Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
File:                     dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json)
Hash identifier:          TgS4hwt5oq8Pbd62aWiB9mQL2V/iIJ9hjYuTIrX/+jc=
Subject key identifier:   A0:93:95:47:0F:46:E7:37:57:41:F1:AB:72:50:A0:5A:67:6E:CD:2E
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Certificate issuer:       /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial:       019EB9FD6EC317E1ABAE9F071E3A59F5039C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
Manifest number:          18ED
Signing time:             Fri 12 Jun 2026 04:00:54 +0000
Manifest this update:     Fri 12 Jun 2026 04:00:54 +0000
Manifest next update:     Sat 13 Jun 2026 04:00:54 +0000
Files and hashes:         1: 1xBlob06V4OZHwqAUkwFisJ8hbE.roa (hash: fUNS9n+gbfLHDdSyjCsCUEORZD+YjwBO+Q4C1PMroB0=)
                          2: JchC90yjmUCoGpTy_G9JV_hpnDA.roa (hash: y6rgHhMgSwSF+hb/ru1il5IUm+2sXbyrH9l61ZHVZEc=)
                          3: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: d6YBa4ObZ/yXUGEPXiERP5EjUZQdTzYbIZ1/c5kO8So=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:fd:6e:c3:17:e1:ab:ae:9f:07:1e:3a:59:f5:03:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
        Validity
            Not Before: Jun 12 04:00:54 2026 GMT
            Not After : Jun 13 04:00:54 2026 GMT
        Subject: CN=a09395470f46e7375741f1ab7250a05a676ecd2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:25:a4:f6:e7:00:4b:f9:bd:51:24:59:57:fc:
                    9d:7d:6c:fe:19:41:4b:87:df:4f:31:42:64:84:70:
                    21:7d:bc:b2:b2:2d:08:a7:8d:ef:f4:f0:20:80:e7:
                    27:6c:92:e2:65:68:33:05:b3:9b:42:3c:0a:a2:00:
                    f9:7c:f0:43:01:7f:5d:10:96:71:54:93:78:28:f1:
                    c0:9a:2c:3d:5f:ec:ca:a3:43:d5:db:a6:c1:62:47:
                    76:56:55:19:2e:18:fd:d9:24:f5:5f:ee:c9:dc:cf:
                    70:20:cd:bf:4d:8a:95:bc:a5:87:45:5d:1c:5b:41:
                    cc:bc:ef:ab:07:d6:80:c2:79:23:27:58:09:7b:1c:
                    4a:c9:21:76:0b:71:b8:07:4e:fb:92:a9:fe:ab:e9:
                    5f:e8:f9:bb:94:5e:90:8e:0d:2b:6b:65:fa:7e:21:
                    4a:2a:86:2c:49:1c:25:a8:a6:45:58:b5:15:4c:6b:
                    39:73:58:ce:8a:f5:cc:0f:4d:f5:53:0f:2c:42:5a:
                    0b:9c:2f:a9:a6:04:0d:22:89:22:73:e0:92:49:a8:
                    2b:a0:ba:e9:2d:1e:6d:6a:c8:60:bd:be:02:49:ef:
                    90:f7:2f:cd:dd:62:de:dc:9d:ca:e4:40:95:7d:1b:
                    40:8f:07:c3:17:4e:c8:0d:9e:8c:70:69:e6:20:ff:
                    77:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:93:95:47:0F:46:E7:37:57:41:F1:AB:72:50:A0:5A:67:6E:CD:2E
            X509v3 Authority Key Identifier:
                keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:86:5c:6e:28:09:6f:68:17:b6:99:e9:eb:30:16:0d:7b:0c:
         0b:40:fc:f9:c1:af:5d:c9:df:83:8a:1f:25:b6:a2:bc:49:c2:
         d7:c5:92:cf:bf:a7:5c:22:71:6c:2b:ed:a0:af:ef:66:6c:05:
         7b:38:80:84:8b:04:b1:df:da:09:ce:00:57:18:6b:8c:a4:6a:
         82:e0:02:cb:71:eb:be:d1:05:5c:36:9b:39:57:61:3f:8a:d4:
         7a:42:bc:10:73:2d:24:08:47:c1:59:3d:f0:9e:6d:ff:cb:e1:
         f4:ea:86:8d:07:b3:61:32:27:7c:59:d5:2b:81:28:c4:1d:07:
         70:cc:43:5b:10:2d:03:e1:3a:ff:ef:e9:e5:0c:43:c8:71:ff:
         ef:38:00:5e:ca:2e:55:00:b4:36:92:cb:a2:95:56:1f:db:2e:
         3f:e9:89:9d:c2:9c:12:38:d7:3f:3a:d8:4a:1c:5b:fe:ab:33:
         51:02:ef:25:42:dd:0f:07:c0:f9:34:3f:9d:71:b3:d9:fd:ba:
         03:06:2b:54:c4:14:df:ce:65:b9:62:90:15:e4:66:ea:91:c2:
         eb:70:ef:e9:b6:b4:ff:a3:bb:91:30:50:bd:25:98:58:71:2b:
         d5:38:25:bb:c5:94:fe:8e:64:4b:e6:75:7f:9d:57:31:05:06:
         85:47:43:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 13:52:08 2026 by rpki-client