Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
File:                     YWFHDTm-S6LdXfj6R7FjlieOZwo.mft (raw, json)
Hash identifier:          uN55kOYXn4uiww71oY19FlVhqZdDS/QSq8z7d2SDt7Y=
Subject key identifier:   83:3F:B1:54:F7:F1:03:30:0C:47:FD:EF:32:88:E7:74:38:DB:DB:9F
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Certificate issuer:       /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial:       019EBEED4343B431E5052819329F496EE9A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
Manifest number:          1513
Signing time:             Sat 13 Jun 2026 03:01:20 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:20 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:20 +0000
Files and hashes:         1: A2edUifbSShzdJ1Gis-SqBKDNH4.roa (hash: Vy37s5YBxFgEPmxrlCq+GM34iA4Ip0Oc6gKZuBhegNc=)
                          2: BPuWk6CfIovuR0hN4ab9_Vg8fpM.roa (hash: Io/zg3oPjnrBQRK8TUjjHMBbPc/oa9KH3Wg0gDqsd6M=)
                          3: CMj-58s7HjFJfPYnqyY_H8iMras.roa (hash: l/VgtwLP67EeRyfmCVyIdNqgvDzJvQY/H0EIMqQ+RF0=)
                          4: LYaVyURA1Hqer0FhBdoqEAlltug.roa (hash: NWGVsZzZidWUl0MNChqOvov8kyqJB0zTJQ1HSXjGZw4=)
                          5: MFBUVUGoLTFb6mMUZK00McW_7z0.roa (hash: F53ezXG/M5tdcqiYCNPbO7yVUwgcKU5OMRV7nr04e3o=)
                          6: Y4W9-9x4sADcW2PdcF8RiPXF1ro.roa (hash: UkFNKZqofOqEuSi5Q60lTYhnFQ9XAVK3ZjjXPvghvFY=)
                          7: YWFHDTm-S6LdXfj6R7FjlieOZwo.crl (hash: 4VTbh2CRav/W5gR0kVNvmPufenTE19Fv5YOqNlHFX+g=)
                          8: cRoy5bgDIbo0tHnv4tgtYkF3qjY.roa (hash: 1shpahuyjixHWI6Z3X/oGSNmNs/VZ/2i+HhPZ5UneNQ=)
                          9: qaLHn37xtjw3qy4avBKJZx30pG8.roa (hash: 37z1vS8oU1I2E/gSNbcyl0yQyKdvAVXffCULUq/vHIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:43:43:b4:31:e5:05:28:19:32:9f:49:6e:e9:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
        Validity
            Not Before: Jun 13 03:01:20 2026 GMT
            Not After : Jun 14 03:01:20 2026 GMT
        Subject: CN=833fb154f7f103300c47fdef3288e77438dbdb9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:da:40:78:8d:64:a4:ed:63:6a:d9:6b:dc:66:
                    0c:b4:c5:d6:4a:dd:29:83:a8:44:57:90:01:5e:30:
                    29:d8:81:9e:04:1d:8d:c4:d6:a7:a0:1a:ad:bc:b2:
                    9a:2b:8c:82:5b:e8:09:d4:6c:4e:48:64:ed:a5:cb:
                    2b:20:ad:e7:ea:56:c5:20:24:48:07:49:3c:43:aa:
                    eb:c2:bc:9c:e2:ca:d1:10:59:fc:eb:e7:b1:94:5d:
                    5b:95:15:b7:53:d6:df:06:1f:97:f2:ca:05:42:d5:
                    3b:99:c8:e6:6a:07:6b:02:57:a8:9e:7c:b8:5a:ca:
                    fc:5c:ae:d4:2e:53:09:6f:9d:ee:2f:f9:28:45:22:
                    60:a9:42:bd:2e:bb:0d:82:7a:05:62:fa:b1:2b:32:
                    2b:74:5d:f5:6b:9f:a1:7c:ae:3a:f0:29:52:1f:8c:
                    f6:d5:5c:95:2f:56:58:46:42:0a:47:d0:0c:ad:f1:
                    7d:ad:dc:24:9b:8f:c8:f2:dc:ea:c9:2a:9f:f9:5f:
                    57:f8:3a:7d:67:82:02:ff:6e:0a:57:f8:32:8b:ef:
                    58:98:cb:48:94:1e:ee:b6:95:16:c4:43:c5:56:27:
                    43:93:2f:1b:9f:4c:f2:92:53:78:3f:bf:03:cb:3e:
                    f3:18:b8:b9:59:41:32:1a:dc:9a:b4:bc:04:2b:b8:
                    46:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3F:B1:54:F7:F1:03:30:0C:47:FD:EF:32:88:E7:74:38:DB:DB:9F
            X509v3 Authority Key Identifier:
                keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:ee:d4:42:b2:c4:e5:bd:9a:86:07:17:29:b7:ef:07:d0:6e:
         51:dd:11:16:6e:1d:18:0b:64:a6:b2:5c:ab:b8:17:93:95:3c:
         99:65:8a:99:2c:20:21:b1:68:d7:f6:e0:6c:da:66:ef:a2:63:
         d8:18:20:1d:b1:37:b0:8c:e5:78:f5:93:10:43:59:6a:c2:ec:
         0f:ec:ed:3f:de:4e:44:e8:91:2c:43:4c:e0:c2:45:19:fb:22:
         b9:22:ab:02:2a:2d:b5:44:d6:3e:c8:79:74:53:c6:90:43:aa:
         91:ce:3b:6c:fe:53:77:36:ff:28:e1:79:af:ee:ae:0a:ce:a6:
         09:5c:e5:ec:f1:23:4a:d1:ef:fd:5d:74:57:02:80:e5:a0:68:
         f2:91:0f:96:99:e4:e6:b2:56:4d:23:b9:7b:6a:06:82:52:eb:
         c6:b0:16:b8:8e:48:72:9b:43:e6:68:63:7e:6f:c1:45:05:11:
         02:39:57:f7:36:aa:4f:e6:b5:92:95:22:e8:38:27:68:2a:38:
         9a:4a:3f:0e:79:39:29:00:51:08:18:ad:c3:b9:30:68:65:e5:
         5a:79:9c:19:34:5c:53:18:67:38:6f:ce:cb:47:5f:38:9b:cd:
         dd:56:39:c1:46:7c:95:75:9b:06:87:3c:82:ee:6d:54:af:6d:
         36:ed:eb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:20:26 2026 by rpki-client