Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
File:                     SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft (raw, json)
Hash identifier:          cYBCdMGTgrn9iGycTnzbt7T0OZtHQL+Hq8sZln8J+d0=
Subject key identifier:   44:F1:63:8B:2D:33:4D:C6:A6:63:CC:CE:2F:3A:A2:37:61:4D:30:7C
Authority key identifier: 49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8
Certificate issuer:       /CN=4983e96ff270f4eca9701258081bb5cf818966c8
Certificate serial:       019F104029C12AD644A510A81AE579455375
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
Manifest number:          0561
Signing time:             Sun 28 Jun 2026 22:01:08 +0000
Manifest this update:     Sun 28 Jun 2026 22:01:08 +0000
Manifest next update:     Mon 29 Jun 2026 22:01:08 +0000
Files and hashes:         1: SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl (hash: hM4CI4+EuCu4+FeVGQ84CcBKIFrXmAF1jWWSRYWV77Q=)
                          2: zqYVRlTgvHpJDmnzblzgqUd1qtQ.roa (hash: e8da42eEgoMlNnpHHSa7Q7x96Sq3pNxhBs6tD28L410=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Jun 2026 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:10:40:29:c1:2a:d6:44:a5:10:a8:1a:e5:79:45:53:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4983e96ff270f4eca9701258081bb5cf818966c8
        Validity
            Not Before: Jun 28 22:01:08 2026 GMT
            Not After : Jun 29 22:01:08 2026 GMT
        Subject: CN=44f1638b2d334dc6a663ccce2f3aa237614d307c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6c:05:b8:01:f6:d9:ee:6d:5d:5a:6b:8f:b3:
                    24:4f:23:57:c7:83:84:99:9b:71:2e:5c:09:22:c0:
                    74:0b:07:d2:0a:e8:0e:06:13:a8:72:72:cb:bb:b1:
                    1f:22:c8:cd:17:9f:56:6d:ed:16:94:a0:3e:4c:1b:
                    5d:db:aa:3f:b8:f4:bd:d3:a9:a4:02:d9:13:e2:26:
                    13:c6:9b:61:e2:1a:41:dd:73:04:31:1c:d7:1a:4b:
                    d0:b9:2d:79:c6:26:13:ec:aa:2a:27:e0:bb:0b:d1:
                    4d:93:e5:97:2d:f5:36:38:56:70:15:e0:36:75:96:
                    0a:66:ae:15:6f:12:6c:a8:70:a5:5e:f9:28:6c:53:
                    33:4e:27:c2:8a:a3:38:e6:39:ec:01:0a:55:e5:94:
                    1b:a9:02:51:ce:48:e2:ad:34:92:3c:0e:b6:81:36:
                    4a:d4:8d:9d:6c:4f:16:b7:41:66:27:e6:d9:41:41:
                    02:6c:b9:78:ad:5f:24:e5:79:de:6c:20:e4:2a:3f:
                    c5:47:a5:5d:ec:43:7c:f3:4f:65:5d:c3:a9:63:be:
                    53:80:04:f8:25:9d:72:05:b9:3b:27:58:8b:cb:7d:
                    49:17:ed:bd:44:18:38:45:3a:9a:82:90:08:91:c2:
                    73:e6:4f:79:4d:26:0c:8d:09:bd:ba:3c:89:0a:dd:
                    40:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F1:63:8B:2D:33:4D:C6:A6:63:CC:CE:2F:3A:A2:37:61:4D:30:7C
            X509v3 Authority Key Identifier:
                keyid:49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:fb:0b:4e:49:74:83:68:b5:0a:cd:bc:e5:6d:75:c8:e9:fb:
         2b:e3:be:1b:52:9b:e2:60:e3:06:ca:cc:a5:c4:64:45:b0:ce:
         bc:bb:19:48:54:dc:8e:9d:3c:f1:b2:3a:74:ac:87:c9:43:79:
         c5:08:74:0a:c4:fc:7e:9d:ca:4f:8f:dd:a3:67:b5:df:b2:ee:
         67:b7:ad:9c:53:f8:6f:92:91:c1:b7:e5:17:7f:6b:a1:68:c4:
         37:fa:e5:06:fe:48:0f:4f:fc:f1:72:82:ae:b2:e4:71:7a:f6:
         fd:a2:0a:83:1c:fe:66:f8:32:fa:7b:53:68:8a:76:0c:39:d5:
         1c:26:91:37:e1:f8:ad:c0:3e:a4:bd:7f:a8:68:64:4d:dd:56:
         96:29:0f:ca:89:4d:53:1e:39:2e:3d:6d:a0:51:64:9a:fe:eb:
         f8:11:db:39:a4:61:6f:c1:fd:74:80:e8:aa:18:4b:c8:22:82:
         5c:0d:c8:05:32:b1:10:3d:72:fb:52:05:d3:45:ac:3e:e8:f4:
         cf:32:e1:62:f8:ce:b6:c2:4c:e5:1e:f3:27:47:4a:ab:93:a4:
         9e:60:c7:33:5b:e2:f1:76:15:53:d2:b3:22:50:73:a8:a3:70:
         af:9a:24:e9:66:05:93:ae:3b:f8:01:b2:6f:7d:5c:98:c7:09:
         f9:2f:2d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 00:28:47 2026 by rpki-client