Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
File:                     yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft (raw, json)
Hash identifier:          13h9YAC4bPOV+fwMO2seyejN4Wm+Ny4ESx3JIz9YC2g=
Subject key identifier:   80:6E:C9:AA:28:A0:F1:48:10:56:2D:77:05:BA:A5:1E:4B:C8:87:27
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Certificate issuer:       /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial:       019EC224B32467C3C4A8C85B7729609626FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
Manifest number:          1961
Signing time:             Sat 13 Jun 2026 18:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:45 +0000
Files and hashes:         1: YNrng7LuWkCZkAtvO0FUnnpdapY.roa (hash: LVcYH4intwAxq/uJ9kNbCKuqV5DBz8cARMAEmR1qWHM=)
                          2: jB3wCiu-AvDKO3DTXUCgLV9LXBA.roa (hash: 1qE+PeKCdqwLTMKhlG/DvcYz45q96dHEsGiuDU6+/bM=)
                          3: yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl (hash: QbjIAfJiNQzyU7SBbJGGygCpZDNbfFYP8DrHFw7+vws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:b3:24:67:c3:c4:a8:c8:5b:77:29:60:96:26:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
        Validity
            Not Before: Jun 13 18:00:45 2026 GMT
            Not After : Jun 14 18:00:45 2026 GMT
        Subject: CN=806ec9aa28a0f14810562d7705baa51e4bc88727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:39:9f:56:e1:a9:db:2f:88:27:61:62:09:42:
                    02:96:16:6e:fe:1f:cb:e8:ff:51:da:c4:cb:99:ad:
                    73:36:8f:82:d2:0d:6e:ea:b7:c2:8a:e1:7b:c7:ee:
                    10:94:4b:83:8c:b6:69:25:9a:c6:88:ef:a2:a5:8a:
                    a2:fd:50:03:07:4f:9e:e7:1b:3b:29:c3:25:76:1d:
                    53:6e:96:0e:39:cb:04:22:92:bb:80:1d:ed:5b:e2:
                    50:24:91:7f:53:ca:e1:af:93:b6:43:bf:50:b0:f6:
                    6b:5f:34:f6:93:ed:37:c5:e7:6c:7a:4d:35:0d:9e:
                    91:28:c4:32:94:6e:87:0d:cc:56:ba:64:a6:71:26:
                    c9:21:dc:7b:04:cd:9d:d4:b0:8c:a8:32:22:27:44:
                    cb:23:f9:ce:7f:b3:88:9d:d5:b1:eb:01:fb:28:4c:
                    f3:42:17:c4:f7:e6:b3:8d:b0:c3:a7:46:42:97:21:
                    92:1a:c2:05:0f:c9:2d:9d:3d:f2:d9:33:86:98:a3:
                    2a:f9:fd:75:19:e5:41:ec:3c:07:fc:40:aa:02:f3:
                    69:ca:d3:14:7c:e0:4d:2d:93:13:52:59:5d:9d:4e:
                    1c:c7:9b:13:4c:df:35:55:6f:5d:96:53:7a:68:d6:
                    16:b5:9a:62:d7:ea:1f:1b:d7:51:04:c4:7a:4e:9b:
                    ab:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6E:C9:AA:28:A0:F1:48:10:56:2D:77:05:BA:A5:1E:4B:C8:87:27
            X509v3 Authority Key Identifier:
                keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a6:03:cc:d9:38:1e:98:c1:a0:29:bd:06:e7:44:7d:6b:73:
         da:7c:c8:bc:50:8b:b2:0c:5a:25:b9:d1:69:5e:53:d2:21:98:
         c7:63:7d:b7:51:1c:6a:b1:86:44:d2:9a:c8:25:ae:2b:8a:2d:
         6c:c7:a6:d7:53:82:88:98:ad:a1:2f:d5:c9:5e:2e:35:9c:cb:
         8b:95:4e:3d:90:a9:af:c7:a4:10:41:8c:4c:c1:8d:9a:86:16:
         5f:9b:0d:2a:f4:b6:6e:11:9e:78:4a:92:0c:70:15:9e:45:db:
         2a:27:d4:33:77:b5:70:f5:d6:f9:25:bf:93:cc:6e:35:5a:b9:
         59:a3:7c:ab:0a:ee:fb:fe:1c:4b:37:fe:ca:0b:4a:7d:8f:dc:
         a9:59:0a:9d:2a:86:d5:23:4c:34:2e:31:97:07:1f:6a:b8:fa:
         1e:cc:5a:e0:94:c3:18:16:ee:ab:a6:c9:cb:a9:63:4b:61:d8:
         56:35:5c:f1:c0:45:cc:af:c2:82:94:e0:fc:cd:b0:7d:38:94:
         0a:18:6a:b7:51:bf:e8:96:b5:92:0c:6f:43:8e:48:bb:57:42:
         dd:b7:94:1a:57:36:23:d4:9e:f2:e3:16:9e:bb:8b:cd:d5:23:
         79:d2:f2:a4:e2:6f:01:cf:d1:f6:6b:f3:9f:8b:7b:48:e5:08:
         ff:4d:a9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:28:15 2026 by rpki-client