Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
File:                     0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft (raw, json)
Hash identifier:          i/TegeyIZMGB9g1QP7ekINih0ZWPhPJYhGaQ45qBVdE=
Subject key identifier:   40:EA:39:3B:26:87:73:5B:BA:3D:18:02:0B:C9:5C:24:05:FE:59:FD
Authority key identifier: D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54
Certificate issuer:       /CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054
Certificate serial:       019EBE7F32711FB32A177AE692A08C5E8F92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
Manifest number:          0A40
Signing time:             Sat 13 Jun 2026 01:01:07 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:07 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:07 +0000
Files and hashes:         1: 0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl (hash: EhaPgg4bs2ItKtiqPYLHuZsV8aTE8qqTMnDQNMA49D8=)
                          2: 8l0bbv2uUBlilBWZ-F4pKnrQmO0.roa (hash: yr3qgoPKK+MW0Wmz/o5fGlppgkLAJukaAckqwL8mZRo=)
                          3: DvcjVJOkMRapOd1S3buwBoLNCuM.roa (hash: PhgxUgpvf/qnyzn1ZNECv/I05gKGU5HogGKChSYsZr8=)
                          4: xY3oO-WMZjEDTENfTRiDC2FkHKs.roa (hash: wPsvyOO1iyC8jxQyomTONofcW3odk+2KnelEPbJzeYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:32:71:1f:b3:2a:17:7a:e6:92:a0:8c:5e:8f:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054
        Validity
            Not Before: Jun 13 01:01:07 2026 GMT
            Not After : Jun 14 01:01:07 2026 GMT
        Subject: CN=40ea393b2687735bba3d18020bc95c2405fe59fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9f:41:30:10:ea:77:e7:50:88:be:84:3d:ca:
                    2e:e2:c4:22:d6:5e:89:c8:f8:1b:b8:36:d4:31:ae:
                    cf:d9:4d:d0:ec:ef:d4:fa:48:53:e7:3e:77:9f:70:
                    1c:90:4f:fc:2c:45:6b:f9:34:45:58:0a:40:0f:d0:
                    86:cd:db:c0:a8:18:d0:f6:89:64:89:3b:cd:d5:ad:
                    7c:be:9d:63:68:bb:57:cd:55:bf:b2:cc:af:45:9b:
                    e4:65:d8:99:20:2e:d9:5d:cf:33:26:d9:9a:8a:7d:
                    51:15:62:8b:2b:6e:81:87:39:9d:af:3c:82:73:46:
                    32:13:ae:49:91:74:0a:ec:92:54:38:f1:86:71:aa:
                    29:b4:d1:b9:15:f2:d8:41:2b:f7:be:23:1b:69:91:
                    08:c2:f8:37:0e:0c:fb:2b:56:c3:56:91:b8:cc:62:
                    55:0d:5f:c8:22:d4:2f:11:c3:3b:08:51:e0:0b:c2:
                    0a:b4:6f:5c:20:51:f0:d1:cd:4c:40:8f:05:ee:31:
                    5c:f7:fa:46:90:2d:2c:00:b8:a9:fb:53:9d:81:7d:
                    eb:4b:00:78:23:d3:ab:8f:81:8b:4e:12:e0:6e:1c:
                    1e:91:ee:29:8b:86:b4:3e:c7:3b:74:49:06:2a:6e:
                    5b:51:71:dc:03:ea:aa:61:d9:4e:d9:61:d5:68:73:
                    b9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EA:39:3B:26:87:73:5B:BA:3D:18:02:0B:C9:5C:24:05:FE:59:FD
            X509v3 Authority Key Identifier:
                keyid:D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:25:60:47:4d:b5:78:4b:63:68:9a:df:cc:76:f0:73:44:24:
         df:62:29:b7:63:07:a4:ab:59:64:8b:21:5a:ff:83:9a:ee:56:
         c3:e6:74:f9:6c:22:ce:b0:08:b0:8a:dd:fd:8f:42:2d:20:19:
         fd:de:db:13:f5:a6:c5:f4:e3:b2:a3:64:ca:d0:03:17:ad:d5:
         23:95:35:16:b8:d6:b9:8d:a5:20:74:56:8a:ed:d8:a8:0c:b8:
         e4:b6:b5:42:aa:da:b5:a9:c6:cd:16:0d:76:9e:d1:da:28:76:
         5f:75:09:4c:47:42:e3:d5:eb:3b:d6:5a:4b:63:0d:00:47:e5:
         7d:17:cb:0f:27:6b:e9:30:5c:ad:74:41:cb:3a:77:cc:fa:eb:
         19:49:0b:c4:18:01:b6:8c:5e:e8:45:34:2f:17:fc:41:65:3a:
         62:ac:b7:15:d4:7b:b1:48:c7:db:c1:a4:82:e7:99:17:28:b5:
         20:c5:a2:e8:f2:09:b9:39:53:4a:c5:19:63:f0:87:21:a7:44:
         07:87:a7:d3:d1:74:9c:cb:dc:ac:91:f1:4f:64:5c:f8:56:ac:
         e9:02:a5:32:f0:fe:e7:0c:50:26:07:5b:df:03:32:28:1b:08:
         99:32:a0:8a:3a:a0:5d:4e:0b:db:b7:be:4b:b9:f2:64:b8:0e:
         86:18:ec:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:08:41 2026 by rpki-client