Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
File:                     YlDmLARIEp9jWJGKccM0TiWoLZs.mft (raw, json)
Hash identifier:          X/XRHGswyQUAl7ZsyzpH8kDpahCCEOqoZLNWBghRx9A=
Subject key identifier:   F0:39:15:68:53:00:F4:5D:52:DA:1B:CE:BF:D8:C2:84:0D:72:71:39
Authority key identifier: 62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B
Certificate issuer:       /CN=6250e62c0448129f6358918a71c3344e25a82d9b
Certificate serial:       019EB80E8FE8369A7ED69D176235935A673E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
Manifest number:          0303
Signing time:             Thu 11 Jun 2026 19:00:22 +0000
Manifest this update:     Thu 11 Jun 2026 19:00:22 +0000
Manifest next update:     Fri 12 Jun 2026 19:00:22 +0000
Files and hashes:         1: DRO3tCTePWIvKHPgw6pmaXwU0JU.roa (hash: nsXU89cmKGMuchI2BpERlyONOF3QYxV+4FYWi2CIuFY=)
                          2: YlDmLARIEp9jWJGKccM0TiWoLZs.crl (hash: e9uXaDdAzMQ98PEjDwpvxFB3qnkwCAdkoyEFI7Z6QuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 19:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0e:8f:e8:36:9a:7e:d6:9d:17:62:35:93:5a:67:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6250e62c0448129f6358918a71c3344e25a82d9b
        Validity
            Not Before: Jun 11 19:00:22 2026 GMT
            Not After : Jun 12 19:00:22 2026 GMT
        Subject: CN=f03915685300f45d52da1bcebfd8c2840d727139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d6:40:0f:a1:19:25:04:54:2d:b7:6d:45:e8:
                    cc:7c:32:57:38:ef:8d:7b:a9:80:1e:ed:1b:be:49:
                    92:6c:ac:a6:62:d1:27:d8:ff:33:bd:0d:80:0f:2b:
                    67:88:11:34:ba:13:d9:3f:fc:cd:36:78:f6:be:c3:
                    e2:ef:04:42:36:4c:88:dc:3b:aa:61:15:9b:bc:7e:
                    b3:b6:dd:dc:67:8c:5c:fa:7b:07:ad:53:82:06:51:
                    37:cc:10:18:fa:85:5d:21:76:9d:8a:93:52:13:f5:
                    e6:0b:fb:bc:a6:51:54:d6:a2:13:b4:93:c2:96:47:
                    d1:71:ee:3a:80:fc:c9:fd:6d:71:8f:3a:07:c4:cb:
                    66:2d:95:6f:4e:69:0f:79:9c:3d:f6:92:3d:c2:af:
                    5a:4c:74:fc:a8:18:81:2b:ee:e3:58:bb:25:bd:99:
                    da:9c:50:f5:01:b7:e7:19:30:e4:a7:7a:cc:5f:f8:
                    b9:92:9b:52:99:90:1c:28:ca:f9:56:f8:6b:a7:36:
                    b7:9a:8f:a0:47:9b:35:70:46:05:e8:21:9c:2e:73:
                    6f:f0:f0:ee:eb:41:f0:65:64:c4:c5:fd:a7:77:d6:
                    38:c5:6d:c1:e4:8d:0d:ba:be:0f:eb:1c:0b:45:40:
                    2b:4c:53:ee:3c:81:93:b2:e7:cf:5b:b0:68:60:bd:
                    6d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:39:15:68:53:00:F4:5D:52:DA:1B:CE:BF:D8:C2:84:0D:72:71:39
            X509v3 Authority Key Identifier:
                keyid:62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:4c:35:16:4b:ac:72:87:f6:9b:3e:e1:d4:3c:79:d3:ab:ff:
         a7:23:ba:db:53:97:49:35:1c:02:fe:46:d5:4b:6c:dd:45:b0:
         60:77:d5:d4:d2:3d:04:f1:a4:c6:f8:6b:74:01:2e:93:78:f8:
         ee:fb:6d:66:11:f7:b4:a3:d1:c2:9f:e2:ed:34:ff:f7:96:81:
         ce:27:c5:58:ce:87:d7:ba:25:8c:44:e1:2e:73:c6:65:af:94:
         cf:2c:4b:64:32:e6:0a:65:f1:1b:ae:f1:6e:0b:8c:35:cc:48:
         f5:2f:c2:5b:34:1b:69:41:19:2c:f6:cf:52:b1:8b:35:b8:ae:
         b4:d9:0d:aa:d6:3e:91:e7:e7:c4:e3:d0:06:0f:74:6b:e9:03:
         7b:14:c7:60:b4:a6:d5:40:1a:1c:db:3e:61:87:fd:12:fc:4a:
         f3:7b:72:b4:68:24:ea:b9:e3:f5:f1:4c:c3:14:e3:4a:34:9b:
         1f:07:28:68:9e:95:82:17:b5:0a:5e:06:89:d4:ed:d2:06:83:
         91:aa:36:a4:af:ab:c9:e5:83:94:c0:e6:c5:a1:80:87:a7:9c:
         8e:59:c3:8a:fd:6c:a2:b8:ff:ca:b2:21:7c:06:5c:a9:dd:49:
         12:5b:9a:4b:ad:6c:37:50:03:68:48:ab:95:bd:ca:11:37:d2:
         97:9e:bc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:39:24 2026 by rpki-client