Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
File:                     YzCxTOdPYKjqSrtuqmDuRHD0On8.mft (raw, json)
Hash identifier:          wl4NYrFRu1HAOPb2Rv/sxOGfWu1q8ihwmwtoi/TTJjw=
Subject key identifier:   4B:09:AC:79:6F:CF:12:59:F9:D1:8F:1D:59:FF:43:89:CD:8A:EF:62
Authority key identifier: 63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F
Certificate issuer:       /CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f
Certificate serial:       019EB732EF1AB9DFE13FDF1EC8A5A4DFBC0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
Manifest number:          02B6
Signing time:             Thu 11 Jun 2026 15:00:28 +0000
Manifest this update:     Thu 11 Jun 2026 15:00:28 +0000
Manifest next update:     Fri 12 Jun 2026 15:00:28 +0000
Files and hashes:         1: 30S6gV2oh78DXtrqvndtvSPPKd4.roa (hash: OcTAJVeDjRXR19iBC0Wj5Tjt34V2Iwuh2sKP2/1+Fgg=)
                          2: YzCxTOdPYKjqSrtuqmDuRHD0On8.crl (hash: 5rOrisUoSTO5GOEk2j5svl0fOD4Fw6TQFy+sRX9O+fQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:32:ef:1a:b9:df:e1:3f:df:1e:c8:a5:a4:df:bc:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f
        Validity
            Not Before: Jun 11 15:00:28 2026 GMT
            Not After : Jun 12 15:00:28 2026 GMT
        Subject: CN=4b09ac796fcf1259f9d18f1d59ff4389cd8aef62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:57:1b:3c:f1:d8:aa:ee:f6:6a:a1:a4:94:54:
                    eb:27:82:22:91:1b:b7:ad:a7:c1:43:0d:a2:96:f6:
                    6a:f7:58:cd:ea:de:e9:fa:35:6e:a5:e1:a5:95:1d:
                    a8:d3:66:b8:10:a3:85:a3:0d:61:8b:a1:39:93:bb:
                    dc:ad:4e:20:e3:57:32:b4:9c:1c:ef:c3:7d:04:dd:
                    5f:e1:7a:22:f8:de:32:58:75:43:b3:f8:58:6b:33:
                    a2:b4:1a:13:c8:77:f8:73:3f:e9:f9:61:2d:f2:74:
                    1b:0d:75:d7:0c:cf:03:06:0d:a3:80:bd:72:45:b4:
                    1c:06:e2:61:82:41:d7:59:e8:d5:1f:06:7f:f6:b5:
                    00:a9:b6:8e:8e:37:7b:59:1c:ec:32:cf:29:ab:70:
                    62:40:2d:1b:a1:f1:e2:45:63:62:a5:96:21:5c:8c:
                    88:96:e2:07:53:28:26:9b:b0:e9:3c:8a:f3:55:3a:
                    06:07:e2:b8:6c:c0:53:54:8d:12:60:10:44:dc:61:
                    39:a4:68:85:9d:9a:da:f5:bb:7d:bb:aa:bf:bd:c7:
                    2b:c3:05:7d:5a:13:80:92:4b:3e:4f:5f:58:c4:69:
                    1a:43:a9:1b:ea:52:40:54:44:ce:3c:68:1f:2f:b0:
                    76:d6:21:84:96:db:08:95:7b:27:7f:90:7f:1c:1e:
                    7e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:09:AC:79:6F:CF:12:59:F9:D1:8F:1D:59:FF:43:89:CD:8A:EF:62
            X509v3 Authority Key Identifier:
                keyid:63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b6:65:85:99:b7:b0:a8:26:a6:6f:00:53:1c:13:ae:8f:72:
         df:44:27:2f:e3:c5:2f:25:e4:45:61:43:2c:11:10:1c:c7:22:
         b0:61:00:f5:73:f3:99:bc:1c:36:90:ae:b4:13:ba:70:32:b9:
         ca:b6:8f:da:24:b0:04:5b:6f:59:5d:cb:96:d9:f0:27:89:c2:
         f8:10:1f:02:04:f6:38:4c:02:0b:91:4b:2b:a8:eb:fd:4f:eb:
         ae:a2:80:1f:ec:10:66:30:93:b8:62:cf:d2:d0:6c:29:cd:44:
         53:39:af:93:33:b2:6b:f0:24:4b:5e:29:77:8f:8c:53:72:7d:
         70:f4:16:37:31:1b:12:20:b3:1f:a6:66:2e:ed:cd:46:94:6f:
         24:59:19:9b:be:6f:5a:84:5c:1f:fb:92:89:67:6f:4f:ab:01:
         92:9e:15:bf:b2:1b:d3:aa:5b:d0:81:49:2d:50:72:cb:c4:e2:
         28:86:45:d3:81:6f:cb:51:2d:fe:de:2b:a7:32:03:b7:fa:51:
         5b:fd:62:13:4c:65:a6:5e:ce:e0:76:4d:5b:0a:01:65:15:9f:
         c7:be:0d:d2:41:1e:fa:2d:c5:74:77:f8:d5:3e:73:8a:bc:1e:
         bb:03:b2:69:10:4d:d7:86:ef:84:6d:c9:43:25:90:13:97:35:
         25:b7:6f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:10:37 2026 by rpki-client