Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
File:                     Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft (raw, json)
Hash identifier:          i9RBtEy3pNUg0A+MitEYnLcLGY+gfLw3L7lKQ35shVc=
Subject key identifier:   6A:EE:3F:9C:5B:D7:19:09:19:F9:13:1D:B9:07:06:51:1C:4B:18:96
Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
Certificate issuer:       /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Certificate serial:       019EB80E7E301CC9C36776E4739BE420ACCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
Manifest number:          1958
Signing time:             Thu 11 Jun 2026 19:00:17 +0000
Manifest this update:     Thu 11 Jun 2026 19:00:17 +0000
Manifest next update:     Fri 12 Jun 2026 19:00:17 +0000
Files and hashes:         1: 1-Npj9uH2lNWYpla7MTqgqwt83iQ.roa (hash: JQmankrBVBlqdCQ8Vwvu+tFNWtJX5/kU02hONf99fCo=)
                          2: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl (hash: VEOcPhExclTJqUO0Sj7lyFiVhjz7TLV6GcmdKh3xztg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0e:7e:30:1c:c9:c3:67:76:e4:73:9b:e4:20:ac:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
        Validity
            Not Before: Jun 11 19:00:17 2026 GMT
            Not After : Jun 12 19:00:17 2026 GMT
        Subject: CN=6aee3f9c5bd7190919f9131db90706511c4b1896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d9:35:e1:77:c5:b4:f3:0c:2c:ff:aa:3b:ec:
                    00:e4:36:2a:a4:41:c9:5a:55:91:85:97:11:b3:79:
                    74:33:99:4c:2e:34:f0:a0:7f:cb:ce:64:c8:02:d1:
                    f1:33:05:5d:8c:01:62:7a:74:be:f5:c4:2e:33:58:
                    3c:bd:a4:e1:2b:c9:ea:96:fe:06:be:cb:5e:c0:f8:
                    55:74:0e:31:39:b5:cf:90:11:0c:95:25:11:fc:97:
                    d2:82:54:68:5e:e2:4c:48:cf:51:87:21:45:7b:35:
                    fb:95:ac:d0:2e:96:98:f6:49:32:21:3b:c7:59:92:
                    40:3b:d4:28:03:91:47:48:60:cd:1d:64:91:aa:d5:
                    31:c8:b1:ed:19:a3:92:b1:fd:40:ba:d6:8d:f7:18:
                    7d:06:17:c0:90:29:c7:0a:3d:6f:99:f1:cf:6f:bb:
                    ad:a1:43:98:8d:68:e2:07:32:2a:b3:60:8d:cf:66:
                    bc:f8:61:0d:c2:ab:2d:62:cf:bf:5c:41:7a:e6:55:
                    18:a4:bf:fe:df:6b:a8:c4:ac:8e:23:06:2e:b9:37:
                    24:26:35:ac:ef:a7:61:44:e7:45:7b:51:f0:7e:8a:
                    a6:55:2d:74:31:6e:e9:f6:d2:0b:bc:41:f9:fc:a5:
                    15:c3:f9:84:f8:4b:74:1b:d6:76:81:85:65:d1:31:
                    a2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:EE:3F:9C:5B:D7:19:09:19:F9:13:1D:B9:07:06:51:1C:4B:18:96
            X509v3 Authority Key Identifier:
                keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:a8:04:fa:96:f8:c6:67:ad:09:2c:a7:39:fa:72:4e:92:1e:
         e8:b4:0b:be:b8:d0:87:4e:26:25:2f:7e:93:37:5c:9b:f6:be:
         b1:f3:e1:18:02:b6:6a:8e:a3:bd:69:57:94:e2:bf:34:ad:59:
         96:4d:86:fe:c9:d7:5c:cf:34:83:b6:f2:50:29:16:29:af:d1:
         f1:1e:88:e3:3c:e6:20:c8:14:09:63:d4:19:16:e1:c3:3b:79:
         dc:03:2e:5d:ae:b4:20:77:ba:36:e6:6d:a5:f0:b7:54:60:e2:
         83:11:dd:e8:ec:02:15:2f:e6:26:d5:ad:6d:24:5d:cc:e8:8b:
         2a:2b:cd:53:b1:34:05:fc:b3:77:45:7b:7d:53:83:e9:ad:09:
         7a:3a:3f:71:f3:ce:33:12:24:83:7b:6a:35:da:91:ba:76:68:
         fd:ad:6f:9f:65:d4:86:14:be:97:5d:e9:7a:2c:dc:e0:32:95:
         77:8f:fd:d8:fd:7d:a8:be:f6:1b:d6:b4:40:46:1a:81:e3:70:
         fd:50:ed:0a:5d:1f:6c:ae:76:00:02:4d:1e:1c:61:28:23:19:
         5f:6b:5f:38:1d:4d:96:9b:45:77:94:22:a6:b3:ee:9c:99:58:
         87:d6:08:da:37:26:33:12:c4:97:b9:c8:67:78:3f:32:4f:7a:
         2b:ea:46:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:04:39 2026 by rpki-client