Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.mft
File:                     yPZn5ggTAzhfE_1MttPaTYyxtsE.mft (raw, json)
Hash identifier:          OJQVdLItArl/tl3DWkZdLF6V20Z7r+UYQ326KIz/8rU=
Subject key identifier:   8E:B6:96:63:50:CC:4A:14:5B:98:42:68:26:7C:AB:B7:B8:BC:0D:DA
Authority key identifier: C8:F6:67:E6:08:13:03:38:5F:13:FD:4C:B6:D3:DA:4D:8C:B1:B6:C1
Certificate issuer:       /CN=c8f667e6081303385f13fd4cb6d3da4d8cb1b6c1
Certificate serial:       019EBFFF1CD89AF116A5302BA0EFDB2246CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yPZn5ggTAzhfE_1MttPaTYyxtsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.mft
Manifest number:          2A
Signing time:             Sat 13 Jun 2026 08:00:27 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:27 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:27 +0000
Files and hashes:         1: 2Z6IYH5r9rEHXyb6yaUAQh53_hk.roa (hash: iFsFHaHiOwiJNWh0rDjxLKPBB1FTnSIyeAFgavIf9wA=)
                          2: yPZn5ggTAzhfE_1MttPaTYyxtsE.crl (hash: 30OPEZkmD2fX85AEzsrTNbTb0t/iUQ3Y9pUX24IVRc4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yPZn5ggTAzhfE_1MttPaTYyxtsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:1c:d8:9a:f1:16:a5:30:2b:a0:ef:db:22:46:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8f667e6081303385f13fd4cb6d3da4d8cb1b6c1
        Validity
            Not Before: Jun 13 08:00:27 2026 GMT
            Not After : Jun 14 08:00:27 2026 GMT
        Subject: CN=8eb6966350cc4a145b984268267cabb7b8bc0dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4c:62:23:90:9f:ff:4a:54:6c:bd:de:cf:64:
                    4e:50:8a:11:1d:06:f4:39:78:a2:ae:cb:da:4f:39:
                    37:0f:5d:45:31:6e:1d:de:d9:37:78:7f:6c:55:08:
                    f6:6e:85:bb:8c:19:7b:8a:d8:0e:f8:27:c6:31:8a:
                    01:5e:1b:87:d6:a0:e5:0c:b0:b8:59:8d:83:8c:26:
                    e2:24:69:a9:14:44:cf:a0:72:1f:ad:72:61:94:8c:
                    01:89:bd:bb:6a:fc:a8:ae:3e:14:8f:ef:d2:0d:4d:
                    f7:8e:55:c7:89:6e:79:ed:85:08:63:f8:b6:c0:b7:
                    f2:85:88:3a:91:28:bb:25:a9:bd:2d:a5:ca:61:77:
                    4d:7d:f0:07:30:39:50:28:08:98:ed:0b:9c:e9:9c:
                    d5:cd:64:f1:02:e5:01:68:b8:15:fa:6d:1e:8d:9f:
                    8c:67:96:1b:4a:ca:18:e3:47:81:0d:55:80:ae:65:
                    2a:cf:32:ac:fc:f4:df:06:12:e2:5d:df:b7:49:bc:
                    67:83:86:10:74:37:c0:45:de:27:bc:46:72:38:6a:
                    8b:dd:52:5b:73:b9:74:b7:e3:57:72:4b:ab:f2:35:
                    d4:a4:51:23:be:f1:8f:5e:e1:70:8b:3f:d8:a7:a4:
                    43:20:da:55:60:78:47:53:97:52:57:85:4a:6a:b6:
                    a1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B6:96:63:50:CC:4A:14:5B:98:42:68:26:7C:AB:B7:B8:BC:0D:DA
            X509v3 Authority Key Identifier:
                keyid:C8:F6:67:E6:08:13:03:38:5F:13:FD:4C:B6:D3:DA:4D:8C:B1:B6:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPZn5ggTAzhfE_1MttPaTYyxtsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:58:f5:c6:a5:9a:7a:21:b9:74:9e:72:34:91:4f:60:22:0f:
         fb:08:51:f2:a2:16:b1:e7:87:f9:02:86:88:ea:aa:2d:69:5b:
         32:96:2d:73:ed:f5:d4:0c:72:6f:fc:2c:73:a5:fe:48:86:c2:
         9a:c9:58:b3:c5:69:c6:9d:af:90:e8:db:5c:76:1a:f0:66:ae:
         41:2a:fe:fa:c2:b1:68:9a:0b:03:72:86:78:2c:09:c9:99:46:
         d8:d1:38:cc:50:69:89:8e:54:9e:9b:b2:6d:d6:c1:5b:37:17:
         b6:06:7a:ba:ea:e9:81:89:c1:e2:e4:53:50:4b:37:02:a2:a5:
         be:0f:88:ec:50:7b:f4:63:ef:d4:ee:af:28:03:f6:ca:03:4c:
         ac:6a:5b:22:5b:2a:a1:42:47:b0:b5:db:b5:da:40:bf:84:31:
         58:cf:d1:d4:a3:33:0b:da:90:9b:75:be:7e:71:47:5e:50:7f:
         d5:1b:0c:f6:d0:b0:c7:54:b4:b2:67:99:70:6d:b3:3f:bd:23:
         f3:42:a8:84:5a:84:60:0b:6f:17:53:0a:73:7b:d3:32:48:a1:
         ee:9f:24:6c:7c:dc:e7:b6:e9:70:4f:a1:cf:41:50:88:39:2d:
         b1:4f:e1:c9:5a:35:25:1e:2b:54:3b:86:da:6c:d2:fc:08:01:
         56:79:d6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:16:05 2026 by rpki-client