Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
File:                     yAYJ8hhRvff3TtGPDwnfku23U1U.mft (raw, json)
Hash identifier:          XIAzcAzBKGVCTtb3JutW1E4kYodp+4OelkeV39FEkTU=
Subject key identifier:   A8:DB:6E:B9:77:CF:F8:F9:2B:1A:83:68:23:33:97:DA:0F:5C:EE:CF
Authority key identifier: C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
Certificate issuer:       /CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Certificate serial:       019EC44A78254054F40ABC27FB6B65CC339C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
Manifest number:          1121
Signing time:             Sun 14 Jun 2026 04:01:15 +0000
Manifest this update:     Sun 14 Jun 2026 04:01:15 +0000
Manifest next update:     Mon 15 Jun 2026 04:01:15 +0000
Files and hashes:         1: 7dhm2Zcd4Yp-TNCgcfPEdG07eU0.roa (hash: Ku59KYA/bpOTiSrNCRzEUdSrtiwxD1BQ8G4rzI5+xwk=)
                          2: yAYJ8hhRvff3TtGPDwnfku23U1U.crl (hash: sTixz0LHd/KY+RsqlR9MEgEmsY2XSk7c3Eqt7eNHxLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:4a:78:25:40:54:f4:0a:bc:27:fb:6b:65:cc:33:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c80609f21851bdf7f74ed18f0f09df92edb75355
        Validity
            Not Before: Jun 14 04:01:15 2026 GMT
            Not After : Jun 15 04:01:15 2026 GMT
        Subject: CN=a8db6eb977cff8f92b1a8368233397da0f5ceecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:88:7a:9b:f9:22:bb:0a:57:18:99:f0:55:7b:
                    5d:a8:8c:6b:56:f4:07:7c:d0:2a:63:70:d4:29:9a:
                    07:19:61:46:b9:c8:01:cf:ad:9d:86:5a:cf:7f:58:
                    ba:f7:99:1e:85:bc:4c:42:34:4f:88:e0:20:dd:d2:
                    97:5f:85:d4:b2:cb:1c:86:23:c8:e2:b7:8b:55:8b:
                    3a:92:5e:28:51:6c:c6:ff:2c:48:f0:5c:a2:e6:13:
                    df:94:d5:99:23:7a:57:ed:97:c5:10:11:56:4b:eb:
                    3f:76:a0:ef:2a:df:9f:9b:e4:e2:83:43:dc:a5:d2:
                    8d:55:a8:a0:f4:67:62:8c:60:4d:5d:a4:b8:d8:66:
                    21:15:13:40:02:cb:95:ff:2c:3e:0c:27:e3:8b:bf:
                    9b:a9:ff:8a:97:06:b2:0e:f2:1d:ae:80:43:4c:1f:
                    a6:8d:a4:36:05:5b:7f:66:9a:e1:08:bd:3e:75:1d:
                    6e:3a:94:e3:df:ea:bf:ee:ea:c7:66:5c:29:5f:2f:
                    e3:08:fc:86:7b:29:eb:9e:f9:16:81:39:96:0e:a4:
                    42:29:c3:34:ab:6b:f8:85:b1:9d:80:f7:14:f5:f5:
                    7a:ea:88:cc:33:7a:f5:48:72:bd:8e:1a:1d:3b:04:
                    c5:0b:2f:b9:61:23:19:1e:19:79:07:e2:b9:dc:6d:
                    6b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DB:6E:B9:77:CF:F8:F9:2B:1A:83:68:23:33:97:DA:0F:5C:EE:CF
            X509v3 Authority Key Identifier:
                keyid:C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:75:22:97:7e:68:69:da:71:a5:03:24:0d:6d:ab:3e:18:21:
         e5:d6:84:6e:d1:84:82:ff:02:a9:ca:b4:89:5d:56:81:d1:f3:
         53:0a:ab:a9:53:43:b4:c0:42:11:81:4e:47:57:56:65:1a:b9:
         86:5f:5d:90:38:e6:14:33:21:e2:88:25:d0:a3:80:43:e7:21:
         33:f6:41:6e:01:e7:14:3d:d9:3b:24:57:0f:1d:d3:db:80:91:
         80:8d:94:93:68:2e:c6:bf:ae:e2:b7:da:57:06:4b:a2:95:e3:
         b7:cf:54:a0:f9:a0:14:7b:0a:be:bb:79:d9:a8:6a:56:bb:ea:
         52:ab:66:16:9c:e1:ee:ce:79:f4:b3:0d:b1:69:60:23:94:86:
         a6:34:bf:07:d8:c5:e3:0e:80:29:6f:42:a5:83:3a:cd:71:e3:
         af:f1:1a:df:d9:da:4b:26:a5:d2:fb:01:ed:17:a4:6b:22:1d:
         76:10:7a:98:38:7c:f2:db:05:b2:2e:aa:04:b5:1d:82:41:af:
         f3:32:e7:da:d0:60:7b:60:6b:0a:eb:b6:fb:32:38:e0:2a:14:
         20:78:81:51:84:1a:f6:62:20:c3:ad:8e:a3:0e:6c:95:38:38:
         32:88:93:f2:a5:72:7a:f2:e3:11:e4:01:f2:1b:f0:c5:03:75:
         13:46:63:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:08:48 2026 by rpki-client