
         f0:63:a7:05:e8:6a:ef:59:90:83:1a:13:a0:58:3d:d0:fd:d9:
         41:83:77:5b:6c:a6:68:8a:96:88:c6:e8:51:4d:7a:85:88:5d:
         b4:88:cd:93:3e:41:b3:31:90:84:4f:bb:25:24:75:49:69:09:
         b2:39:6b:66:28:e0:24:7a:52:7c:7a:82:47:0b:84:07:ed:a8:
         d1:0f:c4:5e:c7:22:56:3b:b9:a5:4a:20:14:60:14:94:05:5f:
         6d:33:8c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:07:37 2026 by rpki-client