Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
File:                     yTNIHT-khxDcuXP9zSk0De22Ipo.mft (raw, json)
Hash identifier:          J9mF3JsuPS2QN7d6iXgOjlIJy6lXh5M6lQ97JbPGZgU=
Subject key identifier:   5A:B0:BC:E3:8D:42:A9:17:23:3E:08:92:FD:7A:87:16:73:70:A7:CE
Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
Certificate issuer:       /CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Certificate serial:       019EE142C0434FEB6ACF6EC1762A1C517F48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
Manifest number:          1970
Signing time:             Fri 19 Jun 2026 19:01:48 +0000
Manifest this update:     Fri 19 Jun 2026 19:01:48 +0000
Manifest next update:     Sat 20 Jun 2026 19:01:48 +0000
Files and hashes:         1: KuXwmM2lQvdKIC2B0b3rsQo2KEo.roa (hash: est3JhVR619cOv4Uosy6GyDA6CD78dYPQN9NmwxN838=)
                          2: _JOKPZqcfiucPtK6kvV2lQrbnr0.roa (hash: nm260FM+WPlu0nfW5ryQo/yh5QD+PAvLx2X4UhvgpfE=)
                          3: cisGlTDG6YbGvbXjq8ObLwOftto.roa (hash: B+cjo1pRI6fh+IOCsdjVyvdJ7iW7PB7/BMnta8fuFho=)
                          4: kMSjqJOrzJDpG8FFrIFiinruuxs.roa (hash: qq+kGxkHnwsPE0vpu7WxOqMNZmZUOTdi5OXzBh28VFs=)
                          5: yTNIHT-khxDcuXP9zSk0De22Ipo.crl (hash: 92hHySrl9v1Quz39JkbmCTLfZY3/cB5RovzuGMi46mc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 19:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e1:42:c0:43:4f:eb:6a:cf:6e:c1:76:2a:1c:51:7f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a
        Validity
            Not Before: Jun 19 19:01:48 2026 GMT
            Not After : Jun 20 19:01:48 2026 GMT
        Subject: CN=5ab0bce38d42a917233e0892fd7a87167370a7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e5:43:29:b4:7e:74:ed:a2:58:73:aa:b2:00:
                    92:1c:e8:7c:aa:6b:c1:fd:34:b1:33:2e:b5:e9:0a:
                    c1:93:ee:b9:40:90:02:b4:d5:7f:ae:2b:e7:47:dd:
                    73:80:44:3f:8f:e4:97:27:87:90:27:38:55:3c:40:
                    5d:71:5f:82:91:4c:21:54:9d:47:28:aa:d6:99:6b:
                    3d:ec:49:b8:59:55:f6:7b:f4:29:0a:e2:68:45:f1:
                    0f:1a:50:ed:4c:76:eb:7a:08:f7:22:03:29:86:02:
                    6a:70:25:d7:20:af:d8:40:a7:aa:0b:a4:84:91:f3:
                    78:23:6c:7a:a1:cf:a2:29:ee:51:04:fa:2b:8a:8b:
                    33:e6:2c:a3:ef:b4:67:c5:fa:a1:30:e7:32:00:34:
                    28:95:d5:2f:9e:61:21:51:8e:c6:02:ff:af:f6:96:
                    28:fa:7c:71:f4:d0:ca:e3:eb:bc:f6:46:d2:30:a7:
                    f1:11:f6:32:19:13:39:25:01:5b:79:6a:0a:95:3b:
                    bc:de:c4:34:dc:04:bc:4c:60:b5:ef:f3:51:4b:a1:
                    7c:c2:eb:3b:17:7e:b5:29:ad:32:9d:6f:95:d0:9e:
                    a4:0f:1c:30:89:38:6e:40:7b:18:8b:a8:cb:d3:ca:
                    63:b8:de:c3:95:96:83:75:aa:e5:6a:82:e2:cf:66:
                    f8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B0:BC:E3:8D:42:A9:17:23:3E:08:92:FD:7A:87:16:73:70:A7:CE
            X509v3 Authority Key Identifier:
                keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:46:18:e2:e8:ff:c0:08:29:e1:95:90:30:45:9c:35:72:19:
         0e:3a:d9:d8:62:46:e3:3b:51:10:32:8c:84:4b:85:06:8d:03:
         9f:53:c4:fb:d6:43:bb:e9:5c:77:70:ca:da:da:4b:ab:30:ae:
         9c:7f:f0:44:60:7c:49:86:f9:92:bc:b4:f3:8e:97:c5:8a:b0:
         04:2d:38:1c:bb:bd:7a:88:bb:8a:9f:c2:04:0e:c7:fb:66:e0:
         4b:14:a5:14:9f:a4:55:6d:12:c1:2b:49:a9:a1:3e:d7:55:41:
         49:a9:72:62:65:8a:2d:42:54:6d:47:f5:b4:5b:31:04:5b:b4:
         a2:cb:77:84:01:0b:4d:65:f4:7f:65:9c:a8:1a:9d:f1:c9:68:
         35:10:4a:5e:09:be:d4:68:57:b4:e4:00:d5:e5:8e:f8:32:d9:
         eb:03:77:eb:e9:f3:09:d3:91:61:62:4e:74:22:86:64:57:4a:
         fa:e3:53:30:81:da:5c:e2:15:e0:da:ae:80:e2:3c:4a:1b:ad:
         7f:40:ba:89:8d:1b:db:9c:ff:89:5f:8c:fe:5c:9c:98:ed:9f:
         12:5a:87:09:a8:90:39:90:7d:e8:76:e8:2e:00:39:64:99:83:
         d2:0a:9f:55:d1:91:6f:de:fd:b2:b9:33:45:85:80:d1:89:8a:
         37:8d:42:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:03:53 2026 by rpki-client