Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
File:                     yFP7eYikLzmDixx_nwQAaS6Sldc.mft (raw, json)
Hash identifier:          4V9JxPG1Qfl6YV5dlS5EHZ7pp2DCrFlYcYRgGimRRKc=
Subject key identifier:   8E:47:22:12:07:C0:F9:89:07:A9:17:D7:53:7B:14:4E:F1:D2:AE:30
Authority key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
Certificate issuer:       /CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Certificate serial:       019ED42BA1A6449F1D463B1B49DC726A7CD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
Manifest number:          04D7
Signing time:             Wed 17 Jun 2026 06:01:29 +0000
Manifest this update:     Wed 17 Jun 2026 06:01:29 +0000
Manifest next update:     Thu 18 Jun 2026 06:01:29 +0000
Files and hashes:         1: TTJb2RAURlKPWvYkNwaWkyT09qY.roa (hash: lOE8Ruv9RewYP7cpvq3aqRSVFYYOIUiYC9/cShdcpDM=)
                          2: Y6tlWJsn2-eO2pGWaQiPAUkPW7g.roa (hash: uARQVpL4FEL+I59HsU9UtUVf5F4ZPPjEs1mpi4DNxXs=)
                          3: yFP7eYikLzmDixx_nwQAaS6Sldc.crl (hash: UKlzD72FJqgoZkx7POCAz2NkymzOS1Ypfb03MAE2vh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:2b:a1:a6:44:9f:1d:46:3b:1b:49:dc:72:6a:7c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
        Validity
            Not Before: Jun 17 06:01:29 2026 GMT
            Not After : Jun 18 06:01:29 2026 GMT
        Subject: CN=8e47221207c0f98907a917d7537b144ef1d2ae30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a9:db:df:88:1e:3b:0b:e7:6c:7a:0b:4c:a4:
                    c2:06:82:40:79:f6:28:9e:f0:e6:43:23:70:4b:3c:
                    1b:0a:e3:95:6a:8f:f9:77:6c:6b:0e:4c:67:40:ec:
                    d6:f9:e8:57:b6:f9:ae:39:87:86:d2:62:80:7f:b8:
                    d7:26:10:fd:5a:dd:58:1f:a2:f0:d8:4e:f4:d8:67:
                    9e:51:58:93:e3:68:3c:ab:5a:8c:aa:1c:9b:06:aa:
                    6d:df:5d:80:2f:ba:b2:b5:89:d5:d2:15:51:8d:7d:
                    79:83:55:86:0a:ca:81:ec:53:1b:d1:e3:3d:b2:24:
                    b0:a4:47:bd:b8:33:36:5e:f7:2d:1d:80:a4:0b:58:
                    22:69:4e:1b:61:f7:7c:df:65:fd:0f:6e:d5:10:54:
                    24:61:dc:32:ec:ae:34:24:b9:59:0f:8a:20:75:bc:
                    85:35:e7:3e:2f:7c:cc:0c:5d:54:96:07:34:de:ef:
                    44:88:13:5f:da:8d:a0:e1:b8:16:23:07:b9:cc:ba:
                    95:cd:14:79:5e:c9:7d:1d:61:ef:9e:50:12:64:98:
                    07:a5:0f:94:7f:85:32:d7:2a:0f:04:98:6f:46:e9:
                    8f:a5:3b:d9:ea:13:e4:08:da:3d:fb:d3:b5:28:ce:
                    b4:2c:42:ed:8e:13:9c:85:f8:c9:8a:c7:e0:aa:93:
                    f4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:47:22:12:07:C0:F9:89:07:A9:17:D7:53:7B:14:4E:F1:D2:AE:30
            X509v3 Authority Key Identifier:
                keyid:C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:6b:38:93:f6:25:66:1d:06:ed:64:6a:f8:15:3b:e3:33:56:
         f5:82:8d:8e:eb:25:7f:48:65:99:0c:d6:ed:a6:02:60:11:6f:
         12:c7:c7:31:40:44:61:d7:8d:d4:64:b2:0e:84:30:e3:f9:bb:
         32:5d:18:29:0a:0e:f8:d0:dc:84:ad:4c:ea:93:7d:b2:4a:67:
         8e:47:81:7f:f9:4b:75:d9:ae:c1:16:51:e1:fa:cd:81:ac:f3:
         c2:f5:27:0d:7b:6a:a9:0c:4c:92:43:48:24:ca:fb:ab:11:7a:
         21:67:e9:32:31:b0:62:47:8d:05:13:fd:68:fe:1a:73:ce:e0:
         5d:1e:6a:79:a3:42:b3:98:9b:e7:ec:eb:93:db:23:b2:33:04:
         63:12:72:4b:0c:64:3a:78:c3:97:8b:ca:d5:e3:e7:e0:9a:59:
         2c:43:86:51:7d:21:cf:95:38:bb:fc:9e:86:d6:d4:0e:ae:3e:
         97:16:59:d5:fc:12:01:19:52:78:d6:56:33:fa:23:56:30:6f:
         81:7a:06:0c:ff:13:a5:4e:22:a2:5a:24:bc:d5:2d:e4:4f:d7:
         05:ce:aa:58:40:12:ec:1d:81:49:12:fd:18:ca:b6:b2:8f:32:
         75:fd:6a:f1:f3:bf:a6:51:29:47:c8:69:68:e8:e0:ea:3a:d7:
         71:78:4f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:24:44 2026 by rpki-client