Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
File:                     yjevCVET2t1bxRveu_CtNNbu22Q.mft (raw, json)
Hash identifier:          Feb0iubfHQrDbhYJn7cqmzqRqBEEJ7z05cpYXlm/tBM=
Subject key identifier:   FF:D7:19:3E:BA:B5:CC:43:9E:B4:8E:33:DB:1B:EC:62:9E:03:08:7E
Authority key identifier: CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64
Certificate issuer:       /CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
Certificate serial:       019F13AF1C1BB34664F32470044369CA2215
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
Manifest number:          1596
Signing time:             Mon 29 Jun 2026 14:01:10 +0000
Manifest this update:     Mon 29 Jun 2026 14:01:10 +0000
Manifest next update:     Tue 30 Jun 2026 14:01:10 +0000
Files and hashes:         1: F44bKH9OXVnCIoILdhGNkCfhXGk.roa (hash: tP7jtATuTlTRwvEpnqA6Mbeq855NS1jjX+L/+eC+Juk=)
                          2: yjevCVET2t1bxRveu_CtNNbu22Q.crl (hash: C7gKulvFPimg+3VFldRgnAyxjcj8GivnOF+8H3PX048=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:13:af:1c:1b:b3:46:64:f3:24:70:04:43:69:ca:22:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
        Validity
            Not Before: Jun 29 14:01:10 2026 GMT
            Not After : Jun 30 14:01:10 2026 GMT
        Subject: CN=ffd7193ebab5cc439eb48e33db1bec629e03087e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7f:f9:53:ee:da:44:85:aa:64:ce:81:62:bf:
                    9f:e0:d9:44:77:da:af:34:21:a8:9b:9b:fd:79:bb:
                    31:5c:95:b8:51:b7:8c:1b:8f:0a:08:36:a5:ad:30:
                    36:de:ce:a7:94:6d:05:fe:92:ab:20:48:6e:8d:33:
                    b2:88:7a:76:08:64:71:66:cc:fa:6f:ba:dd:17:bb:
                    aa:a2:27:71:3b:36:a2:d2:4a:2c:06:41:ae:86:fc:
                    18:0c:c0:8e:6d:3a:fb:25:c4:82:a8:69:bd:7d:70:
                    b6:03:b5:eb:20:0f:53:c8:d7:6e:78:2f:15:5e:42:
                    d7:85:06:fa:73:60:ef:99:16:43:76:20:39:70:cb:
                    6c:15:57:c5:68:f7:2e:e6:2b:9b:a7:57:fa:18:04:
                    7a:42:ee:28:c7:65:32:a6:54:97:6e:2f:e1:35:98:
                    e5:cc:ea:c5:2d:70:7e:1e:b0:30:4f:39:e0:c7:74:
                    56:e9:37:36:ab:ae:9a:3b:c2:5e:01:73:70:36:14:
                    2e:12:1b:e3:2e:42:7c:56:fa:c9:1b:00:7c:1d:7b:
                    2d:04:f4:3b:02:31:52:5f:68:40:60:d6:f4:c6:e9:
                    0f:07:fa:c4:93:b5:e7:3b:29:56:7b:c5:bc:b0:89:
                    6e:3d:11:da:79:e4:c4:38:d5:fe:64:3b:0b:4e:fe:
                    f3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D7:19:3E:BA:B5:CC:43:9E:B4:8E:33:DB:1B:EC:62:9E:03:08:7E
            X509v3 Authority Key Identifier:
                keyid:CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:51:ec:78:e9:8a:ac:cd:a6:80:2c:af:65:0e:7b:a9:84:e7:
         38:3e:c6:92:e0:6c:a5:11:78:23:90:eb:35:4f:67:c8:c1:a8:
         e9:ec:4a:39:3d:77:24:69:36:e4:a9:b6:09:eb:47:de:d7:90:
         46:26:9e:3e:fb:e4:5d:df:de:7b:c7:39:dd:ee:2f:02:1e:81:
         97:ca:5c:d6:d5:bd:2b:18:47:d3:2d:35:b4:57:c0:55:f4:b8:
         6a:82:dc:ff:4e:09:2d:01:28:7d:63:fa:10:5f:70:b5:38:75:
         22:a1:f3:ae:13:1c:bb:f0:7c:a8:07:82:b1:96:d9:a7:5c:a1:
         5b:2a:08:7d:af:39:cb:8c:33:71:ab:8f:fe:10:f8:a8:a9:cb:
         36:cb:d5:a5:72:88:36:6b:64:ed:08:1a:48:66:4d:7b:44:f8:
         03:f7:cb:22:91:e2:d0:4a:0b:bd:c6:87:1c:00:b3:82:af:eb:
         ce:9d:76:48:59:50:28:84:4b:20:b7:14:97:8a:46:fd:2b:28:
         b5:f2:08:d1:39:3e:78:78:5a:81:f0:ec:14:94:79:c0:0d:6f:
         ec:62:2e:79:7d:f5:27:1e:45:1c:a6:08:fd:24:d7:f0:f5:c7:
         62:7e:15:e5:ed:27:4c:ef:d0:36:c0:82:f9:11:3e:bc:da:bc:
         26:2a:9c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 20:56:21 2026 by rpki-client