Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
File:                     y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft (raw, json)
Hash identifier:          iNOS3U5dKK+nBFZtH2yFBNE75AROz6yeCJSFzPD/o/I=
Subject key identifier:   82:F2:42:FF:B2:67:BC:E6:DA:7E:4A:AF:05:92:95:10:DD:05:72:D9
Authority key identifier: CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
Certificate issuer:       /CN=cbf74cd846493138f522c57c0065b5c60512dd09
Certificate serial:       019EBF240E4D0C39010CF9A1740964A4D391
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
Manifest number:          1867
Signing time:             Sat 13 Jun 2026 04:01:11 +0000
Manifest this update:     Sat 13 Jun 2026 04:01:11 +0000
Manifest next update:     Sun 14 Jun 2026 04:01:11 +0000
Files and hashes:         1: 7wFOH7ecwAxbcPrjKMH8DMVlPm4.roa (hash: oDFpn/TpGeL3vgneJ/VQgGBHX/EOeGEzI4ysPf7pfaY=)
                          2: QLOd9vMTP4FPhghSPou0JbJuhUE.roa (hash: RwuImmn6QOcjTBNhpw2cK0vTsfjOTjWE/72ESbcTKQg=)
                          3: Y-pJ0zt5xFwsfApM5zD_msTaIqQ.roa (hash: a+YKFLuDobsKmaDDpSgIi2ckC2hwZqdDdY5fKql5U+8=)
                          4: oBXcY9E5U1GBb72h8m09mGmm-Vo.roa (hash: 9fw2PFDyEVoaxUE4CEIY7mthU2LIqsQo2HGJzEoheK4=)
                          5: y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl (hash: eqkvIUvId1QyitAJFBdq+R8em7/M+00E3+bOD6qoWgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:24:0e:4d:0c:39:01:0c:f9:a1:74:09:64:a4:d3:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbf74cd846493138f522c57c0065b5c60512dd09
        Validity
            Not Before: Jun 13 04:01:11 2026 GMT
            Not After : Jun 14 04:01:11 2026 GMT
        Subject: CN=82f242ffb267bce6da7e4aaf05929510dd0572d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0c:68:e4:d9:ee:22:67:55:a0:9a:10:6b:22:
                    74:11:60:28:9b:f2:2b:44:8d:ba:0e:06:d2:b9:46:
                    00:30:f0:32:e9:06:6b:a1:9f:eb:24:63:9a:36:6b:
                    00:50:42:87:52:41:1c:9d:4b:6b:53:d1:60:5f:8e:
                    52:c8:52:7c:6d:2b:b8:e6:7c:30:7d:5b:36:38:6e:
                    9d:35:aa:76:77:df:ce:cf:f1:92:ee:c4:af:86:33:
                    16:84:ed:3d:8e:55:a8:71:99:12:c1:5c:c4:0e:04:
                    02:c5:ff:b8:f2:6f:c3:fb:5d:d8:f5:be:e0:76:cb:
                    18:ae:e3:f2:84:1d:02:6a:a3:5d:d6:37:fa:97:33:
                    d9:db:d0:7c:bd:1e:c5:af:37:70:93:ba:97:3f:f5:
                    b2:b5:7c:33:b0:43:bb:a1:bf:ef:e9:ec:21:f8:da:
                    07:c1:19:b2:d4:b1:68:df:bb:1c:46:a0:6a:b3:e4:
                    f6:57:fb:0c:63:0e:83:e0:e1:d9:21:a8:a1:0e:54:
                    68:ef:36:92:5f:80:61:25:ec:99:95:10:67:b5:4f:
                    74:a9:29:2b:f4:74:a0:da:03:bd:fb:55:59:53:55:
                    84:09:09:c1:3b:5c:2e:cc:b4:ae:1c:4b:b6:e0:eb:
                    73:23:d5:a2:a6:42:e6:a7:79:2a:31:17:41:02:38:
                    7d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F2:42:FF:B2:67:BC:E6:DA:7E:4A:AF:05:92:95:10:DD:05:72:D9
            X509v3 Authority Key Identifier:
                keyid:CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:83:04:70:eb:1f:ca:aa:77:4b:51:8f:e8:4c:17:3a:5d:b8:
         43:fd:43:f4:3d:8f:05:47:5f:e5:46:d4:e9:5b:ed:88:39:62:
         97:81:52:6d:14:15:8f:f6:94:2d:b4:00:64:ac:40:77:72:c8:
         c4:63:eb:48:0b:25:af:d9:e6:f0:1e:7d:7f:e9:08:0a:dd:88:
         3b:66:a6:52:38:e0:6f:cc:cb:1d:88:3e:ab:2a:08:cc:6b:26:
         b1:4e:05:e3:ed:4b:8f:a5:7a:4a:39:4c:30:e6:05:4c:b4:63:
         84:46:f9:14:e2:38:cb:e3:20:09:bc:e3:c4:d0:24:d4:5f:83:
         ec:37:e4:ce:be:a9:a4:71:91:79:c7:7a:16:87:a4:e7:e2:33:
         e2:97:12:dc:14:9a:a9:d1:e8:cb:67:38:f9:b3:6c:e0:2d:5f:
         9b:49:1b:b3:40:55:f2:c1:90:b4:d0:56:d0:52:47:56:b8:eb:
         84:34:60:16:50:aa:68:62:03:16:13:b7:68:70:5f:f4:a2:58:
         3e:72:58:48:e9:ad:6b:59:ef:03:6b:1d:d1:07:f0:75:95:82:
         d6:49:4e:1c:04:35:10:c5:16:7b:e4:eb:48:79:c1:2f:d4:ef:
         95:42:24:0c:9e:63:28:7a:42:4f:bb:09:0c:15:d1:99:a7:15:
         e8:5e:e1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:28:36 2026 by rpki-client