Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
File:                     yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json)
Hash identifier:          sb8NbfeY4r6YWmMIsU0SEbg4uqn+cOKe1xRajsA7gKo=
Subject key identifier:   31:60:BA:FF:AF:09:B6:9D:D2:06:06:68:54:C2:F3:8C:C2:06:A6:02
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Certificate issuer:       /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial:       019EC1B681F3FF5FFC863DFC8F044980B30F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
Manifest number:          11B7
Signing time:             Sat 13 Jun 2026 16:00:23 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:23 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:23 +0000
Files and hashes:         1: D3wkpKKSoJovDsiCfvbh1DYTkx8.roa (hash: c0FcHGYTB+tG9IR/+QbyBfjUn2VqFpbtfy3DDserGhM=)
                          2: KSjHgXPRASqnBW1tjOtvhmkWPHE.roa (hash: h5XvzMTTFxSuHg9vWwCmjacM7SXacJTLfB8wl2n3Cec=)
                          3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: vLYhTgT4INj/BZX3yRXFfRJreTIUyAAuYgw9rUgZdCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:81:f3:ff:5f:fc:86:3d:fc:8f:04:49:80:b3:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
        Validity
            Not Before: Jun 13 16:00:23 2026 GMT
            Not After : Jun 14 16:00:23 2026 GMT
        Subject: CN=3160baffaf09b69dd206066854c2f38cc206a602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f8:4f:96:b1:31:76:80:53:51:bc:bc:93:30:
                    25:61:4c:42:bf:e2:23:9d:61:01:52:f3:45:59:69:
                    66:89:3f:b5:4d:7e:a3:ec:bd:d7:a2:97:a1:e1:c0:
                    48:d3:78:10:71:46:17:e9:a5:37:0e:de:22:e2:d9:
                    ae:2c:39:a1:22:48:1c:6f:8b:f8:05:f4:7c:d9:32:
                    34:69:9c:f9:28:fa:08:2c:10:a3:0b:3e:9e:ed:ba:
                    75:d8:d7:ee:85:37:e0:fe:7a:74:53:f8:f2:37:4f:
                    9a:05:a7:e1:4f:8a:85:3a:22:f8:87:52:3c:d9:20:
                    53:5e:b0:29:2d:a7:c2:07:4d:9e:37:c0:c0:ce:d4:
                    6f:03:cb:4f:69:8f:51:fa:fb:44:50:03:90:89:99:
                    11:63:48:4e:7c:0c:0b:35:53:ef:92:ba:f1:98:78:
                    c7:9b:ad:80:92:e1:b1:32:b1:19:55:b5:6f:ea:05:
                    94:d8:77:29:5f:89:0b:2e:fc:57:a0:d3:3b:c4:95:
                    1c:6b:e6:60:dd:29:55:89:0e:24:3a:0e:fa:79:ae:
                    c0:f4:be:8b:f7:36:04:d6:54:1e:72:35:2b:37:6b:
                    eb:a5:78:5b:d3:e9:61:58:7f:8b:14:7c:83:5a:0d:
                    a3:a0:e7:da:97:d5:ec:aa:cb:31:eb:c2:c1:9b:a6:
                    94:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:60:BA:FF:AF:09:B6:9D:D2:06:06:68:54:C2:F3:8C:C2:06:A6:02
            X509v3 Authority Key Identifier:
                keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:c3:f6:61:bd:a5:a6:da:9f:e3:fc:de:9c:35:cc:77:44:55:
         a8:e4:f0:63:df:2b:58:70:e1:60:a8:f7:e4:da:10:da:28:4c:
         ef:30:05:ce:f6:a4:e1:dd:fd:b3:2c:ae:8b:a4:54:e7:7f:84:
         9c:e0:36:c2:31:4f:3e:0f:01:80:a8:19:78:b8:5a:a2:3b:3a:
         68:19:b6:84:d5:20:29:94:a3:f1:c7:c4:90:d6:0b:1b:13:bc:
         a7:7b:28:d3:e7:0b:7a:7c:b7:3c:13:62:8a:cb:f4:a4:d3:d1:
         70:1f:1c:c6:af:f8:12:ac:68:e5:7c:f1:43:06:e1:86:3e:82:
         9f:06:c6:c4:02:b4:7c:a3:8e:b0:93:96:d3:a0:7f:d4:a5:b1:
         9d:ba:6f:4f:ed:a1:02:c3:b6:c4:9d:90:07:50:0e:79:1a:ee:
         60:cd:68:96:60:d1:a1:91:3f:42:fb:94:93:c8:cd:30:f5:d2:
         f7:0d:13:32:00:43:63:18:4a:1d:4b:d8:f3:e3:04:d2:ad:2d:
         d9:13:93:32:7a:e1:bb:db:30:15:2e:54:20:d2:ef:42:99:98:
         a9:4c:ad:fa:25:e5:a7:8e:82:44:39:8e:3b:5c:7c:25:a4:21:
         ba:7d:4a:df:55:36:9b:14:f4:e3:ff:b3:ac:4e:cd:26:be:aa:
         1c:84:67:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:24:04 2026 by rpki-client