Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
File:                     yxODRz6KqHJwaPx1LgYOPb9j4O8.mft (raw, json)
Hash identifier:          c0sAMVMRBYbd9I8jMVmAh9vzxIl1OAjduYrxZTpPK08=
Subject key identifier:   16:16:C0:D5:CD:04:AF:37:20:58:8E:73:24:5E:70:A8:38:3B:9A:7E
Authority key identifier: CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF
Certificate issuer:       /CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef
Certificate serial:       019EBA349019AEDA66AF64BDE7ACCF33C5C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
Manifest number:          0B13
Signing time:             Fri 12 Jun 2026 05:01:07 +0000
Manifest this update:     Fri 12 Jun 2026 05:01:07 +0000
Manifest next update:     Sat 13 Jun 2026 05:01:07 +0000
Files and hashes:         1: 153fjxVtV5IdmULjsKFsyho7xsA.roa (hash: sMHTNIGNQvUhkdN5VlDx3F2+I4FUHbgADAQUyA3sCa0=)
                          2: yxODRz6KqHJwaPx1LgYOPb9j4O8.crl (hash: z/RgRUYi6mNTdKTwHmPB2HZNp931rwA+39A5mjTPmyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 05:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:34:90:19:ae:da:66:af:64:bd:e7:ac:cf:33:c5:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef
        Validity
            Not Before: Jun 12 05:01:07 2026 GMT
            Not After : Jun 13 05:01:07 2026 GMT
        Subject: CN=1616c0d5cd04af3720588e73245e70a8383b9a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f3:43:f8:be:cd:96:ec:eb:01:f8:8e:b9:2c:
                    19:86:0b:53:81:7f:0c:91:6f:15:38:76:49:f6:9e:
                    d5:52:f1:b3:4e:bb:f7:e8:a8:70:f3:3e:53:7a:84:
                    73:e4:38:d9:65:c3:27:13:12:6e:79:da:f1:bb:03:
                    c3:e1:a2:23:20:cb:3d:fd:e7:b6:93:55:cf:87:0b:
                    47:bb:05:09:92:8b:9a:b6:98:db:ae:14:50:d7:61:
                    c7:6a:09:c0:dc:0a:25:ac:78:4b:7c:3b:7d:64:88:
                    b9:de:a5:09:77:d4:d6:7b:74:8e:ba:09:cf:e3:00:
                    54:49:e5:11:1a:b5:94:f8:a6:58:fa:05:8d:be:cf:
                    fd:82:f8:28:87:7d:b6:89:0b:fe:6e:1d:af:fd:ec:
                    00:83:8d:8e:26:ba:0d:ab:a1:68:b9:0d:52:cf:8a:
                    7d:fa:66:8f:1a:a8:c5:98:c5:a1:5e:90:64:4a:a1:
                    f1:bb:10:ba:4b:60:eb:00:6b:b3:cc:9a:b6:8a:b5:
                    a0:0d:eb:39:a0:c0:24:50:b6:85:48:9f:8b:79:d4:
                    fc:84:b5:91:64:16:e2:3c:ba:dc:52:b4:65:6f:cb:
                    f2:6d:5b:8e:57:8a:e2:61:bf:67:8b:c3:92:10:91:
                    33:63:00:aa:87:1d:6e:ea:a0:81:2d:a1:ad:b1:46:
                    4d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:16:C0:D5:CD:04:AF:37:20:58:8E:73:24:5E:70:A8:38:3B:9A:7E
            X509v3 Authority Key Identifier:
                keyid:CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:3d:94:1c:38:39:60:c2:fb:78:20:f7:a8:31:5e:f6:ad:d1:
         fa:18:bd:a7:47:1d:70:16:30:a1:eb:cb:82:56:80:1e:13:bd:
         6b:cd:33:76:cd:b1:fc:34:b9:73:4f:0d:33:51:d6:8f:aa:50:
         47:97:6d:1f:4d:3f:74:1b:68:24:ca:57:48:ed:0e:ba:5a:83:
         a0:aa:b2:e6:aa:de:3f:04:75:04:a6:01:8e:44:7b:af:7b:35:
         79:8e:74:8b:29:05:6b:7f:e7:50:27:ff:2a:a8:83:95:f4:50:
         bb:26:8b:9b:b2:b4:d5:5e:3c:3e:71:0e:ee:b3:b7:13:ea:8e:
         c0:64:d7:6e:ad:90:3e:67:29:7c:58:f6:6c:01:30:8e:67:bb:
         ab:ee:7f:33:61:ea:43:32:0d:ec:a7:1f:85:d3:d4:db:4f:dd:
         89:9a:d8:9c:8e:cf:ce:ee:81:b7:b7:0c:dc:b0:bd:4b:78:89:
         ff:9b:38:7e:75:92:19:7a:9d:8a:76:9a:47:b7:60:57:5d:f4:
         be:1e:bf:f7:b3:b2:41:19:72:d8:81:71:d4:c7:fa:97:d9:20:
         15:4f:8b:c0:9a:b2:44:f0:73:02:ac:58:3a:4f:b0:fe:65:3a:
         30:38:88:40:df:5f:17:a2:21:cb:d3:3b:1a:a2:ed:37:cc:e9:
         8a:48:12:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:53:55 2026 by rpki-client