Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
File:                     YDM81vG1nAtoLh2jiSN-2j6dqRg.mft (raw, json)
Hash identifier:          d52ai1VXx7WHEILx3ZAy9y5MgyzdNsn/QS4jzY6JZ6U=
Subject key identifier:   9B:96:3C:EE:7C:07:2B:A1:90:0D:C6:AD:CF:81:50:37:73:66:DF:5D
Authority key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
Certificate issuer:       /CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Certificate serial:       019EC0DB9616AA5EB48B3AE96F6C063A1063
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
Manifest number:          103D
Signing time:             Sat 13 Jun 2026 12:01:16 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:16 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:16 +0000
Files and hashes:         1: YDM81vG1nAtoLh2jiSN-2j6dqRg.crl (hash: 6eZFXSO7b11DSpvoIIGYL22rWhkTFTAgulXQBR54/XE=)
                          2: nd54JNe4vIZ_-Gecq7CuS7z9ouE.roa (hash: uDzn2UrQJ/gWE6VmVbdTq4BSTBqexLqsyHgtdAqNXeA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:96:16:aa:5e:b4:8b:3a:e9:6f:6c:06:3a:10:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60333cd6f1b59c0b682e1da389237eda3e9da918
        Validity
            Not Before: Jun 13 12:01:16 2026 GMT
            Not After : Jun 14 12:01:16 2026 GMT
        Subject: CN=9b963cee7c072ba1900dc6adcf8150377366df5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c6:18:46:53:91:e9:42:a8:ad:35:95:d2:30:
                    2b:7b:50:68:ef:cd:a2:66:02:f0:3a:85:bd:cb:3f:
                    f2:c7:80:f2:31:30:f5:33:9a:c0:3a:4a:ce:0b:8b:
                    70:ef:13:38:f7:ce:cf:74:7d:17:10:de:d1:e6:04:
                    72:c6:f2:54:f6:69:30:fd:88:33:e5:46:12:78:9c:
                    18:f8:57:27:b9:e3:5e:e5:7d:c0:a6:12:ba:51:fd:
                    ca:4d:66:15:ba:bd:60:d7:ca:41:2a:74:1e:69:a2:
                    fc:cb:1f:49:4e:1b:c5:63:f5:bd:e8:28:dd:c0:e9:
                    84:be:13:1a:af:77:8f:9b:35:d0:a6:a4:3a:79:3f:
                    f8:c5:e6:24:20:37:11:f1:90:48:63:18:41:bd:97:
                    38:de:9b:c4:00:d8:4c:a8:f6:99:0b:57:b4:bf:55:
                    3b:c5:62:57:cb:69:50:c6:ec:5a:e1:de:68:80:7b:
                    57:e8:0a:a3:a7:d2:33:10:2c:95:ad:51:c5:eb:ac:
                    45:18:99:6d:7c:2b:8d:0c:46:ae:51:96:d1:13:28:
                    4d:44:95:ac:19:43:96:2b:5d:82:8a:2d:04:a8:73:
                    a5:70:a4:9f:d5:13:7e:a4:83:2d:55:2d:14:1e:a1:
                    c1:77:ee:25:22:a4:86:79:a4:c1:a2:35:6d:48:2e:
                    d9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:96:3C:EE:7C:07:2B:A1:90:0D:C6:AD:CF:81:50:37:73:66:DF:5D
            X509v3 Authority Key Identifier:
                keyid:60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:8a:6a:dc:7f:a4:d8:89:ef:43:42:56:ee:2a:0e:df:55:4a:
         a2:32:79:32:a9:f1:5c:d0:75:cc:ab:04:1e:e8:7c:39:e8:ca:
         8d:f7:f7:e1:58:40:8a:e7:05:fd:6b:29:92:14:67:13:2d:df:
         c3:86:ec:e9:9f:92:cf:26:e4:a4:10:d0:9f:74:03:b2:1b:bf:
         bf:20:0b:f6:26:c9:3d:5a:17:37:83:79:c3:82:a4:0d:a0:15:
         0b:6a:6a:ae:5d:56:c2:da:09:d7:70:ba:a6:c5:57:9b:25:8a:
         d2:79:df:76:57:83:f7:25:a5:5f:61:8e:02:b2:42:4f:31:44:
         e1:2e:6b:d3:fc:dd:c2:9f:d3:22:64:51:09:86:bd:71:ad:30:
         0d:1f:d1:d5:af:f0:dd:34:6d:2b:31:1e:cb:07:97:3e:64:29:
         f1:48:06:ec:f2:ff:96:d8:ee:39:74:92:9e:66:db:e8:3e:34:
         5f:3d:30:80:68:2b:f8:86:b1:25:b7:d5:da:2f:2c:2b:78:1c:
         4a:53:ae:da:ca:83:37:ba:bf:91:93:6e:e5:b8:9a:56:8c:72:
         16:b7:32:7a:39:02:e3:43:0e:d0:8c:b3:2a:43:a4:bb:04:21:
         1c:d9:6a:d8:a3:09:15:97:07:ce:21:1c:2e:dc:cc:2b:ca:8d:
         79:ea:84:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:50:37 2026 by rpki-client