Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
File:                     YI5qalQBfdO5sszjX9Wpp_KkVJg.mft (raw, json)
Hash identifier:          nvfnk5UhNiOJphA8qWHD2EwfEg02IBQDCj4ZM7JUgFc=
Subject key identifier:   09:EC:45:36:AF:4A:EE:80:58:8A:A3:16:6E:78:80:D3:C4:DE:89:D2
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Certificate issuer:       /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial:       019EC0DBA31405336B7253E9267D6D9AF83D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 12:01:20 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:20 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:20 +0000
Files and hashes:         1: EGcAzbKTUnqrJBWDw9Zl1NjvipA.roa (hash: WN1W+AcOMLOyw+Z7FxISMQd+TynXYraLEQDBrawgt44=)
                          2: YI5qalQBfdO5sszjX9Wpp_KkVJg.crl (hash: 4TMQYIaJJHdCwI71RlN5Jma5XXsdqo6cpv80fEs6pdQ=)
                          3: _tJiHAhGvLVPtYOMlLKCBsGuaeI.roa (hash: 0t/lW4HNsvLF4G+Bu7vWjQlegvcFtdB8mR4eqRFVFzU=)
                          4: d-N2YiUYpoOLPomAp2JVyicVc40.roa (hash: zETEJQC7tB8lRhNeIGpvA+FfF5ncGBNLatmPmvMsTNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:a3:14:05:33:6b:72:53:e9:26:7d:6d:9a:f8:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
        Validity
            Not Before: Jun 13 12:01:20 2026 GMT
            Not After : Jun 14 12:01:20 2026 GMT
        Subject: CN=09ec4536af4aee80588aa3166e7880d3c4de89d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:35:f9:42:51:50:c2:e8:bb:81:5a:7e:9b:53:
                    3b:0c:3f:a9:65:8b:21:7b:5d:8c:37:05:b1:c8:6f:
                    0f:d1:ae:81:84:3f:ae:bf:6d:43:a4:bd:7f:18:6d:
                    a8:7a:88:99:2d:55:34:d0:65:58:95:d1:c4:ca:c4:
                    7e:ae:5c:e0:54:5d:4d:c7:08:fa:c7:4b:75:34:db:
                    47:b7:a2:b3:36:67:a6:04:92:81:e3:d4:5c:b1:c1:
                    54:cb:6d:e0:9b:70:44:06:f7:3f:e5:fc:32:5f:9b:
                    9f:09:5f:cc:9d:54:fb:f5:13:16:18:c3:b5:20:0a:
                    61:66:b5:ff:18:cb:62:1e:33:d7:32:e3:34:18:83:
                    b3:91:ef:03:0f:07:a4:58:8d:6e:5b:27:38:3c:32:
                    b5:64:a7:44:5f:8c:89:9d:fb:fd:f5:4f:aa:38:8a:
                    0e:bb:a9:26:96:aa:f5:96:64:d1:3c:e7:67:f0:da:
                    2f:f6:11:09:d2:12:9e:1c:a4:eb:f6:fb:1b:b8:95:
                    16:2f:a3:a7:9c:bd:47:54:4d:2d:f3:f0:e5:d7:e4:
                    39:13:ed:ea:28:54:3c:5c:1f:14:73:f4:69:7a:d2:
                    78:71:14:64:12:16:cd:57:98:6e:c9:6b:41:8f:e2:
                    d9:08:76:dc:8a:69:26:26:9b:1d:f0:2d:05:14:2e:
                    e6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:EC:45:36:AF:4A:EE:80:58:8A:A3:16:6E:78:80:D3:C4:DE:89:D2
            X509v3 Authority Key Identifier:
                keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:3e:84:5f:e9:f8:70:8b:e9:92:ce:e7:ee:16:34:90:d4:97:
         a7:64:60:17:21:6e:fb:b7:4a:2a:1b:b3:41:f0:30:7b:15:85:
         bd:21:60:bd:20:c7:f5:5b:fe:7f:6b:00:9d:1e:da:d5:43:a3:
         c3:33:a0:06:6d:f2:7e:49:bc:1e:a8:91:ea:40:34:77:8d:ed:
         7b:3e:e0:41:43:da:24:b2:f4:92:ed:e9:f7:cb:8f:3f:95:bf:
         1d:20:5f:4f:21:9c:b1:ee:cf:cb:a8:bc:83:a8:e1:dd:ea:57:
         50:5c:4d:e8:89:2b:40:bb:eb:6f:8a:b0:03:75:3e:9f:a8:ac:
         6c:2c:b3:a3:a5:e6:b9:25:a4:f1:43:55:88:4a:c4:f9:d7:7c:
         f0:04:9b:45:5c:4f:3f:24:d9:1d:f6:0b:da:ca:53:e1:05:3f:
         bd:f6:17:44:88:62:1a:93:d3:b4:1b:f4:d0:11:0c:a6:58:3b:
         7e:a9:23:47:7b:c3:c8:9f:b0:a4:d3:22:b3:1a:06:fb:d2:21:
         5f:34:cc:95:34:8d:27:e3:23:43:96:5b:a5:1e:e3:13:73:f0:
         37:75:3a:52:c4:97:08:74:70:03:61:3d:e9:68:be:6c:57:d8:
         03:70:dc:fa:bb:52:e6:78:ac:18:8c:31:ba:35:02:c3:3b:3a:
         e1:64:0c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:04:34 2026 by rpki-client