Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
File:                     yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft (raw, json)
Hash identifier:          Nb2qds7HDFymCsXQnSJZHNi4fuCMWLSoIYqNcpOsuwg=
Subject key identifier:   41:6E:D0:94:29:FB:11:3C:01:72:45:F7:32:90:AB:27:AB:2E:A0:01
Authority key identifier: C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
Certificate issuer:       /CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Certificate serial:       019EE88E24D89D4D897C03FC3382D8FCAD33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
Manifest number:          0D92
Signing time:             Sun 21 Jun 2026 05:01:30 +0000
Manifest this update:     Sun 21 Jun 2026 05:01:30 +0000
Manifest next update:     Mon 22 Jun 2026 05:01:30 +0000
Files and hashes:         1: kmHpE0nIsqnNjXBHZzn8ghlLUAY.roa (hash: vHtrQdMnfFyM3Hed/jGaAR/NyxOc2xl8ZPzUXZL4Gvc=)
                          2: yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl (hash: tsbE1HqgIYTdgx93cn2h6Jfh+9kIMD/+NQKNrQiJCdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Jun 2026 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e8:8e:24:d8:9d:4d:89:7c:03:fc:33:82:d8:fc:ad:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
        Validity
            Not Before: Jun 21 05:01:30 2026 GMT
            Not After : Jun 22 05:01:30 2026 GMT
        Subject: CN=416ed09429fb113c017245f73290ab27ab2ea001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:12:5d:6a:f4:c5:86:2d:3b:78:bd:78:c8:71:
                    3c:4d:40:3a:40:d3:00:3b:2a:07:9d:e4:df:ec:6c:
                    1e:80:86:0f:f9:75:86:b4:42:60:a4:fc:b9:24:f7:
                    bc:7c:18:cb:c0:fc:3b:31:31:1a:f2:88:2a:73:60:
                    6b:60:d5:b5:00:e7:e9:e1:2f:f2:36:ae:98:d0:f4:
                    5d:41:1c:e6:56:0d:17:5c:95:bb:28:16:bf:05:ba:
                    71:a2:83:37:29:8d:02:96:9a:12:52:53:fd:2a:30:
                    d3:79:ec:21:11:a0:65:70:98:73:f1:ca:0f:6e:bc:
                    5a:1a:23:99:51:29:4b:a7:75:68:15:4c:82:70:bd:
                    71:2d:0e:dd:e6:bc:3f:f2:9d:62:78:03:01:61:d4:
                    01:2c:5a:f9:fe:55:cf:b6:d2:da:0b:cd:9d:76:42:
                    fb:ad:a5:59:1c:14:cc:5b:ba:b9:01:d4:54:66:7c:
                    73:cc:c8:81:29:aa:68:86:f8:cc:50:7b:cb:c2:5a:
                    f7:0c:a0:b4:11:88:00:e0:7c:38:86:8f:51:1e:6c:
                    4c:08:66:4c:ac:69:69:23:60:6a:59:52:9c:c2:b4:
                    d7:8b:0b:44:58:8e:10:27:0a:27:d1:5f:04:9c:af:
                    3b:8e:ee:1b:66:fd:78:18:1b:a3:cb:a1:3a:70:27:
                    60:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6E:D0:94:29:FB:11:3C:01:72:45:F7:32:90:AB:27:AB:2E:A0:01
            X509v3 Authority Key Identifier:
                keyid:C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:65:52:54:29:78:71:e2:83:a5:86:2f:4d:35:79:83:e7:45:
         38:42:36:c2:51:57:74:53:fe:22:e5:9e:ee:0f:6a:bb:56:97:
         0a:bc:a5:14:5b:c9:1f:cc:71:1e:f7:c7:c5:25:9d:81:ba:f7:
         ed:63:aa:d0:ad:ae:bb:00:7a:59:fa:ee:83:c1:dc:16:01:54:
         28:a1:84:c5:1b:27:69:79:52:07:33:88:80:6b:3c:03:f6:51:
         75:12:cb:42:c9:fb:ce:c3:63:ae:57:1e:6f:a6:1c:71:71:26:
         2b:72:d9:98:e1:55:6a:64:a0:31:d0:5b:2d:45:9f:c8:c9:4b:
         33:14:c2:9e:66:13:50:a5:64:50:a6:cf:6c:05:65:cf:49:23:
         e4:0a:94:57:09:2d:f8:01:12:89:10:8f:04:6e:a0:69:f5:e6:
         af:ed:35:94:ee:91:eb:3e:0b:d8:de:54:a2:b5:86:8e:f9:cd:
         58:9b:f3:b3:a8:50:5a:3d:0b:c2:3a:3d:79:d9:42:eb:6a:a0:
         16:ad:5a:39:ae:4f:db:94:fa:89:8a:2e:a8:d2:53:ea:ec:5d:
         e1:1d:2e:75:28:e1:a7:ca:93:fc:e4:38:9a:fd:3a:a4:1a:39:
         e2:9c:3e:ab:e8:23:0c:7b:a1:30:cf:d5:b6:3f:37:69:02:48:
         54:a8:7e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:23:51 2026 by rpki-client