Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
File:                     94bCd_bKgIr9ygVnP0tsJXOXTj4.mft (raw, json)
Hash identifier:          gZ4pCF+LWhmMqsRNSfWjJnC+97QybbAn+6AaVYZlM/w=
Subject key identifier:   51:3F:C4:58:16:D3:95:F7:27:49:21:27:08:C9:A3:9A:F7:F1:E6:63
Authority key identifier: F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
Certificate issuer:       /CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Certificate serial:       019F17C2F55663042E63D8C02ED1E36CD543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
Manifest number:          191A
Signing time:             Tue 30 Jun 2026 09:01:20 +0000
Manifest this update:     Tue 30 Jun 2026 09:01:20 +0000
Manifest next update:     Wed 01 Jul 2026 09:01:20 +0000
Files and hashes:         1: 94bCd_bKgIr9ygVnP0tsJXOXTj4.crl (hash: Rnnz6u6jlx8YfVkAMCgKMUqsUpIiNRDytu5NKOr20+Q=)
                          2: yat_VFBsRL2vXjBQHXCl5CuZLXk.roa (hash: AeN/Vtg1z//ZrqzG5NqKqgHUFWw8uKLPlQFadvjnPx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c2:f5:56:63:04:2e:63:d8:c0:2e:d1:e3:6c:d5:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f786c277f6ca808afdca05673f4b6c2573974e3e
        Validity
            Not Before: Jun 30 09:01:20 2026 GMT
            Not After : Jul  1 09:01:20 2026 GMT
        Subject: CN=513fc45816d395f72749212708c9a39af7f1e663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dd:97:c0:3a:d8:4c:c5:3c:4a:cf:1f:f6:d7:
                    8c:ab:0a:4d:d8:e2:d8:0c:10:50:5b:28:10:97:e0:
                    9f:36:fe:13:96:5b:8d:f0:05:7c:11:1f:a5:c7:80:
                    88:2d:2c:8c:41:54:f6:ad:eb:59:b7:73:55:73:d8:
                    1b:3d:2b:ad:06:8b:36:82:85:ff:65:e4:bd:08:56:
                    9c:83:e8:b8:1c:22:0b:17:fd:8b:32:df:53:a3:fc:
                    12:49:76:3c:d1:57:df:6d:f1:97:b3:d3:d8:9e:d4:
                    8a:f2:b0:d4:b5:39:46:ec:5d:18:d8:de:93:4a:a4:
                    ab:7c:e5:bb:37:67:f9:4c:6f:90:91:82:c5:43:75:
                    72:bf:72:ce:59:b2:b1:2c:10:da:b0:2e:0d:6c:00:
                    a6:eb:c5:b4:ec:3a:92:19:78:1c:f3:cb:85:c7:05:
                    f7:f9:29:1f:d3:00:7e:63:5a:7a:26:5a:24:d2:0c:
                    6c:9f:7e:3f:7e:99:95:b6:e0:2a:e2:84:e8:b6:32:
                    91:3c:9c:60:bc:20:de:84:e8:af:90:fc:06:3a:40:
                    14:84:17:44:73:86:24:24:74:61:9b:78:31:2b:2f:
                    72:59:8a:4c:3f:37:47:a1:3a:fa:06:bb:1d:66:3a:
                    77:e4:fb:8b:05:c1:be:16:a9:10:93:cd:72:aa:7a:
                    54:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3F:C4:58:16:D3:95:F7:27:49:21:27:08:C9:A3:9A:F7:F1:E6:63
            X509v3 Authority Key Identifier:
                keyid:F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:7e:a0:10:0f:15:49:e1:f0:fe:38:b2:e9:9c:fc:71:75:38:
         4c:d2:d0:b9:8d:dd:d1:e8:ce:d7:82:cf:13:be:fc:27:28:cd:
         f8:c4:19:5c:63:c9:e6:b1:51:e3:2c:d7:85:67:10:59:10:c8:
         47:8a:21:f2:21:1c:df:eb:7c:28:45:08:f4:c7:6a:88:69:b4:
         61:88:17:c4:fe:03:89:36:d1:b4:59:9a:1b:72:1c:ee:2e:eb:
         e3:c2:11:c2:ab:18:ab:0f:83:0e:1f:93:a0:1d:c9:f1:34:53:
         55:23:85:eb:3e:7a:da:e6:e0:22:c4:8f:6a:f5:eb:4b:2d:4a:
         3a:71:ed:dc:25:33:53:c0:5e:26:75:f0:a8:83:4d:80:f9:7e:
         9a:c0:86:cf:20:0a:2d:ef:b0:9b:c7:cf:88:26:49:48:ec:d9:
         53:20:a9:5f:82:df:ce:5f:e4:d7:62:bc:7d:45:ad:fb:c3:35:
         8a:f9:83:38:3a:8c:0d:a8:a0:ae:6e:55:57:73:a7:0e:b2:ef:
         ae:d7:08:c8:93:ae:dc:ab:c2:96:e7:d5:56:f4:9d:93:4f:69:
         1a:a4:08:bf:93:47:52:62:44:ec:af:b5:bc:86:e4:21:e0:de:
         70:db:a7:42:18:6f:11:c9:a6:01:e3:1b:96:19:3a:2d:b8:0a:
         5d:9b:53:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:17 2026 by rpki-client