Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
File:                     M1ylITYiJtA8GCkAPYHUmKqDjzM.mft (raw, json)
Hash identifier:          TUXHGDcOvJm+y6nFdM6VhU66Pih3BfTcOzG0VxnH6T0=
Subject key identifier:   03:21:2C:CF:A9:D3:79:6C:68:09:86:47:13:5E:4B:1B:4F:27:05:4D
Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
Certificate issuer:       /CN=335ca521362226d03c1829003d81d498aa838f33
Certificate serial:       019EC25C386AEECD9D9B46AAE66B629BFD01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
Manifest number:          12DF
Signing time:             Sat 13 Jun 2026 19:01:23 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:23 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:23 +0000
Files and hashes:         1: 9aA3iLX_dTChIPCO6PgksQti4b4.roa (hash: fqGRMmb2kUR03lGLsFWhMcKnX+bdih5acXmK3pBtYbE=)
                          2: Exg0UvgeAfe-AZQtA_LavkNZKKU.roa (hash: gKA++u4Fw/ljBBOhyevOEbxsqlYiJYqc2cMPG6ua8TU=)
                          3: M1ylITYiJtA8GCkAPYHUmKqDjzM.crl (hash: a2CQmWM9AbNpDx3Pfvj2Rtwwv5NS/vzy+X6U70q0jaY=)
                          4: XvuMMh6_b9Q_-y9zoflvfhhJ8cU.roa (hash: arKO35haYoOypMHOByST819307xwbCJtuXRuiew9430=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5c:38:6a:ee:cd:9d:9b:46:aa:e6:6b:62:9b:fd:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=335ca521362226d03c1829003d81d498aa838f33
        Validity
            Not Before: Jun 13 19:01:23 2026 GMT
            Not After : Jun 14 19:01:23 2026 GMT
        Subject: CN=03212ccfa9d3796c68098647135e4b1b4f27054d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:36:8d:1e:fd:1b:ea:db:a6:da:8d:38:8b:b8:
                    5a:14:44:06:94:80:26:0f:dd:30:75:59:c3:fd:ca:
                    b8:0e:25:5a:e3:02:67:5c:4c:d5:05:45:89:ed:b6:
                    3e:6f:fa:99:c7:41:40:cb:8f:72:68:1c:ea:1c:b3:
                    3f:bc:af:37:cb:b5:5d:24:1e:c3:7b:ca:37:ce:83:
                    2b:5d:6e:f6:61:6d:f0:51:b5:19:03:f7:00:e7:86:
                    4f:6d:37:31:9b:30:df:ce:a3:ec:55:63:47:5e:d2:
                    31:c6:d4:18:f7:a6:69:1d:56:87:bf:d2:f7:31:e0:
                    60:58:1f:07:a4:4e:62:f0:54:7e:02:4c:9b:96:1e:
                    02:fb:14:c3:7f:48:bd:cd:f4:88:eb:56:bb:a5:92:
                    3f:74:3f:19:02:4d:80:a5:d0:6a:12:b2:48:dd:f5:
                    67:d0:63:8d:b2:02:0c:fa:67:5b:05:82:b0:58:d2:
                    cf:b9:ab:41:15:58:2d:ca:cb:84:f9:3a:a7:04:11:
                    68:80:79:2b:91:e9:11:1d:3e:5a:b4:71:7f:2e:d9:
                    2e:fb:3e:bf:cc:e4:67:0c:83:26:29:bb:17:61:f2:
                    6c:01:e8:76:a4:79:6e:5b:5b:06:0b:5a:cd:55:d1:
                    79:0c:90:43:0d:22:f4:b0:6f:37:41:3e:9b:35:64:
                    8b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:21:2C:CF:A9:D3:79:6C:68:09:86:47:13:5E:4B:1B:4F:27:05:4D
            X509v3 Authority Key Identifier:
                keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:39:73:3a:b5:16:b5:8a:4f:05:60:c4:aa:d6:95:e2:11:57:
         46:f8:2c:11:06:ef:75:11:ba:fd:61:08:a4:7e:52:64:b3:d6:
         dd:ff:2e:11:3a:6e:d8:1a:5c:d9:49:51:7c:22:e1:5c:32:56:
         c9:1e:71:0b:30:52:44:8a:47:ee:05:09:ff:ba:11:f4:3e:d1:
         97:e2:cf:9d:eb:2b:f8:47:be:18:08:48:4a:d3:f0:d4:8d:ad:
         ba:01:b0:7a:9a:a0:fd:bb:ad:f2:d1:29:53:93:5e:14:69:b5:
         a8:d1:63:96:66:e6:70:04:ae:d4:52:ae:8e:75:36:4f:a7:39:
         5b:d7:e7:a6:ea:56:c3:2f:ff:6d:ba:86:96:b2:9c:74:9e:b5:
         1c:42:f5:e2:3a:4f:ea:a4:ef:43:68:37:82:34:ec:03:13:15:
         95:34:b1:04:f8:e6:c6:84:01:80:fd:c4:6d:9c:3a:57:5d:88:
         7d:4a:d9:76:50:2c:11:ff:76:98:9a:4d:41:87:a9:f4:92:26:
         75:dc:42:4b:bb:5f:c2:15:b9:9c:f2:24:bf:c3:38:ba:61:1d:
         3a:4d:2e:ea:cc:c6:06:06:9e:47:52:e8:49:81:a2:4b:36:03:
         83:8d:9a:54:4d:85:3b:dc:dd:75:5b:d5:62:32:38:de:3c:5e:
         0b:52:01:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:28:13 2026 by rpki-client