Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft
File:                     YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft (raw, json)
Hash identifier:          GS6lFFUBdA+oK/b+9Ef6EYQTA4DCNbxpRiYTwDYzvzM=
Subject key identifier:   22:FF:29:A1:88:45:E8:11:A4:98:92:B3:BD:26:9F:0A:30:66:04:52
Authority key identifier: 62:3C:52:CC:DA:E5:62:9F:CF:70:C1:91:DB:FE:A3:AB:6D:54:97:44
Certificate issuer:       /CN=623c52ccdae5629fcf70c191dbfea3ab6d549744
Certificate serial:       019E769D305D5FF104EC4A4E9FCC549B2F39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft
Manifest number:          0113
Signing time:             Sat 30 May 2026 02:01:13 +0000
Manifest this update:     Sat 30 May 2026 02:01:13 +0000
Manifest next update:     Sun 31 May 2026 02:01:13 +0000
Files and hashes:         1: YjxSzNrlYp_PcMGR2_6jq21Ul0Q.crl (hash: h57wKXQr6LfD3TRN+gkZEquUtmEA9+2X+sKdZJv3jJI=)
                          2: qLtdjMaYYUHUKpxEyfvu-Lg0bgk.asa (hash: J2X18n3waDdkd9hEMyPEI6UzN5Mlccq2mc0wjMIT8Og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 31 May 2026 01:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:76:9d:30:5d:5f:f1:04:ec:4a:4e:9f:cc:54:9b:2f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=623c52ccdae5629fcf70c191dbfea3ab6d549744
        Validity
            Not Before: May 30 02:01:13 2026 GMT
            Not After : May 31 02:01:13 2026 GMT
        Subject: CN=22ff29a18845e811a49892b3bd269f0a30660452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c2:35:15:03:e5:a8:73:09:8e:88:ee:a0:3a:
                    07:30:72:93:4e:23:85:18:66:2c:6a:b7:e8:ad:1c:
                    d9:58:3d:2a:79:26:89:a6:ab:12:e7:09:fa:cb:ee:
                    50:94:3b:11:8f:5e:bb:a7:56:50:6a:e1:90:4b:e7:
                    d3:56:9f:9c:4c:27:27:af:f8:f2:10:b0:7d:20:68:
                    2f:47:76:9a:c7:2c:d7:0a:60:c7:a7:07:aa:da:ae:
                    96:b8:aa:9e:ac:c6:81:a0:a1:93:e4:71:b4:0f:a6:
                    50:d3:09:3c:cb:f7:ae:2e:eb:dd:99:02:47:3c:76:
                    8c:09:08:70:8d:e6:4b:1c:37:a8:81:41:25:31:8d:
                    eb:98:90:21:f0:da:48:bd:c8:7a:4c:36:52:1b:ac:
                    67:6a:46:7e:cf:0f:25:ec:b6:ef:0f:42:73:49:fc:
                    91:72:a3:09:8d:54:8b:a3:ab:7f:28:59:94:45:f8:
                    b3:40:14:02:08:ad:eb:27:24:20:31:7c:d9:9e:0d:
                    ab:08:ba:02:71:0a:c1:3a:ef:ff:3d:c2:25:34:6b:
                    3f:02:0c:d8:56:69:d3:d0:53:73:7a:53:2c:63:ec:
                    64:47:cd:f8:47:81:80:28:f7:d6:45:e5:8b:e4:80:
                    41:6a:1b:6c:ba:40:c0:e6:db:22:dc:67:38:a7:d7:
                    1d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FF:29:A1:88:45:E8:11:A4:98:92:B3:BD:26:9F:0A:30:66:04:52
            X509v3 Authority Key Identifier:
                keyid:62:3C:52:CC:DA:E5:62:9F:CF:70:C1:91:DB:FE:A3:AB:6D:54:97:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:72:34:4a:d2:8b:e4:fc:01:15:f7:fe:35:40:6e:28:56:c8:
         ff:86:bf:42:cd:a6:5c:ad:c2:9f:ce:82:9d:8c:6d:17:b6:94:
         26:bc:b2:46:d9:73:95:da:d8:35:18:09:92:ff:1a:61:7e:c6:
         8e:7d:6c:6b:13:e4:3b:48:77:a2:97:1f:9b:af:dc:82:10:7a:
         02:10:75:be:09:95:84:08:21:65:16:5e:4a:c3:4d:05:2c:51:
         b3:22:df:b0:69:0b:0f:04:22:ac:f3:d2:cd:e2:43:25:8e:50:
         42:b8:4b:2b:fc:7c:e7:00:8e:a6:2a:75:5e:ce:39:b0:dc:e3:
         0b:53:c2:f8:08:f5:e7:fa:d3:dc:33:6a:0f:30:ca:c0:88:b7:
         6f:7a:87:7d:e6:90:5e:a1:e1:f8:61:1d:93:0b:a6:16:d7:77:
         4a:f2:6f:14:49:00:01:4c:a5:c7:69:66:49:68:c0:6e:15:f5:
         98:1d:37:b4:e8:c4:89:b9:33:85:ca:17:68:38:66:ae:ca:61:
         91:15:bd:c6:79:07:1b:db:61:d6:b0:26:39:03:af:4d:3a:f9:
         ad:04:b3:c0:0a:cd:dc:8a:4f:ab:c3:7d:f4:97:6e:04:05:4b:
         16:00:56:bd:0a:6d:eb:cc:5b:2c:59:a3:56:95:53:94:2f:42:
         27:35:38:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 09:52:43 2026 by rpki-client