Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
File:                     HY6rk1MM_VDaf7faXroKpEDJ7ww.mft (raw, json)
Hash identifier:          FjagQ5XzrfC6zQcYRDWRLdhF1UiUufgeViDK57yYyKk=
Subject key identifier:   94:44:89:19:6C:BA:09:AD:54:35:F6:6C:5D:12:12:03:BE:C9:5C:A6
Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
Certificate issuer:       /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Certificate serial:       019E9CCE6011603F70310131E75D9CE96063
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
Manifest number:          110B
Signing time:             Sat 06 Jun 2026 12:00:31 +0000
Manifest this update:     Sat 06 Jun 2026 12:00:31 +0000
Manifest next update:     Sun 07 Jun 2026 12:00:31 +0000
Files and hashes:         1: HY6rk1MM_VDaf7faXroKpEDJ7ww.crl (hash: L7snRNzQFex2cHTrE+remeRzjLzYy2IS6kZvw0sPrYg=)
                          2: YuZ5WXiv26JqcpRPGf_w1FamtRI.roa (hash: EaYcDNS6rfkVwheyBkzxUL8l/p2YFFRpDmPTFV/xjl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 12:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9c:ce:60:11:60:3f:70:31:01:31:e7:5d:9c:e9:60:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
        Validity
            Not Before: Jun  6 12:00:31 2026 GMT
            Not After : Jun  7 12:00:31 2026 GMT
        Subject: CN=944489196cba09ad5435f66c5d121203bec95ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1b:15:85:52:64:49:20:ca:33:9c:8f:30:f4:
                    79:75:31:e3:0a:39:6f:99:de:15:08:98:c6:28:e3:
                    fb:56:57:1d:1a:e6:1f:f9:42:ff:87:88:97:cc:c8:
                    29:05:d0:26:a9:52:a5:d8:b5:e5:b8:d0:a6:44:6f:
                    48:0d:da:8a:13:53:59:f7:cb:ae:4b:ab:3c:21:c2:
                    0b:ee:4f:9a:23:5a:aa:cf:9d:98:ad:fa:f4:44:9a:
                    22:27:75:78:2a:a8:15:35:e5:59:10:8c:71:e0:28:
                    07:ce:c7:7e:ba:90:fd:56:fb:89:9a:f3:32:a0:4e:
                    1f:81:16:ea:46:2c:5c:56:52:07:3b:87:04:35:1b:
                    d5:4c:5e:43:ad:d7:ef:46:55:b8:9e:a8:8a:97:68:
                    5e:b8:a9:b1:0d:f3:a0:0e:9e:06:ff:8b:6b:96:22:
                    56:1b:88:c6:8a:46:59:a6:d1:a9:00:9a:f1:58:b9:
                    42:f8:b3:6b:47:2e:f9:6b:cd:10:25:57:4c:34:bf:
                    50:c1:c3:92:9f:d5:56:42:6d:a9:e4:5b:46:59:5b:
                    66:4b:5a:01:88:62:f6:61:4b:e5:32:53:7e:6f:f2:
                    ae:d7:bb:3f:5a:50:fb:34:e6:5f:b9:c5:8d:80:59:
                    7a:69:ce:c7:e1:46:bd:18:50:4c:97:40:74:72:84:
                    61:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:44:89:19:6C:BA:09:AD:54:35:F6:6C:5D:12:12:03:BE:C9:5C:A6
            X509v3 Authority Key Identifier:
                keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:1d:b0:89:8c:e4:c0:92:b3:f6:c6:07:d4:c4:c9:16:c3:4c:
         88:f0:1d:41:4b:8b:39:5c:a2:de:91:a3:ef:2b:3a:62:27:46:
         c0:ce:34:1b:38:dc:28:6c:83:e4:a5:62:24:7d:9e:eb:ed:6e:
         ad:3c:a9:79:6c:37:f4:69:d5:fd:80:74:28:d8:3d:bc:2e:c7:
         06:05:4d:a5:c5:ff:b7:4d:d3:7f:5a:47:24:6f:f3:69:b9:d8:
         f8:e6:c7:83:53:39:6a:17:62:29:55:69:d6:71:a9:2f:4e:6f:
         fd:25:10:05:3a:76:7e:1d:d0:51:9c:01:fd:20:a5:18:53:a4:
         7f:e0:46:af:87:cf:19:55:79:7b:5d:bc:74:82:18:99:4f:e0:
         ee:5a:0b:7c:1c:b9:fe:08:7b:50:9c:74:80:33:b2:af:97:aa:
         cc:e1:b5:57:49:90:d6:6c:52:70:53:92:8c:66:1c:62:69:0c:
         4e:4b:7e:61:a2:a8:8e:04:3b:06:ff:b7:23:c6:a2:4e:bf:b7:
         21:7d:e2:da:de:4f:ee:72:02:e8:d3:77:59:0f:4e:b8:2f:d9:
         14:c4:f8:c6:3a:43:a1:d0:5d:59:9b:a9:55:a2:cc:e0:fe:00:
         78:97:cf:a5:b6:8c:dd:93:04:a7:66:08:d2:db:ab:a1:12:4d:
         20:12:e3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:57:48 2026 by rpki-client