Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/2ff188-67de-42a0-8bcd-34d29bb1cd85/1/Y19_IAVMT72i3k7Yf19kH5NbA4Y.mft
File:                     Y19_IAVMT72i3k7Yf19kH5NbA4Y.mft (raw, json)
Hash identifier:          t5qrZRimcHZEmLEkWn39CtKeBdlcgdIsGJbvFS1UUv8=
Subject key identifier:   71:91:7F:F0:09:53:32:E2:95:B6:48:18:6E:F7:68:95:B3:E2:76:89
Authority key identifier: 63:5F:7F:20:05:4C:4F:BD:A2:DE:4E:D8:7F:5F:64:1F:93:5B:03:86
Certificate issuer:       /CN=635f7f20054c4fbda2de4ed87f5f641f935b0386
Certificate serial:       019EB9C5DB91B9EA1F2FFDDD2246B412588D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y19_IAVMT72i3k7Yf19kH5NbA4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/2ff188-67de-42a0-8bcd-34d29bb1cd85/1/Y19_IAVMT72i3k7Yf19kH5NbA4Y.mft
Manifest number:          3E
Signing time:             Fri 12 Jun 2026 03:00:12 +0000
Manifest this update:     Fri 12 Jun 2026 03:00:12 +0000
Manifest next update:     Sat 13 Jun 2026 03:00:12 +0000
Files and hashes:         1: KpSiFlpQT5dMSWFR8bhyaB5lV0E.roa (hash: b+M/pWTjrzDu/kT2jGIzR1Dtt5OUtfCqD8vNrO/FXP8=)
                          2: Y19_IAVMT72i3k7Yf19kH5NbA4Y.crl (hash: X5IzKKH7Z9zbBkbKmfF7gWyZSZFI0s6pmwOxmrGS/iI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/2ff188-67de-42a0-8bcd-34d29bb1cd85/1/Y19_IAVMT72i3k7Yf19kH5NbA4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/2ff188-67de-42a0-8bcd-34d29bb1cd85/1/Y19_IAVMT72i3k7Yf19kH5NbA4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y19_IAVMT72i3k7Yf19kH5NbA4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 03:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:c5:db:91:b9:ea:1f:2f:fd:dd:22:46:b4:12:58:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=635f7f20054c4fbda2de4ed87f5f641f935b0386
        Validity
            Not Before: Jun 12 03:00:12 2026 GMT
            Not After : Jun 13 03:00:12 2026 GMT
        Subject: CN=71917ff0095332e295b648186ef76895b3e27689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:61:30:8b:84:8c:9e:2a:8c:de:c6:d5:0d:62:
                    fe:dc:4a:a2:5b:ed:0e:79:61:03:9a:fc:b7:39:18:
                    21:e4:8d:19:37:56:6b:ed:92:d8:c5:91:9d:ab:5d:
                    49:a4:1b:41:52:f8:40:86:df:d1:4d:42:1b:73:51:
                    c9:dd:ed:5f:9f:e3:6e:4b:af:b1:9e:c8:af:a1:54:
                    c3:3f:85:57:ad:2f:26:57:83:83:6e:5e:46:4e:c9:
                    6f:3f:b9:2d:db:0b:98:1f:25:94:9f:30:4f:57:a2:
                    1d:6e:10:3b:a8:91:75:3b:41:6b:a6:82:fb:7d:55:
                    37:6e:c5:14:fc:a9:18:88:cc:87:ac:4e:5b:61:79:
                    8a:23:59:aa:93:0e:ff:b9:d7:81:db:02:b8:be:47:
                    e8:ce:90:66:9f:ce:c6:82:d6:72:5d:ce:7d:b9:09:
                    e3:ec:77:08:ce:30:58:ae:d8:6c:5e:94:3c:20:f3:
                    11:a3:ea:ed:6b:bf:a4:cb:5c:81:12:04:f8:4f:c1:
                    3c:11:f0:3f:63:36:29:7c:b9:71:5e:c3:f5:58:80:
                    c1:46:77:d6:e2:ee:e9:d3:32:f2:79:5a:16:19:30:
                    e4:fb:21:d8:99:7b:4b:bd:2e:22:a8:0e:97:7e:81:
                    e5:64:f0:f6:26:64:41:be:b9:1e:87:fd:07:6d:89:
                    d1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:91:7F:F0:09:53:32:E2:95:B6:48:18:6E:F7:68:95:B3:E2:76:89
            X509v3 Authority Key Identifier:
                keyid:63:5F:7F:20:05:4C:4F:BD:A2:DE:4E:D8:7F:5F:64:1F:93:5B:03:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y19_IAVMT72i3k7Yf19kH5NbA4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/2ff188-67de-42a0-8bcd-34d29bb1cd85/1/Y19_IAVMT72i3k7Yf19kH5NbA4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/2ff188-67de-42a0-8bcd-34d29bb1cd85/1/Y19_IAVMT72i3k7Yf19kH5NbA4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:96:35:ae:79:b1:b5:57:f7:0a:c8:cb:bd:5a:ef:24:79:0c:
         d6:46:a7:c1:33:6b:ea:d8:cc:f7:d3:4b:0e:71:cc:8a:bb:4a:
         b3:06:6c:cb:02:d4:6e:08:dc:7a:e2:37:74:98:c0:f1:02:80:
         a0:27:11:7d:f5:e8:df:ff:07:82:d1:5a:41:18:db:86:43:33:
         a6:ba:f3:e7:bc:78:7b:0e:c4:27:18:1c:c4:10:e2:e2:d5:89:
         6b:ea:0a:9a:72:f1:e5:27:4f:02:ed:be:6e:cb:8a:6b:03:a3:
         07:f7:2b:1d:15:26:79:58:a0:94:e8:c3:77:54:fd:56:77:86:
         3a:3e:d8:49:b1:62:d2:8c:5f:b9:50:fb:24:e1:9e:fe:1e:ab:
         f9:f4:3b:dc:c1:93:e9:82:f1:06:2e:da:f1:ed:c0:52:72:35:
         76:e9:59:8d:eb:d7:b0:ff:cc:3e:46:69:4c:a1:bf:b7:65:b2:
         4d:35:74:b2:02:a1:f0:c5:bf:78:13:86:44:93:39:b1:78:9b:
         a4:65:fb:1a:be:37:8a:8b:d1:c2:6c:cf:ce:15:f7:a1:b2:99:
         a0:dc:b6:ee:6b:5f:43:e8:2a:fb:f0:56:cb:ee:27:ec:6e:5f:
         fb:97:a3:f8:3b:ff:19:ab:d6:17:9c:72:e8:19:27:3e:42:2f:
         d5:19:74:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:42:30 2026 by rpki-client