Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
File:                     1YzIUG_tu1Bh3pklsH1kmRihmSY.mft (raw, json)
Hash identifier:          9sLJkDdKrRiSF2++urDxRuLNSq7ExcwzCzxCbWxUy8E=
Subject key identifier:   F5:23:38:B3:7E:33:43:73:86:AB:A3:28:D0:D6:07:98:D4:86:FF:67
Authority key identifier: D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
Certificate issuer:       /CN=d58cc8506fedbb5061de9925b07d649918a19926
Certificate serial:       019EBEB59E480F0B2F7997A50C28540E9EF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
Manifest number:          143B
Signing time:             Sat 13 Jun 2026 02:00:33 +0000
Manifest this update:     Sat 13 Jun 2026 02:00:33 +0000
Manifest next update:     Sun 14 Jun 2026 02:00:33 +0000
Files and hashes:         1: 1YzIUG_tu1Bh3pklsH1kmRihmSY.crl (hash: 6I/30k2oQqLf8kOlCCcGFQtvKBE9aA+PSqCvVc04D2U=)
                          2: HjhcNkYhwKAwsCXy5ZYGbpaMSLg.roa (hash: xX7UUwpJ+KfmGQzUw1STndVlg/7oKae9beZ2g3g7Y4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b5:9e:48:0f:0b:2f:79:97:a5:0c:28:54:0e:9e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58cc8506fedbb5061de9925b07d649918a19926
        Validity
            Not Before: Jun 13 02:00:33 2026 GMT
            Not After : Jun 14 02:00:33 2026 GMT
        Subject: CN=f52338b37e33437386aba328d0d60798d486ff67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:47:c0:58:76:58:a0:1b:bb:6d:a5:41:14:4e:
                    d7:bc:4e:9d:56:b0:38:a2:9a:ab:89:39:02:5c:95:
                    53:88:fd:bc:2a:c5:14:2b:85:4a:c3:31:34:82:9d:
                    2d:d4:29:cf:44:f8:e5:52:cc:59:7e:46:c0:bb:05:
                    bd:65:40:b3:09:db:41:8d:92:42:4b:3d:e2:b9:33:
                    e9:27:b1:6a:ae:d5:77:ac:6f:a8:13:83:24:ca:52:
                    7d:83:31:85:86:37:ed:b7:84:8e:cd:9a:d0:21:fe:
                    7c:0b:31:75:e9:1d:5e:bc:d2:b0:fa:e6:a3:60:f5:
                    8f:65:fa:57:b6:fb:1e:9b:a0:a4:a3:92:f3:a2:57:
                    1a:d6:ef:3e:8f:b3:45:df:68:14:a3:cb:ef:1e:ce:
                    1e:ac:c5:4a:ae:22:ea:52:b2:27:c7:ec:90:12:c2:
                    64:cc:09:31:81:3e:dc:9d:90:26:4b:a5:cc:6f:88:
                    04:0a:9c:85:1f:e1:46:62:3e:e6:36:7a:07:4e:9e:
                    1e:bc:a0:8e:91:f8:4d:51:8c:11:3a:75:4b:3e:21:
                    71:cb:7a:1f:6c:5f:2d:3e:4d:f6:19:03:37:b5:4a:
                    50:ad:c6:53:0d:a4:93:5b:82:ec:89:4f:6e:b6:09:
                    4b:67:74:ff:5e:96:20:fe:e0:0c:47:51:77:36:ed:
                    90:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:23:38:B3:7E:33:43:73:86:AB:A3:28:D0:D6:07:98:D4:86:FF:67
            X509v3 Authority Key Identifier:
                keyid:D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:bf:29:87:77:a3:aa:a5:4b:ed:3c:37:49:be:51:b6:77:4c:
         68:a2:57:9b:ed:e0:71:51:fd:bc:92:cf:bd:88:76:cf:15:41:
         0a:a8:db:ff:45:90:d9:3d:28:84:d8:ca:d0:6f:d8:db:96:0e:
         cf:9b:8a:e8:22:b6:07:8c:75:b2:9d:ee:ea:80:ee:ee:af:ab:
         c5:39:0c:76:50:84:da:ee:28:70:be:59:2e:1e:45:15:89:eb:
         f7:63:a6:e4:79:d3:0e:9e:19:1d:a5:6f:76:57:a6:a1:6d:df:
         da:76:42:83:b1:48:72:c6:ec:36:00:1d:0f:ef:56:18:d1:ce:
         c7:d6:66:b5:7e:28:a7:2f:83:02:e3:b9:6f:85:f1:b0:b2:24:
         0b:63:d3:0f:a7:66:37:f4:d1:03:3c:af:a8:f2:c7:24:5f:8c:
         ad:61:d2:7f:d8:29:f3:2f:8a:f8:d5:41:af:df:aa:73:a4:f3:
         4e:05:20:07:09:bd:04:9a:12:0f:8c:a3:2c:41:0e:8f:ae:c0:
         29:d3:4d:e7:44:7a:80:cf:88:e6:69:e9:24:36:52:60:bb:e0:
         f5:6c:94:06:57:2b:a3:6c:2e:07:c3:86:08:5d:ff:df:a1:fc:
         aa:c6:85:16:70:41:2e:d7:c8:fb:ff:d8:d9:89:05:33:76:1a:
         78:d8:86:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:15:34 2026 by rpki-client