Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
File:                     Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft (raw, json)
Hash identifier:          V/huQ0QfjUMX3uTA3RQ8yR53uOI9GyLq5H6wZO44rYE=
Subject key identifier:   CC:22:ED:4F:D1:17:70:01:9C:16:3E:D1:8B:E7:4F:EF:E2:3E:6F:0D
Authority key identifier: 61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8
Certificate issuer:       /CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
Certificate serial:       019EDC8958E3634B4707FC95686F4915F0D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
Manifest number:          0DFA
Signing time:             Thu 18 Jun 2026 21:00:49 +0000
Manifest this update:     Thu 18 Jun 2026 21:00:49 +0000
Manifest next update:     Fri 19 Jun 2026 21:00:49 +0000
Files and hashes:         1: Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl (hash: A9bxGrWlULk1er+M9PDzOSB8KELVFgfOrQspx568+XY=)
                          2: pgpahIBh1JVMRLJjJw7ASp6a1Cg.roa (hash: L10pq0OGKRh0sHJ3XX+pOGwbnH1MYXhkG9/kZOYZEMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Jun 2026 20:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:dc:89:58:e3:63:4b:47:07:fc:95:68:6f:49:15:f0:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
        Validity
            Not Before: Jun 18 21:00:49 2026 GMT
            Not After : Jun 19 21:00:49 2026 GMT
        Subject: CN=cc22ed4fd11770019c163ed18be74fefe23e6f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:24:c9:93:94:d4:a5:1b:4b:96:98:d2:a7:62:
                    f5:80:0f:51:a4:0a:91:be:1a:20:38:68:08:7f:ef:
                    f1:bd:97:b2:32:de:ac:fe:bc:a2:67:9c:7d:4d:99:
                    4c:e3:d0:32:40:c6:e3:23:8b:17:34:87:6a:7f:fd:
                    c6:48:05:3a:c6:11:c0:7a:cc:10:5a:dd:a4:6e:87:
                    8a:ea:5f:84:d7:61:56:f8:68:0c:65:5a:40:c5:69:
                    8b:49:af:18:1a:2e:fa:9b:bc:2a:e0:e7:62:92:8e:
                    05:78:8e:05:6a:d4:c8:98:c4:3e:c5:13:39:8f:0c:
                    a0:4d:6b:36:7d:dc:1e:84:4e:c8:3c:bb:da:c5:6f:
                    37:10:d8:a0:bc:01:ba:bd:5b:92:d7:07:e6:30:21:
                    1c:f0:43:06:a6:98:4d:54:91:d5:a5:22:2c:e4:77:
                    bc:98:63:1d:9f:87:07:cf:54:ae:f0:06:81:8d:01:
                    74:64:46:05:ff:16:94:1b:6d:1c:2f:ef:40:56:04:
                    aa:19:37:f3:fc:b9:fe:9b:a0:f3:d5:a2:d7:6c:0f:
                    bd:69:25:9b:28:d0:73:b8:19:6a:24:5b:ff:2a:88:
                    a4:7c:f8:0b:e5:45:94:4f:ee:b5:0e:1c:ac:a9:75:
                    2c:f5:25:95:b0:23:8f:82:08:2e:d7:7a:1a:a8:12:
                    d9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:22:ED:4F:D1:17:70:01:9C:16:3E:D1:8B:E7:4F:EF:E2:3E:6F:0D
            X509v3 Authority Key Identifier:
                keyid:61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:6f:f1:d4:97:8e:1d:8b:6d:b9:6a:23:e1:de:4b:5e:f2:03:
         46:88:d1:38:73:ff:68:83:0b:07:53:fc:f5:d4:49:3c:eb:f1:
         11:d9:7f:da:8f:ac:39:e8:7e:76:d9:6f:df:29:9b:69:a8:09:
         f0:db:5e:9e:0f:52:f9:3b:e6:50:e7:82:fc:32:41:5c:84:8b:
         ad:0d:b8:38:3a:ca:a6:4c:04:49:21:fd:ad:2e:ce:e0:7e:d9:
         2c:2d:a1:13:6c:2b:d2:c2:bf:2a:75:f4:f9:d2:3a:a1:ad:42:
         07:80:c7:c1:d8:0f:2e:61:39:87:f9:0e:3a:c6:ea:ea:cc:eb:
         52:28:6d:52:5a:a1:1b:58:d7:d4:71:84:87:da:43:cb:31:f8:
         9e:db:af:6b:b1:6a:15:dd:63:e5:55:35:a4:bb:b9:f0:5d:65:
         14:55:b7:c3:39:91:50:c1:fe:d8:42:d8:20:7c:fb:56:15:3c:
         97:b5:37:f7:10:9b:85:22:c4:5d:2e:96:0f:36:35:45:c9:b5:
         39:fd:a2:1d:35:ad:f4:cc:8f:ff:e7:01:0e:87:90:94:ba:d3:
         ba:2e:c2:4c:a1:8e:79:49:1e:85:33:85:4f:20:4b:07:23:9e:
         18:05:59:e4:ac:ce:92:5d:b4:b3:c8:36:53:80:e1:46:fd:cc:
         f7:d4:24:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 04:29:17 2026 by rpki-client