Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File:                     Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier:          GoKXMzVAGtsdgRu6cJhKKVPuvMB7xGQcuoW+YYoW3PM=
Subject key identifier:   02:66:7E:11:A8:20:7A:BB:2B:0F:A3:BB:3F:B1:CC:B0:99:A2:5D:F8
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer:       /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial:       019EB84603E39EB69FC8DFE697FBF4FE9CB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number:          195F
Signing time:             Thu 11 Jun 2026 20:00:56 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:56 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:56 +0000
Files and hashes:         1: XZ3sAdabDoOYfBZeEJolsMalQgs.asa (hash: XHuxusmmi3am2aFGs60mmc2MCFL+zmd66reyxUPLwTI=)
                          2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: Ctzk+E4VVUet2jrGGnvw6lNI6IgU0eztyy+YlgCPLP0=)
                          3: nibctkm7wr91rBA37l_8PQxYVLc.roa (hash: VamjklOdSeVjkVgODzUFUtdlbnnylLnD0/pDvfa31T8=)
                          4: t8mVoTfmckCvsyVdwBCx2WY3_SU.roa (hash: punRHqDIXE83AX4muw8qvjP6n1JcfvmchVlgv85rsL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:46:03:e3:9e:b6:9f:c8:df:e6:97:fb:f4:fe:9c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
        Validity
            Not Before: Jun 11 20:00:56 2026 GMT
            Not After : Jun 12 20:00:56 2026 GMT
        Subject: CN=02667e11a8207abb2b0fa3bb3fb1ccb099a25df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4e:34:72:50:2e:b0:e4:3d:e9:18:58:4a:70:
                    8e:38:bc:83:6c:30:63:2c:2b:7b:e6:d8:54:41:f2:
                    06:73:43:82:de:28:e8:da:aa:55:d6:4e:d2:66:b3:
                    e4:4e:7c:7a:09:d3:a2:f2:e0:aa:9d:2a:fc:b7:e5:
                    3d:d3:59:08:1c:f0:41:ca:fe:bc:f4:af:22:00:b1:
                    c7:03:73:d4:61:d4:65:b4:4c:1c:56:e0:c4:11:17:
                    74:16:db:d5:79:34:bd:08:16:11:90:ec:d9:e2:ef:
                    1d:7e:8a:c5:e0:06:cf:be:a8:17:87:21:2b:3d:43:
                    8e:42:29:a0:86:02:eb:ce:90:4a:3a:c6:eb:f3:2e:
                    a5:b7:9c:16:0d:6f:fa:ce:bf:7e:21:5f:01:4c:e6:
                    de:5b:3b:75:c3:6a:93:f1:96:ef:2c:c3:41:50:be:
                    4e:bd:55:02:ae:c3:af:81:2e:47:7c:1a:e9:3d:f4:
                    ef:38:de:af:ac:9c:6d:42:60:18:5b:b7:ab:0d:0c:
                    15:42:8a:42:5a:ef:9d:9a:13:3d:dd:9b:e3:04:c9:
                    ee:4a:f8:cf:ed:c5:90:d5:37:a1:a5:15:98:93:fd:
                    ce:b0:58:6d:ab:39:8f:db:76:41:84:4c:5f:ab:2d:
                    c2:72:02:5f:af:57:8c:fb:5a:23:fc:1f:88:11:45:
                    3b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:66:7E:11:A8:20:7A:BB:2B:0F:A3:BB:3F:B1:CC:B0:99:A2:5D:F8
            X509v3 Authority Key Identifier:
                keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:7a:89:aa:b6:08:a4:55:f5:dd:3c:be:2b:6a:f7:53:1c:f9:
         8e:03:b1:d9:23:c8:af:5f:5e:c0:28:dc:07:28:05:d8:78:12:
         a9:11:a4:10:93:a1:48:4e:3b:bd:8c:7c:de:85:a2:9a:bd:0a:
         50:a0:52:93:6c:0b:83:ea:9c:30:3a:56:3e:b9:5b:38:cc:94:
         91:0c:3a:82:52:9a:b7:df:18:5e:47:30:1b:da:d3:86:d3:33:
         26:ad:18:4b:e0:a9:6f:b1:06:e7:5c:4e:0b:31:8d:b0:f5:36:
         39:94:44:81:cc:53:61:e2:31:70:ca:2e:c7:f6:c2:0e:e8:10:
         1a:9f:23:33:3c:98:de:e1:f4:e7:8b:1d:90:9f:1f:5d:94:a3:
         4a:27:1c:e4:2d:8e:c5:40:99:54:a8:20:0c:14:fa:92:37:50:
         ad:5a:de:b5:be:fc:15:c4:7f:b3:85:dd:54:ce:07:2d:1d:c2:
         72:c4:4a:12:e6:f7:50:9f:d7:b3:6f:98:fe:07:26:ba:01:cf:
         18:50:30:dc:b0:3e:07:8d:7a:76:3d:51:99:5d:d6:63:8c:38:
         c2:f7:43:d4:7a:08:1d:f9:67:3e:6e:29:e0:74:37:bb:44:7e:
         12:8f:9c:8a:14:56:dc:1e:c0:4a:66:6e:83:bc:cc:0a:4a:0e:
         b1:b4:59:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:23:38 2026 by rpki-client