Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
File:                     yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft (raw, json)
Hash identifier:          zF5z1ISZmXc5jCiRe6bP1PIswLIGmFUCltXmE+HH0iQ=
Subject key identifier:   B3:8C:0C:17:2A:0A:4F:BB:6B:73:30:CC:F1:58:D7:9A:DB:A9:C7:2D
Authority key identifier: C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
Certificate issuer:       /CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Certificate serial:       019EC224621231558ED58A16695C7AE9C765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
Manifest number:          02F0
Signing time:             Sat 13 Jun 2026 18:00:24 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:24 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:24 +0000
Files and hashes:         1: Pk6dmv-1h5zWIXu5Oty1Pp_3yV4.roa (hash: /ND/9TFeaNgP6XF6YHep3PGuc7vk/LLfQoeSDsS92Uk=)
                          2: yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl (hash: 53oR2iVE7tONIfpogO4I5VagBuouogEDdi6QQSR8vQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:62:12:31:55:8e:d5:8a:16:69:5c:7a:e9:c7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
        Validity
            Not Before: Jun 13 18:00:24 2026 GMT
            Not After : Jun 14 18:00:24 2026 GMT
        Subject: CN=b38c0c172a0a4fbb6b7330ccf158d79adba9c72d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bf:e5:07:fe:6b:df:0f:5d:6c:2f:c1:00:f3:
                    63:48:d4:4d:42:71:27:80:a4:17:eb:31:56:01:37:
                    e8:40:ff:4e:19:b2:c9:26:0f:f3:57:28:a8:bd:51:
                    a7:2f:8b:74:c7:0f:da:68:75:0e:a2:f6:7e:50:76:
                    a9:a5:d6:cf:ee:44:4c:60:e8:d5:9b:43:7b:e3:26:
                    c7:53:83:bb:be:c1:05:32:21:84:26:91:84:72:a7:
                    d6:00:d7:22:76:9d:1e:4b:c8:45:f0:5e:37:98:73:
                    96:e5:d9:84:04:4e:76:05:b0:32:90:8a:31:01:a3:
                    ef:29:c0:9d:d5:21:7a:1f:22:60:91:3e:95:32:5e:
                    8b:a6:71:23:94:8f:85:0b:af:9e:96:d2:e9:1c:ef:
                    c0:7f:10:3a:00:1d:15:eb:bf:bd:58:c3:7e:88:d3:
                    99:a5:53:85:b5:e8:18:73:16:0c:7a:93:64:5e:28:
                    cf:88:c6:9a:4f:ca:11:b7:49:74:38:29:c5:ce:b9:
                    74:45:82:b6:58:d9:9d:35:31:94:f0:c6:f3:4c:e8:
                    bb:b6:8d:49:64:fd:e2:bb:84:95:b4:d5:11:07:4a:
                    9d:a2:27:3a:30:fb:37:d8:22:66:da:89:64:8a:d3:
                    fb:fd:cc:af:40:6b:d6:fa:ef:39:67:d5:88:cd:04:
                    b2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8C:0C:17:2A:0A:4F:BB:6B:73:30:CC:F1:58:D7:9A:DB:A9:C7:2D
            X509v3 Authority Key Identifier:
                keyid:C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:b5:f5:c1:e0:f0:0b:9c:5b:e6:f9:92:92:e4:b3:19:cf:ac:
         e8:af:96:bc:f1:1e:97:57:68:ba:12:cc:a0:25:11:57:3c:d9:
         30:d4:44:56:0b:e1:f9:e6:c8:00:ec:42:9a:e7:f9:fd:98:72:
         96:a3:c6:ff:a2:ca:ff:f1:4e:1a:d7:bc:f2:5e:c4:f9:eb:7a:
         44:73:ae:8b:de:50:45:c3:b9:83:c3:53:c2:fe:dd:9f:39:e5:
         26:28:37:68:b3:8e:4d:dd:be:dd:44:ff:7d:3e:fb:e0:c4:15:
         be:30:c4:9d:9c:2b:37:64:f8:98:4d:15:ec:dd:42:28:b6:3d:
         dc:a0:61:3c:97:65:40:80:e9:92:f9:45:75:a6:36:a2:fc:77:
         46:14:34:e7:aa:fb:fc:6d:8e:2c:c8:5d:e5:28:70:f3:1f:ef:
         b7:48:ea:6b:70:d4:48:b0:b2:c2:11:18:38:e1:ea:4c:3e:ed:
         53:57:de:b3:4b:19:55:65:50:33:ab:9a:6e:cd:ca:97:d2:bf:
         be:d7:82:84:46:1c:e9:ed:e4:64:84:5a:33:f1:18:9a:85:c9:
         2f:26:18:83:e6:62:94:d9:bf:b0:ae:69:d0:41:db:f7:ae:53:
         e9:ab:b5:f2:e0:03:02:c1:72:20:ed:13:1e:e3:6f:94:0b:3a:
         36:c2:f8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:26:19 2026 by rpki-client