Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
File:                     YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft (raw, json)
Hash identifier:          i5D/36chtLBkV5piPYQ+LMYxdby7KEd8faw1wnCJByg=
Subject key identifier:   55:10:BA:F4:79:44:9D:3F:21:74:88:C9:72:09:60:E9:FF:47:36:09
Authority key identifier: 60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
Certificate issuer:       /CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Certificate serial:       019EB84567058F8BAEBE454389A9E790A1A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
Manifest number:          1519
Signing time:             Thu 11 Jun 2026 20:00:16 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:16 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:16 +0000
Files and hashes:         1: ET5vMhLbSdWsUS7cNiMD0Da89x0.roa (hash: +AkKc2WCnmOlPOxnIiAKu7no0yZQrgr6+XgFHwBRgZU=)
                          2: YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl (hash: ItoiGC4E1M4rQtTRGwrbDIlXrhoeAlndvywJMk3AbbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:67:05:8f:8b:ae:be:45:43:89:a9:e7:90:a1:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
        Validity
            Not Before: Jun 11 20:00:16 2026 GMT
            Not After : Jun 12 20:00:16 2026 GMT
        Subject: CN=5510baf479449d3f217488c9720960e9ff473609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:35:04:47:a8:d2:7e:25:4f:e5:cf:14:7a:45:
                    2e:61:76:51:54:8e:e7:c0:98:bc:6d:75:4d:59:a6:
                    60:78:77:fe:99:4f:31:03:48:52:6f:f0:ec:f1:64:
                    55:d1:18:0c:ed:9b:69:7e:2e:e7:8b:5a:c9:97:44:
                    95:90:06:97:96:b6:c7:b8:97:05:ca:63:a9:8d:b6:
                    a2:fd:d0:97:7d:79:3c:c4:f1:19:34:2b:36:02:fa:
                    9c:e4:4d:53:98:8b:f2:aa:9f:f7:cb:62:28:a8:12:
                    e8:ce:91:a8:b5:a1:31:39:6b:b2:44:83:49:dc:95:
                    d7:a7:ee:08:b9:e3:16:dc:20:d1:d3:7c:dc:5e:96:
                    14:65:01:2b:a9:a3:ba:7a:e6:00:43:92:a5:e2:d3:
                    71:73:29:e4:ca:63:1f:bc:7d:48:0b:d1:34:84:d0:
                    d5:2e:20:82:f7:14:32:ec:59:64:37:05:67:a1:48:
                    10:3e:49:9f:be:97:a5:78:45:4d:70:11:91:71:91:
                    0e:a1:26:47:89:87:94:37:e7:2b:11:c0:2f:aa:da:
                    71:73:92:93:19:f4:03:f9:57:0b:99:b0:75:45:04:
                    c2:98:2d:08:9c:24:5c:1f:2b:31:56:05:89:b4:34:
                    b2:de:a2:d7:c4:45:48:98:ca:d4:86:12:19:96:bb:
                    66:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:10:BA:F4:79:44:9D:3F:21:74:88:C9:72:09:60:E9:FF:47:36:09
            X509v3 Authority Key Identifier:
                keyid:60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:bf:2d:e2:4d:fd:f2:d6:48:f4:9d:55:30:b6:b7:5c:5d:78:
         e2:08:28:44:19:17:69:6d:94:ae:00:82:71:74:03:ee:48:e0:
         b4:ed:49:bd:48:98:ba:9b:28:80:13:23:5b:5a:99:5c:c2:0d:
         8d:ca:87:f4:74:00:ad:6d:e6:53:d5:4e:8b:46:ff:47:17:99:
         95:ee:52:c1:5d:90:50:60:d8:07:86:07:74:33:0b:d5:25:2a:
         12:bc:6e:01:e0:02:9e:31:72:fc:28:41:84:5d:e1:de:35:0f:
         ac:4c:56:85:a2:93:9c:a6:60:66:5c:8a:55:a9:9a:ee:35:aa:
         28:7a:eb:57:ef:37:c4:d3:70:86:62:5c:a1:f9:51:9f:af:fd:
         f0:d2:a8:17:9a:8d:23:d7:fe:22:72:ed:36:69:50:fc:c8:34:
         c4:c3:27:48:2c:f1:94:c9:b4:72:d1:80:5c:30:34:e6:01:c6:
         5e:8d:f8:68:21:ba:26:36:8e:39:fb:0d:d1:2c:41:89:f5:d6:
         38:8f:53:45:57:3f:41:9c:b3:66:cc:a5:11:0f:47:a7:39:d9:
         ab:6c:3d:9d:cb:ea:97:c9:04:bd:4b:54:b5:c6:50:4f:b8:a3:
         d2:9b:b1:a7:41:47:03:5a:5c:33:19:74:49:29:f1:43:d4:af:
         1a:c6:51:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:20:52 2026 by rpki-client