Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft
File:                     YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft (raw, json)
Hash identifier:          zGWrQZ1WNPV8N949UKYGiaj0GLRMQoTRjfn74rt/Ejk=
Subject key identifier:   E3:0F:8F:5D:38:10:FF:7C:E2:26:36:A2:74:C3:6F:81:65:C4:CB:AC
Authority key identifier: 62:23:F5:64:16:3F:64:EA:F1:E1:AD:A6:D6:68:CA:D5:9D:5A:B0:A3
Certificate issuer:       /CN=6223f564163f64eaf1e1ada6d668cad59d5ab0a3
Certificate serial:       019F14538153E9E07B91C2858F44E9CCA0AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft
Manifest number:          0201
Signing time:             Mon 29 Jun 2026 17:00:44 +0000
Manifest this update:     Mon 29 Jun 2026 17:00:44 +0000
Manifest next update:     Tue 30 Jun 2026 17:00:44 +0000
Files and hashes:         1: YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl (hash: U/SwEGj9sl2DR34CJizbXgRD0A003GR76UTcsvxwAy4=)
                          2: nURomofbDgSrxYM0O1_tcq9RI08.roa (hash: tbGTgdyklPOm5IjmielhkBjtWa6HmczItFnGfm4z+A8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:14:53:81:53:e9:e0:7b:91:c2:85:8f:44:e9:cc:a0:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6223f564163f64eaf1e1ada6d668cad59d5ab0a3
        Validity
            Not Before: Jun 29 17:00:44 2026 GMT
            Not After : Jun 30 17:00:44 2026 GMT
        Subject: CN=e30f8f5d3810ff7ce22636a274c36f8165c4cbac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:23:a7:6d:ce:02:dd:c2:7a:19:b7:0f:bf:14:
                    9b:ee:62:0f:52:d2:43:89:b4:eb:10:05:f0:cd:4f:
                    0f:52:ce:da:39:9e:4a:40:c0:8e:5c:c2:03:61:48:
                    c1:72:24:4a:f8:e4:0e:4b:fc:3f:02:1d:c7:bf:b3:
                    4a:c1:7a:a0:c1:25:e1:5a:b2:d7:18:d5:8e:a0:7b:
                    70:11:31:a3:1c:c5:15:0a:b4:7b:e5:26:67:52:3e:
                    49:f0:b5:6e:aa:de:93:1c:1e:71:20:50:cc:e2:56:
                    2c:d7:5a:38:79:93:c4:70:97:0d:e1:db:68:f2:6e:
                    25:96:c8:5e:8f:b0:5c:4b:62:3b:0b:93:68:4c:ac:
                    0c:ce:bb:e4:bf:b8:06:fd:f0:74:52:e0:30:c2:9a:
                    cb:f3:ed:c5:49:7a:86:6b:20:73:30:1e:da:31:00:
                    d5:be:ba:68:e7:ba:6e:e5:ba:1a:6a:83:56:a2:0b:
                    16:d0:9e:ab:26:34:ff:13:ea:26:49:b1:6b:bf:a9:
                    b3:1e:19:75:cc:1a:63:53:f1:cf:9a:e1:9a:9b:9e:
                    87:fb:c0:ab:80:4c:0a:87:82:9c:8f:25:dd:25:3a:
                    ca:dd:cc:96:45:c5:aa:7b:92:f9:8c:09:db:07:09:
                    47:79:f7:cc:b5:b1:e2:3c:43:3f:1c:bc:29:1a:37:
                    22:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0F:8F:5D:38:10:FF:7C:E2:26:36:A2:74:C3:6F:81:65:C4:CB:AC
            X509v3 Authority Key Identifier:
                keyid:62:23:F5:64:16:3F:64:EA:F1:E1:AD:A6:D6:68:CA:D5:9D:5A:B0:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:92:d9:c8:08:b6:7c:04:30:7d:6c:ae:20:e2:9e:2a:55:71:
         83:54:0a:19:36:14:49:6e:a6:1a:1a:f3:1d:8e:2f:42:00:9d:
         77:a7:1c:85:d5:a7:71:cb:c5:77:9d:5d:45:a1:f1:32:bf:ec:
         a1:34:e5:57:fa:54:e5:cb:83:83:21:1d:71:7d:ec:5a:e2:a1:
         df:bb:94:d7:2a:a1:c9:22:27:d5:f6:9b:2e:ec:62:53:1d:9b:
         f1:62:94:bb:d1:27:f4:8a:13:88:d1:95:59:17:8c:dd:c4:72:
         6f:80:54:e6:29:3d:96:18:e8:59:03:06:ec:a4:05:9b:5a:ad:
         da:96:76:15:93:35:87:dc:1c:88:55:b9:96:b0:93:48:d6:3b:
         d7:7d:52:f4:ac:f2:db:26:93:cc:84:cc:2a:a2:d4:dd:bf:8b:
         62:30:aa:92:c6:5d:5e:f6:75:bd:02:1e:8f:b7:18:55:b4:97:
         a9:5c:e9:1b:be:29:14:18:38:94:a3:db:85:25:d7:42:55:75:
         f3:46:c8:bf:2b:14:fc:ea:fd:83:c7:6f:bd:3c:55:2f:2f:f5:
         c4:13:ac:bc:26:4e:ab:6f:5d:14:d5:ee:83:68:19:39:57:7a:
         14:a8:c8:68:08:3a:77:b8:f0:b0:ad:f7:6b:a5:c8:a5:07:24:
         07:f6:27:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 00:28:15 2026 by rpki-client