Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
File:                     YhGQEidXeAf0toyLjyX76pxyB2I.mft (raw, json)
Hash identifier:          R1Kw00pzNci7ur1f2EZj/QY0tbQkAG03OILmBN7wFRo=
Subject key identifier:   95:4D:E0:05:1B:B0:CC:94:25:62:B5:5F:26:5B:64:D3:61:74:67:BC
Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
Certificate issuer:       /CN=6211901227577807f4b68c8b8f25fbea9c720762
Certificate serial:       019F1AFB1324B8072A0D1092C172609FC275
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
Manifest number:          144D
Signing time:             Wed 01 Jul 2026 00:01:29 +0000
Manifest this update:     Wed 01 Jul 2026 00:01:29 +0000
Manifest next update:     Thu 02 Jul 2026 00:01:29 +0000
Files and hashes:         1: OVXT6gUHNs92I_TpJokrvNCUI_k.roa (hash: GunbA4sCmSgthfWeCRgymGCKQHjNQ++TdcqNZ9NqpfA=)
                          2: YhGQEidXeAf0toyLjyX76pxyB2I.crl (hash: hxoCWS1EVkoyAYLAQhRzVklVhkQ2GKfrtXNp/Hdmy/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 20:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:fb:13:24:b8:07:2a:0d:10:92:c1:72:60:9f:c2:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762
        Validity
            Not Before: Jul  1 00:01:29 2026 GMT
            Not After : Jul  2 00:01:29 2026 GMT
        Subject: CN=954de0051bb0cc942562b55f265b64d3617467bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ce:33:1b:6a:d8:e4:c9:b3:b6:8e:ad:fb:8b:
                    17:ca:34:b6:68:c6:cb:01:03:a5:5e:76:01:77:8f:
                    0a:23:c2:a4:40:12:70:66:f4:75:14:ef:2c:b6:22:
                    16:2a:c2:f7:a7:be:83:87:d0:a1:20:3a:e2:4b:12:
                    b8:51:f1:e5:60:c1:13:13:b7:00:23:56:66:d4:3e:
                    87:e0:84:72:e0:3b:a2:4a:b4:fe:31:90:64:53:d9:
                    46:e7:fd:3e:d2:4b:69:e7:82:89:50:c7:4a:f4:85:
                    f0:09:47:d7:4a:2a:2d:e4:62:f4:b6:0a:c0:5d:24:
                    8e:3c:9b:34:2c:0a:af:d2:d1:5a:54:cc:a6:66:35:
                    15:85:48:45:0b:a8:bc:7e:06:2d:1a:f8:11:82:77:
                    a8:79:b3:c7:d8:39:66:ba:1c:36:6b:4a:ae:2c:b2:
                    eb:8b:30:29:d5:45:a2:24:9e:b8:96:8c:20:ef:27:
                    fb:12:71:0f:61:98:e9:50:46:4c:bd:88:16:16:5d:
                    c3:89:8e:fb:72:9f:bb:f7:29:2a:67:ab:4e:2a:2b:
                    46:3c:e0:50:9b:b2:8c:28:e2:15:0b:b1:7f:91:39:
                    57:14:bd:2b:b7:e0:e2:4c:b1:f2:0f:c2:50:b1:44:
                    94:92:c3:ec:73:ce:5a:61:9d:fc:28:ff:29:df:25:
                    f7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4D:E0:05:1B:B0:CC:94:25:62:B5:5F:26:5B:64:D3:61:74:67:BC
            X509v3 Authority Key Identifier:
                keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:de:94:8d:ee:a6:19:5f:3b:29:67:86:21:3b:c7:e0:40:b0:
         31:fe:01:d0:28:78:61:33:67:e4:6f:f1:fb:3f:b4:1c:25:ca:
         91:78:1c:b6:3d:65:f3:67:b1:cb:83:d6:9c:ed:cd:78:a3:12:
         32:d1:61:05:4c:cb:41:25:1d:50:7a:5f:e3:69:f9:29:35:86:
         68:9f:f8:3f:da:db:ce:3c:eb:4d:dc:8f:42:51:3e:da:60:01:
         d5:d8:4f:2e:ab:19:12:49:6f:a2:4d:e9:ce:bb:09:f0:08:13:
         cf:c8:a2:45:88:db:20:6e:6d:f3:c2:e9:dc:4f:7f:05:ef:40:
         d3:3b:2c:04:71:e6:6d:7b:97:82:02:6d:27:70:82:5c:ea:78:
         c7:c0:92:91:4a:c1:cd:74:c1:21:58:08:85:0b:99:77:4b:d5:
         99:ed:c9:c1:a5:3b:58:66:21:b6:4e:94:ad:5d:83:a2:ac:ca:
         c7:2b:91:6f:e0:a1:33:f8:ae:c4:2b:93:9f:40:77:5b:35:dc:
         87:7a:92:02:92:74:ab:83:3b:fe:75:8f:6f:b8:3a:f9:99:2a:
         25:2b:8e:a9:2d:b8:d0:a2:a6:76:11:70:f2:98:f2:27:29:f0:
         d6:57:21:71:8e:db:d0:f2:3a:57:78:a3:07:df:7e:90:48:f3:
         94:65:88:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 03:21:17 2026 by rpki-client