Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
File:                     YVdYrqR51PMqnonpgI8w7fwjsuc.mft (raw, json)
Hash identifier:          jThHC5X7o0oeWAkz42J1FV5RfXpjKK71NjWh1KaYqMk=
Subject key identifier:   92:0A:AD:BC:3A:72:BE:23:35:9B:1F:01:3F:2E:44:0D:8A:E5:D0:84
Authority key identifier: 61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7
Certificate issuer:       /CN=615758aea479d4f32a9e89e9808f30edfc23b2e7
Certificate serial:       019EBEECD5CDF5ACA0044C459C6399DF7A46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
Manifest number:          0184
Signing time:             Sat 13 Jun 2026 03:00:52 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:52 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:52 +0000
Files and hashes:         1: AVMt1IkFQkpQTFPhcJiPQebWyaw.roa (hash: qqeo1sr3KufApWxnZYHLgx99+UAI5SwVQeJY/6Jm77o=)
                          2: HTkWVqwWdYMU9-z901Fkn7FF9qw.roa (hash: 84JM0NxqvFzDNFSOBlDrmX34vQu0On4QXXv7AseJZbk=)
                          3: MMWviOYCBW0u-v9YnjmnhatFDV8.roa (hash: yRtMl95uh8M4yTrzp5OTDyFY8UopBvd6bRvc/jRLsfc=)
                          4: YVdYrqR51PMqnonpgI8w7fwjsuc.crl (hash: RcsfkPaDvUEhthhOCYiHW5C2pHwYdzKYQF7jHMTaA6M=)
                          5: _VWZ0XjMvcGoTelbVe1k8IzzHlo.roa (hash: G04H0qYQyU9/pfzI/sNJzq68+ieZrRS73Fbf1e3vIW8=)
                          6: cCA0wjgUUO3sAdPTJXUOJCpOGaU.asa (hash: vuAaHA0d+fmntVENPlaiPGFPGkTEzsB/M+vM35Fie4s=)
                          7: hLbS1YYILQ9sQxDeGkNOA1MpSJs.roa (hash: aCviuUzfEy79q4aOge+wEpAQjNz6H04AGobOXXp8iek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:d5:cd:f5:ac:a0:04:4c:45:9c:63:99:df:7a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615758aea479d4f32a9e89e9808f30edfc23b2e7
        Validity
            Not Before: Jun 13 03:00:52 2026 GMT
            Not After : Jun 14 03:00:52 2026 GMT
        Subject: CN=920aadbc3a72be23359b1f013f2e440d8ae5d084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2f:67:19:eb:dd:73:1f:9f:33:b9:e8:40:e9:
                    e8:41:8a:f5:6f:8e:e8:cf:ed:42:aa:61:da:f7:64:
                    9d:4c:65:40:29:c7:d5:bb:e7:75:27:95:9e:c9:46:
                    b0:91:f5:dd:f1:5e:ab:ec:a9:e8:ed:4a:b8:59:ce:
                    22:da:79:97:54:9d:8e:a6:06:fc:45:26:5c:87:02:
                    63:df:cd:52:c6:9f:95:85:6a:4d:b2:94:50:4e:d6:
                    73:10:20:d6:81:19:20:bb:d9:95:90:1e:1c:e1:5b:
                    69:df:f0:48:31:1b:0a:ee:40:fd:d7:1f:90:b4:71:
                    59:fe:84:70:d3:c7:16:0d:99:17:39:16:60:36:c7:
                    2c:22:bd:19:24:5e:04:c4:a8:05:01:79:42:4e:8e:
                    6f:5f:d4:b7:95:aa:ad:27:95:bf:6d:ea:0b:62:c2:
                    29:0b:68:7b:4e:4b:d2:2d:32:70:7f:39:f5:7c:04:
                    b6:73:76:66:0f:e5:5f:c9:88:90:a5:47:64:42:d8:
                    09:42:b5:e8:31:db:08:20:49:ad:d0:d1:75:1e:ee:
                    83:7d:4b:b1:5b:d9:4e:a7:49:94:11:6d:14:8c:1f:
                    c2:fa:6a:97:32:33:da:7d:2c:47:df:67:3a:d0:24:
                    5f:0e:2f:72:10:fa:3f:00:e8:dc:4d:9d:84:13:9f:
                    75:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0A:AD:BC:3A:72:BE:23:35:9B:1F:01:3F:2E:44:0D:8A:E5:D0:84
            X509v3 Authority Key Identifier:
                keyid:61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:d6:4d:ce:28:f1:d0:2e:b7:44:c2:bc:ac:89:d7:7b:66:ca:
         05:48:99:ba:d1:b0:4a:c5:d4:e1:f7:71:7f:4d:f0:2a:3b:a8:
         48:38:01:3b:14:f2:81:be:7d:9f:9e:d2:2d:e6:5a:67:2e:74:
         7e:9c:61:73:9b:bf:b3:56:99:70:73:47:4b:38:67:9d:87:c1:
         2d:51:6c:56:a6:87:44:44:df:7f:da:dc:47:cf:44:43:b1:b1:
         ad:5e:b4:62:c9:c8:97:7e:b0:7f:f4:b3:11:25:9a:33:b7:e6:
         16:3d:8c:b2:84:7d:eb:c2:97:49:44:b3:0a:dc:39:f7:ae:5e:
         43:99:11:03:d6:9a:a8:34:e6:e9:5e:30:26:4d:a5:cd:ad:92:
         3b:32:32:b1:e4:04:2e:24:57:8c:2d:31:a8:f8:a8:2c:e1:e1:
         7d:9c:86:c6:96:16:5e:7d:9f:fd:4b:48:d2:ca:a0:be:57:e6:
         4a:53:81:b1:ef:01:cc:95:e4:97:8c:fc:04:ee:4f:98:48:1b:
         1e:6a:bc:03:40:f1:9a:08:7f:2c:59:43:37:d8:91:80:32:50:
         1a:b7:33:eb:d0:52:ff:ff:00:53:e3:d0:e2:1c:08:60:f6:61:
         71:7a:74:0f:28:ed:8f:94:65:3e:06:3f:51:c7:88:a2:1a:9e:
         72:21:91:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:55:34 2026 by rpki-client