Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
File:                     YoVOil7h3sifJbKnhZAj_7Ejufg.mft (raw, json)
Hash identifier:          awL2krodh+9Ybxajw3/vlS13GBmn91CFl8zFrsemm7o=
Subject key identifier:   7D:47:D2:D3:D5:46:48:FA:0E:03:EF:44:5E:65:3D:7E:AB:9C:B6:F2
Authority key identifier: 62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8
Certificate issuer:       /CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8
Certificate serial:       019EC112954BCEE9DF181062A07480312DB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
Manifest number:          08E2
Signing time:             Sat 13 Jun 2026 13:01:21 +0000
Manifest this update:     Sat 13 Jun 2026 13:01:21 +0000
Manifest next update:     Sun 14 Jun 2026 13:01:21 +0000
Files and hashes:         1: YoVOil7h3sifJbKnhZAj_7Ejufg.crl (hash: 4SCaCK6oJYMSRjb0MjlYD0FOTRO2Ql4rcHFiRAVHg8E=)
                          2: isOSymizWXOcC4S89abLh_Td0W4.roa (hash: ZSx/++lxhtzVvGMFIOdk3/EWMp5zvQTOhZYOai4ono8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:95:4b:ce:e9:df:18:10:62:a0:74:80:31:2d:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8
        Validity
            Not Before: Jun 13 13:01:21 2026 GMT
            Not After : Jun 14 13:01:21 2026 GMT
        Subject: CN=7d47d2d3d54648fa0e03ef445e653d7eab9cb6f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:ee:26:af:88:19:36:29:32:22:68:af:d4:
                    41:e1:0c:fd:44:be:5e:b1:90:2a:cc:88:88:bb:4b:
                    c6:49:3a:c0:6a:6b:df:fb:66:18:13:ae:49:95:22:
                    20:b0:a8:68:b1:ee:00:dc:02:34:93:a2:12:01:3d:
                    28:97:d7:db:7a:14:bc:61:35:10:a3:69:cf:8f:9a:
                    fa:33:25:d9:9c:63:c2:3d:65:32:c8:2d:64:c2:8d:
                    31:2d:cb:48:92:a3:16:d0:20:5d:e8:8e:77:54:00:
                    54:1a:17:8d:82:c8:1b:97:54:30:fb:1d:1d:2f:15:
                    5e:15:42:b2:7d:40:3f:57:92:b1:89:30:d2:80:16:
                    6f:36:cc:80:3b:c1:10:e5:97:e1:1c:25:51:bf:84:
                    fa:9c:fa:b1:88:32:06:c1:2e:b7:88:63:eb:8d:5b:
                    40:13:f6:b6:9f:a1:99:48:6b:a3:4c:41:be:a8:d3:
                    c2:22:ef:fb:43:f0:18:3b:6d:3d:4e:be:b5:f4:00:
                    9f:42:6d:5e:7b:f2:6a:fe:2c:d8:aa:61:74:e8:1b:
                    02:a8:de:2d:57:e4:5b:17:7c:6d:83:45:c7:17:ed:
                    2e:40:10:d3:78:96:ea:95:4a:d1:3b:6c:ca:a0:84:
                    b9:35:7f:b0:d5:28:a0:77:47:b1:77:f8:4a:ca:a3:
                    2f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:47:D2:D3:D5:46:48:FA:0E:03:EF:44:5E:65:3D:7E:AB:9C:B6:F2
            X509v3 Authority Key Identifier:
                keyid:62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:33:7c:38:cc:e2:cc:4d:4e:61:e4:fe:6d:76:8c:a6:1e:47:
         82:75:27:4f:ee:55:8e:02:65:a1:34:03:d2:5a:c1:cd:86:ba:
         b4:1f:aa:8e:83:81:78:7a:72:d1:63:61:8c:e6:c4:4b:2e:32:
         28:ee:20:0c:c2:ec:f9:95:76:4f:4d:8d:d9:52:56:66:96:4a:
         21:e4:c6:7d:67:f9:d5:27:c7:58:f7:a2:e4:2c:0e:f7:f7:8c:
         a2:c7:93:79:e2:12:dc:f4:27:61:b7:65:c7:42:f2:7e:a7:85:
         0e:97:ec:74:a4:e9:b3:d8:55:33:aa:cb:d8:e7:00:66:42:74:
         cd:46:3d:d7:07:86:8a:0f:b7:ac:f8:c9:4e:4e:43:18:a1:a2:
         cb:1a:04:18:18:1a:10:aa:ec:7e:20:a6:99:42:36:e2:6e:23:
         05:8d:1e:0f:6b:b4:cc:9b:60:c4:66:9d:4d:a7:3c:67:0a:37:
         ba:a6:df:9c:65:72:62:cd:48:7f:b7:03:fe:fc:99:65:f6:12:
         cc:96:5d:57:49:33:4d:3b:9e:12:be:3b:c3:80:2c:38:a0:71:
         57:4b:d0:9c:f8:89:91:69:3b:8f:17:09:d4:00:4c:d5:b7:17:
         7d:d2:46:05:62:61:e4:10:15:4c:41:6d:9c:33:b5:19:0c:65:
         b3:fd:e9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:14:42 2026 by rpki-client