Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
File:                     YOdz2_t1lX8Mxchj_M52ylijkwg.mft (raw, json)
Hash identifier:          qb7YNid5V7BzVc8TEbpp8AqDt1V9MdDX6UtNUJDoxtI=
Subject key identifier:   52:28:36:F3:08:ED:09:0D:28:6C:6D:7F:6A:27:27:B7:56:8F:8F:F3
Authority key identifier: 60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
Certificate issuer:       /CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Certificate serial:       019EB8EA45A2631A5DE603346A6CEFB4CA3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
Manifest number:          0C24
Signing time:             Thu 11 Jun 2026 23:00:21 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:21 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:21 +0000
Files and hashes:         1: 5Tv0CB1BQb-7j2hs5gKN63kboWY.roa (hash: rOsqhBLouEH03XQI21ig1uTPRO/qmeCRcopoN4oIqo0=)
                          2: FaiCCLCJ_22L37bTLhekiTS6xWk.roa (hash: 0rF76R7VaTqT7h2AWynmZ6U6C8XdF6nPrpTOFBQQBKw=)
                          3: O4AfeQRuIMAMeO6z8kLbpZ8Hvoo.roa (hash: MfH6CEUlmmWEGp0pDdZfESoeoH136H9ZL7h9lRJnDwk=)
                          4: YOdz2_t1lX8Mxchj_M52ylijkwg.crl (hash: jBmzfJWTd7EopP9Go1mUQ00k+p+QgK/63RVyBk6G0l0=)
                          5: yTTayTL41qHWL6gWmBRi6muRZKQ.roa (hash: KuHMdy+xEGLUNp8u6CFDJT5C7IHBOhf7emLTFyrBpUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:45:a2:63:1a:5d:e6:03:34:6a:6c:ef:b4:ca:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
        Validity
            Not Before: Jun 11 23:00:21 2026 GMT
            Not After : Jun 12 23:00:21 2026 GMT
        Subject: CN=522836f308ed090d286c6d7f6a2727b7568f8ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2c:63:51:06:1e:46:89:66:6d:a7:1c:d3:bf:
                    18:6a:39:8d:6c:6b:0d:04:9a:be:a5:41:cb:99:01:
                    39:ae:20:68:dd:91:e9:bf:b6:4b:8c:1c:fd:c7:7f:
                    21:09:12:18:e1:01:49:22:20:aa:1a:da:e4:4f:00:
                    12:c9:d1:b6:4a:8f:e6:f6:96:ba:6e:57:ad:4c:c9:
                    22:e9:72:d1:b7:a9:81:9f:f7:53:0c:05:16:d4:96:
                    d5:a6:0f:87:e0:0d:bc:54:84:6a:ba:2f:5c:03:a5:
                    73:7e:cc:62:72:6e:f4:4f:60:55:e2:6d:ab:33:44:
                    22:ae:8e:f2:0e:f8:78:94:77:8d:31:43:d1:96:eb:
                    ac:d5:9a:fa:6b:8f:41:ba:f2:95:75:c4:bc:71:8b:
                    d2:a1:92:4d:a7:1a:80:e0:ec:3c:ed:9d:73:8f:6c:
                    c6:09:6e:aa:72:f7:ca:69:08:c3:75:fc:d2:c7:fe:
                    3b:bc:34:7b:c3:8d:a1:3a:1c:9d:27:dd:09:5b:d5:
                    ba:2f:90:fa:95:21:0e:84:79:c4:56:e9:b3:0a:de:
                    57:03:85:eb:39:7b:af:b3:98:b3:87:ac:31:83:1a:
                    01:7c:43:75:ab:27:77:a9:bf:93:fb:53:f5:65:6d:
                    54:0d:0a:c2:10:46:66:0c:68:23:d1:41:77:4d:6e:
                    93:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:28:36:F3:08:ED:09:0D:28:6C:6D:7F:6A:27:27:B7:56:8F:8F:F3
            X509v3 Authority Key Identifier:
                keyid:60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:d6:f9:ce:9b:e5:79:3a:51:6e:04:b0:5f:46:f1:c8:cb:96:
         f7:a4:68:98:73:65:4b:42:9a:6f:23:26:94:31:ea:dd:56:c8:
         8f:d0:64:f7:67:19:8a:74:77:40:15:88:9f:cd:00:d9:cb:f0:
         10:9f:b8:11:75:b6:ed:f1:4e:d8:b8:17:42:6e:c7:dc:e6:ae:
         05:fe:c7:9f:7a:68:a7:c0:6b:63:09:7a:62:d3:c3:87:57:77:
         7b:a2:98:4c:59:6c:58:08:02:ac:f6:fc:89:bc:1a:6a:40:8a:
         7b:4c:83:51:ce:8f:67:65:55:bc:a6:ce:7e:82:70:f0:f3:13:
         86:2a:b5:df:b5:bc:ae:fa:71:ab:b3:1a:21:cb:40:2e:e2:d2:
         62:a8:81:27:1a:6f:4f:8a:13:9d:9d:04:6c:69:a7:18:35:d3:
         16:e9:f8:47:25:07:3b:00:b0:38:c4:ec:96:18:01:c8:0e:be:
         f4:9d:e5:ae:22:5b:31:b2:d6:d7:1e:4f:6c:62:0e:c4:28:63:
         73:02:f4:00:19:d5:06:38:0d:70:00:64:ad:4f:4c:3b:c8:15:
         64:42:bc:10:70:16:6c:2f:df:25:6f:74:b2:75:b7:62:dc:30:
         d3:bc:28:6f:5b:36:a5:d2:1f:9c:5e:b9:a9:75:61:43:1d:5b:
         6d:93:0f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:09:51 2026 by rpki-client