Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
File:                     YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft (raw, json)
Hash identifier:          U4iX2E/ws5ZZh8wz8vYW5fUQ3JJmaeYrk1Zi77VvHWY=
Subject key identifier:   78:74:1F:31:0B:E7:F9:CB:7D:AF:62:C1:B4:7D:BB:B7:5C:F9:41:9C
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Certificate issuer:       /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial:       019EBFC91B8AC6462AE458FD0A942CDD1077
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
Manifest number:          1245
Signing time:             Sat 13 Jun 2026 07:01:28 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:28 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:28 +0000
Files and hashes:         1: GILkzrnW-WLXBiCMka03WJecbH4.roa (hash: V4r8aFoZHB6LWJUUFH9l/6/JEctMKZK9VcW+Qg7PzwI=)
                          2: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl (hash: ykdluQNP5+L/Vq5PiqtpvHPv6C0gitbhULOTivY+mhk=)
                          3: yzyj6CtIhdLDtUGY2ToVGMdP9Gk.roa (hash: W/jGAjTWq86NyJWeIokb5Yic1QQn0pxHCXE2Q3AfgRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c9:1b:8a:c6:46:2a:e4:58:fd:0a:94:2c:dd:10:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
        Validity
            Not Before: Jun 13 07:01:28 2026 GMT
            Not After : Jun 14 07:01:28 2026 GMT
        Subject: CN=78741f310be7f9cb7daf62c1b47dbbb75cf9419c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b1:59:02:e7:17:b2:06:80:bc:eb:df:6e:46:
                    77:6d:4b:c3:50:6e:72:eb:ca:eb:2c:4d:54:28:a9:
                    11:4f:79:b4:b7:5c:7e:85:39:1d:5b:29:3a:62:2e:
                    a0:fd:85:0c:32:95:f1:ba:bd:1d:03:3e:4d:e7:c9:
                    f3:31:ec:28:50:63:6c:c5:84:61:ef:b4:e6:30:14:
                    e9:cd:bb:4e:d1:b9:88:3b:78:3f:71:eb:80:03:82:
                    b0:5d:88:ee:8d:ea:e8:c6:33:8c:4e:2f:09:ce:0d:
                    65:24:64:4b:e2:af:06:c5:ca:ad:51:c3:b8:2b:9c:
                    10:48:25:5f:a1:5a:a7:62:9a:30:b0:87:c5:a6:2a:
                    25:bb:94:78:4f:5e:3a:af:f4:83:2b:42:70:5c:54:
                    f5:18:9f:12:42:22:d6:e2:46:c0:63:c4:01:c8:ed:
                    e6:39:60:53:cc:56:fd:83:4f:8a:c2:6c:59:24:c9:
                    d1:ec:8e:40:1d:00:29:f5:a8:71:d4:16:ef:3d:43:
                    7f:c4:24:9e:41:1a:ec:92:80:12:53:ae:52:14:ff:
                    f4:eb:6a:a5:ae:35:52:27:74:e3:a6:63:7e:58:32:
                    e4:a7:46:f0:de:94:30:88:e9:a7:5f:0f:21:9c:3c:
                    dd:c9:c3:f5:64:f9:1a:d7:ee:20:9d:99:84:db:c9:
                    89:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:74:1F:31:0B:E7:F9:CB:7D:AF:62:C1:B4:7D:BB:B7:5C:F9:41:9C
            X509v3 Authority Key Identifier:
                keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:55:55:1f:1a:c8:2c:2b:d5:26:77:cf:60:25:7c:7c:d1:ab:
         6a:4d:c4:48:48:ef:41:dd:22:12:b5:6c:ef:81:96:09:8f:a0:
         b4:26:29:e8:d5:70:a2:3a:00:f1:24:56:6a:5b:3f:2b:de:f1:
         2b:02:d2:4c:f1:76:d0:de:12:21:11:a3:e3:04:2b:d1:2e:e2:
         6a:c2:26:55:6c:b7:dc:19:96:e1:69:cf:4e:7c:b1:03:cf:8c:
         16:fb:ab:6b:00:b5:e9:9a:8b:39:96:3f:d6:20:18:5b:a6:01:
         b1:de:35:a8:29:53:31:e4:e9:c8:30:57:80:21:d3:6d:cf:b8:
         5c:9c:ff:c9:a4:22:90:62:c1:85:aa:50:29:76:b7:21:aa:96:
         d1:0d:8d:c6:1f:a6:d1:43:95:ee:22:c5:2b:d2:9f:6f:0b:af:
         ba:f7:64:ef:90:00:bf:6c:6c:84:6d:98:f1:10:f8:8f:f7:57:
         77:da:e9:48:d3:45:83:a4:45:f5:20:3d:eb:81:0c:93:43:bb:
         e3:f6:09:77:41:2b:4d:c3:96:36:09:26:29:99:2a:bd:aa:a9:
         c4:98:19:33:2c:de:14:ae:7f:8a:4f:e5:49:74:85:c5:c5:23:
         03:e8:1d:5e:fd:90:93:75:70:e1:04:01:31:72:76:d6:e2:c2:
         a0:ea:16:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:48:32 2026 by rpki-client