Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
File:                     aYLwUTKpmJUH6_bumJUYdTuizbU.mft (raw, json)
Hash identifier:          iY8xuRv9FJVXIe82g3uNTaU1lzTHKIcndr13PLaWdtQ=
Subject key identifier:   ED:23:76:52:7C:F7:07:9F:8B:CB:BE:18:66:9F:D0:20:60:02:CF:24
Authority key identifier: 69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5
Certificate issuer:       /CN=6982f05132a9989507ebf6ee989518753ba2cdb5
Certificate serial:       019EC3DC1DC5CB05C904D392C9DB73122D69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
Manifest number:          0E0E
Signing time:             Sun 14 Jun 2026 02:00:42 +0000
Manifest this update:     Sun 14 Jun 2026 02:00:42 +0000
Manifest next update:     Mon 15 Jun 2026 02:00:42 +0000
Files and hashes:         1: SDv1pmvtKKy8j5zdxmiuQfAHvKA.roa (hash: la1FbIJeldqJDtutGbiRvWT587OJLuf+NXuNKZUoghY=)
                          2: aYLwUTKpmJUH6_bumJUYdTuizbU.crl (hash: 5RU0B0NghY9K0O2hFnd/GS9I6VFfAvY0KHsQU91+E9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:dc:1d:c5:cb:05:c9:04:d3:92:c9:db:73:12:2d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6982f05132a9989507ebf6ee989518753ba2cdb5
        Validity
            Not Before: Jun 14 02:00:42 2026 GMT
            Not After : Jun 15 02:00:42 2026 GMT
        Subject: CN=ed2376527cf7079f8bcbbe18669fd0206002cf24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:37:65:56:5e:fe:26:f0:8d:c7:f3:fc:91:04:
                    6a:4c:5d:57:d3:18:29:3f:06:ef:d2:c4:52:51:90:
                    ce:ca:b4:79:05:7c:30:83:a9:81:ca:d3:12:88:1e:
                    57:07:74:bb:5a:d8:28:02:1c:a9:7d:4d:20:20:47:
                    90:8c:48:9a:f0:d6:58:04:a9:b2:b2:4a:b0:91:d1:
                    63:e1:9e:7e:4d:6c:e3:b9:1f:5f:2c:b4:73:ab:64:
                    3c:ab:a8:25:ea:15:6a:f5:f0:c6:9c:7b:d7:05:e8:
                    f5:37:b2:19:f0:d1:94:4d:ad:30:28:5a:0b:a3:17:
                    2b:08:1a:70:8c:ab:d4:57:21:c6:15:70:7b:5f:a1:
                    cd:e3:74:45:11:75:fc:9a:c4:00:65:36:0d:3d:1e:
                    d2:37:a2:38:71:07:17:55:2f:60:ca:b3:5d:4c:90:
                    04:84:f3:75:39:2a:ab:a4:cc:3e:27:57:e9:ea:43:
                    19:6d:2f:3f:3f:19:97:e5:85:51:68:d4:f9:da:4b:
                    cb:91:9b:f7:0d:7c:f3:dc:cf:f3:ac:cd:2d:bf:da:
                    3d:9a:ed:d6:ac:9d:b4:44:c6:32:37:e4:95:f2:06:
                    61:cb:13:eb:b0:2b:80:69:a4:2c:c2:74:fe:80:45:
                    64:39:db:3d:0d:08:21:11:31:a4:87:9c:3b:60:3b:
                    3d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:23:76:52:7C:F7:07:9F:8B:CB:BE:18:66:9F:D0:20:60:02:CF:24
            X509v3 Authority Key Identifier:
                keyid:69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:5e:14:ee:f5:fd:95:27:2c:88:22:2d:6a:13:38:01:9d:3a:
         b1:11:4b:b7:92:13:83:e6:74:6b:87:26:43:61:3b:79:f8:d1:
         7f:bf:22:ae:4c:cd:e6:9c:ce:c7:18:89:7b:bd:00:93:e2:36:
         85:a3:71:a3:fc:b4:82:1e:b3:51:d8:6e:ac:77:ae:8e:86:d1:
         e0:4a:2a:22:d4:ed:00:bf:b5:e5:2b:4f:3e:55:39:0a:28:a7:
         5f:03:3f:f3:7f:ec:5a:35:bf:6b:97:99:fe:81:96:f1:cc:30:
         11:dc:c6:79:b7:ee:1b:d7:45:ea:57:a0:b1:1e:8a:c3:cd:81:
         4a:6f:7a:99:cd:7b:6e:c4:0d:70:70:85:18:ac:54:bc:c1:16:
         2f:e6:be:00:8c:b8:c1:3c:8d:53:ac:b4:25:7c:18:d0:55:0a:
         70:b7:d9:4d:fe:6e:e1:0e:2f:7f:a7:95:3e:31:d2:3d:53:27:
         c1:86:2a:ec:43:b7:0a:1f:69:af:fe:12:ef:5b:1f:be:66:6d:
         9f:c6:a4:01:f8:07:4a:72:eb:c5:70:78:5b:74:e7:ba:87:04:
         3f:f3:e1:51:bc:d1:ef:bb:65:81:b0:b6:39:13:ef:27:5b:5b:
         41:54:56:b9:b3:b2:3c:b1:7a:14:8e:2c:54:19:34:11:cb:37:
         d4:57:c7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:37:02 2026 by rpki-client