Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
File:                     Mya5UKRaLGusFQX80E2UDMCWj5Y.mft (raw, json)
Hash identifier:          eimvDwJ85luzr8hNvHM/pwioYlQ45yBnGzifSCx+lyU=
Subject key identifier:   71:ED:A9:0C:14:93:0E:70:C7:65:E5:F3:CD:8E:40:69:A7:B7:44:D3
Authority key identifier: 33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96
Certificate issuer:       /CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
Certificate serial:       019EC224FCF71E8FC90E1666C167274BCC32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
Manifest number:          0844
Signing time:             Sat 13 Jun 2026 18:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 18:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 18:01:04 +0000
Files and hashes:         1: Mya5UKRaLGusFQX80E2UDMCWj5Y.crl (hash: uJqIgIhjCtnzGCNaTmngUwK7CwsXNQDGdqet0aujQmU=)
                          2: YZYDQXVhkyQEU7FXMxc6oaYUT_4.asa (hash: eA77gr7KIuI04ACTqilmeBAOd+qmU/Ry9/nDfmBIbL4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:fc:f7:1e:8f:c9:0e:16:66:c1:67:27:4b:cc:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
        Validity
            Not Before: Jun 13 18:01:04 2026 GMT
            Not After : Jun 14 18:01:04 2026 GMT
        Subject: CN=71eda90c14930e70c765e5f3cd8e4069a7b744d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a7:fe:0d:a3:58:6d:ee:84:50:c5:48:c1:9b:
                    03:0c:f5:c0:d9:83:85:51:30:a4:24:05:d3:1b:79:
                    e7:3a:6f:6d:e4:9c:a5:6e:58:1c:57:73:48:cb:80:
                    81:6b:db:21:55:ee:dd:e7:e4:a2:00:51:5b:43:74:
                    f2:a8:8a:c9:fd:2a:b4:f0:5d:39:4a:14:a5:81:36:
                    ae:df:85:61:bc:6b:a9:17:c2:16:ce:c9:47:99:de:
                    15:f1:50:f6:0e:7f:10:7d:32:77:02:30:fd:0c:7d:
                    6f:db:3a:13:5e:6c:28:47:46:00:1b:d3:18:9f:d8:
                    14:a1:e0:c6:69:b1:ef:92:dd:fb:2a:85:ee:2a:24:
                    62:35:d3:64:8c:bd:c8:fc:e2:04:8c:02:92:c1:7a:
                    bb:00:c3:d2:08:09:d5:9c:e3:5a:8e:98:c5:05:0b:
                    91:a1:47:48:f5:18:9e:19:6e:7a:61:70:48:8f:6a:
                    0c:54:dc:9c:7b:b9:f2:bb:3b:09:80:dc:c6:5c:7e:
                    3d:e1:be:64:bb:de:67:d1:10:f0:82:66:6b:98:b6:
                    39:9f:8d:ba:df:e3:5b:49:0c:eb:73:f1:ac:0b:ec:
                    62:3f:65:6d:b3:92:d0:87:bd:5a:38:6b:76:89:8f:
                    98:02:64:5a:a5:43:b7:1f:60:0f:21:8b:d0:63:30:
                    f3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:ED:A9:0C:14:93:0E:70:C7:65:E5:F3:CD:8E:40:69:A7:B7:44:D3
            X509v3 Authority Key Identifier:
                keyid:33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b2:7b:8e:7c:dd:ff:93:d8:61:52:dc:5a:81:0b:e4:28:b5:
         c0:b8:d4:b5:4d:a6:dc:ff:c5:47:33:bd:92:3a:56:fa:21:6e:
         73:ca:d1:0b:09:31:62:e0:8c:2f:13:5c:0b:0c:a2:fb:21:7d:
         26:a6:3d:de:cc:89:95:4b:a1:b7:6a:31:62:a1:2b:86:ae:82:
         91:7b:d1:4f:9e:c8:2b:5c:21:b9:c6:25:59:78:78:70:13:3c:
         7c:6f:5d:cd:b7:27:84:7b:ca:a1:cb:a9:2a:42:f9:d4:f2:6f:
         65:ed:94:61:52:85:b8:99:17:29:44:db:08:32:6c:42:9f:a4:
         2d:49:9f:16:ea:f5:c2:32:ad:0f:e8:07:8d:a5:db:dc:d8:a8:
         80:4d:12:a8:f6:52:7c:a2:2c:be:91:4a:78:6e:02:32:3c:e5:
         84:cb:58:4d:a8:33:3f:ea:7b:b4:75:e6:48:29:f0:a5:dc:85:
         1a:32:d3:8c:a4:bd:67:49:40:5a:55:d5:5b:3a:51:90:71:6f:
         68:25:b6:50:74:51:48:2b:4c:45:3d:f1:72:c9:fd:e1:3e:28:
         7d:42:33:cc:c4:3c:a0:1c:43:c5:82:09:1a:a4:2f:41:ef:e5:
         c4:08:df:4f:a9:77:49:c3:96:f3:9d:08:30:03:5f:64:27:06:
         0c:9f:72:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:15:24 2026 by rpki-client