Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
File:                     Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft (raw, json)
Hash identifier:          HPF8LEXoF6HN7FoW7HF6WWg3tsbYU57RnadWYPKFVsY=
Subject key identifier:   39:72:27:9C:0F:8E:18:68:2E:A2:8A:EF:3A:6B:79:42:AE:15:33:41
Authority key identifier: 62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28
Certificate issuer:       /CN=62beaa57c67aeb5bafd99793ab4846850a796c28
Certificate serial:       019EC17F840EFDEC8648C1BA5046FA2FCB7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
Manifest number:          0D25
Signing time:             Sat 13 Jun 2026 15:00:19 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:19 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:19 +0000
Files and hashes:         1: HJtkjvlBva8uqcL0XUNpqigQG9s.roa (hash: WkXmQkgs5y2TV+m/F6AQDR1j74heyCTTdW3y6tsfBHk=)
                          2: OUHZPu_PJYtOLDLbLVCMk8yoe-k.roa (hash: Ma69Row9f6EcaHWc23EqgBUIT2c3X7xAnz9i9hXJ3nQ=)
                          3: Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl (hash: NZzWWlunE2M++7qXfPb4mgDGnkn+SJxE9gCEbSAUQO8=)
                          4: kz2wF3XWQ2RN8sHvIuIFZYtVNIQ.roa (hash: mNiLwNy9yFADV0O6uoYz7QI7buc164Ngl+VExm6ZaD8=)
                          5: xprcFFAPJjG3UElyOhAJ6E9gXpA.roa (hash: o5pGWYnDSMF3mxP8sdDWWibluTFKuj51TiZS9rC+X/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:84:0e:fd:ec:86:48:c1:ba:50:46:fa:2f:cb:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62beaa57c67aeb5bafd99793ab4846850a796c28
        Validity
            Not Before: Jun 13 15:00:19 2026 GMT
            Not After : Jun 14 15:00:19 2026 GMT
        Subject: CN=3972279c0f8e18682ea28aef3a6b7942ae153341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:76:58:e1:df:8f:c0:40:89:ed:3b:ae:31:c5:
                    0c:06:57:57:ee:d7:d7:c7:34:e7:b0:94:ec:7a:d6:
                    6f:90:ab:a8:19:22:30:b5:54:2e:70:22:e6:92:bb:
                    94:d6:8e:26:6a:aa:af:c6:07:5a:80:8d:87:7a:b8:
                    31:ec:7a:cd:00:8a:85:53:b8:4f:39:1b:a2:03:4c:
                    6c:94:43:4d:3f:ef:05:f3:1e:e1:c8:95:a0:4f:77:
                    32:ff:cb:e5:d2:57:46:c6:d3:a0:81:f4:3d:7a:45:
                    1e:78:d9:f9:4d:48:2c:b9:b3:a0:a5:9d:2c:ca:c5:
                    74:41:ef:c7:f9:35:0f:b6:a7:c0:44:8f:be:6b:ff:
                    52:3c:dd:63:17:4b:cc:0b:b8:ac:b5:f9:2f:cc:5f:
                    0b:9c:51:d7:7a:73:b7:06:33:27:c5:00:eb:48:04:
                    58:78:e3:c2:a2:a9:de:b6:29:22:b2:10:cd:d6:c8:
                    b1:b9:47:3f:95:a3:8e:4c:eb:40:e4:a7:c5:83:7a:
                    92:e3:43:97:b2:9e:6a:54:91:62:c6:98:b1:81:1a:
                    31:87:6d:23:a2:8b:13:fa:d2:22:7f:b3:4b:7f:e4:
                    6d:27:3b:63:90:50:1f:8d:ea:aa:13:c7:f6:fa:8d:
                    fc:7c:59:d4:95:88:33:7d:22:52:7e:45:25:fc:3e:
                    b8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:72:27:9C:0F:8E:18:68:2E:A2:8A:EF:3A:6B:79:42:AE:15:33:41
            X509v3 Authority Key Identifier:
                keyid:62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:49:3a:0b:e2:2f:1e:12:b1:f8:d8:97:ef:a4:84:a7:41:15:
         0d:74:66:2c:68:80:ab:46:ef:44:53:c7:41:41:cc:93:fe:35:
         d1:a5:19:20:bc:77:91:ac:a7:df:bb:c2:fd:3f:c6:d4:42:7a:
         7f:71:91:85:52:60:3b:c9:92:30:7c:47:56:5b:a9:c7:b9:01:
         2f:a5:d3:e4:af:73:a6:81:15:0b:b9:5d:85:42:4f:2e:a8:9a:
         85:31:8f:e5:56:f9:42:44:fa:04:4f:89:e2:c9:e5:07:bf:77:
         25:35:fe:4b:aa:d4:1c:51:d5:ee:7e:a1:a0:fc:19:5d:8b:c6:
         fd:1d:35:a4:c7:40:65:05:7d:a9:30:1f:8b:07:38:ef:ff:52:
         f2:2d:55:39:b0:a9:49:2d:f4:dd:70:b4:83:f3:04:ea:50:c9:
         89:82:34:83:db:82:11:06:3b:7f:92:34:ea:e7:45:a6:9f:09:
         29:10:cd:a1:ec:3d:7f:13:78:41:24:69:b5:6b:eb:44:a4:15:
         fb:3b:64:e1:99:8c:5d:ee:79:65:bb:31:9a:32:b9:46:a7:2a:
         2f:f9:eb:7c:da:fb:46:4c:e5:24:7a:c2:c4:22:6f:1c:8a:bd:
         5a:49:aa:6f:f5:4a:21:6c:76:7a:e5:ea:b7:d7:77:05:6b:bc:
         3e:84:c3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:57:28 2026 by rpki-client