Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
File:                     YVdYrqR51PMqnonpgI8w7fwjsuc.mft (raw, json)
Hash identifier:          3JZGUKZHym1KEmZY0QGJH3Q8a8rfJX4bPBoAbUNoLp0=
Subject key identifier:   DA:01:72:2C:17:1F:1F:BC:B6:20:0A:25:0D:22:34:AD:CF:9F:3C:04
Authority key identifier: 61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7
Certificate issuer:       /CN=615758aea479d4f32a9e89e9808f30edfc23b2e7
Certificate serial:       019EC0DBD661FD4F65153B0D22E8480D4A85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
Manifest number:          0185
Signing time:             Sat 13 Jun 2026 12:01:33 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:33 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:33 +0000
Files and hashes:         1: AVMt1IkFQkpQTFPhcJiPQebWyaw.roa (hash: qqeo1sr3KufApWxnZYHLgx99+UAI5SwVQeJY/6Jm77o=)
                          2: HTkWVqwWdYMU9-z901Fkn7FF9qw.roa (hash: 84JM0NxqvFzDNFSOBlDrmX34vQu0On4QXXv7AseJZbk=)
                          3: MMWviOYCBW0u-v9YnjmnhatFDV8.roa (hash: yRtMl95uh8M4yTrzp5OTDyFY8UopBvd6bRvc/jRLsfc=)
                          4: YVdYrqR51PMqnonpgI8w7fwjsuc.crl (hash: S2tJPHtbhd8XjDsNfbtA/tatSDa+APdvVxfWnmOycAM=)
                          5: _VWZ0XjMvcGoTelbVe1k8IzzHlo.roa (hash: G04H0qYQyU9/pfzI/sNJzq68+ieZrRS73Fbf1e3vIW8=)
                          6: cCA0wjgUUO3sAdPTJXUOJCpOGaU.asa (hash: vuAaHA0d+fmntVENPlaiPGFPGkTEzsB/M+vM35Fie4s=)
                          7: hLbS1YYILQ9sQxDeGkNOA1MpSJs.roa (hash: aCviuUzfEy79q4aOge+wEpAQjNz6H04AGobOXXp8iek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:d6:61:fd:4f:65:15:3b:0d:22:e8:48:0d:4a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615758aea479d4f32a9e89e9808f30edfc23b2e7
        Validity
            Not Before: Jun 13 12:01:33 2026 GMT
            Not After : Jun 14 12:01:33 2026 GMT
        Subject: CN=da01722c171f1fbcb6200a250d2234adcf9f3c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:70:7a:99:da:dc:da:9f:93:5a:d1:09:c8:7c:
                    87:77:e4:7c:60:31:83:27:c6:79:a4:04:ae:f3:ff:
                    6e:7a:8f:bf:be:f7:4c:2d:e8:72:84:51:1a:4b:ae:
                    91:a3:5c:e3:ce:c6:e0:6c:0a:97:1b:95:3f:fe:0d:
                    39:7f:c4:70:5c:02:bb:56:a0:b2:da:97:e8:86:be:
                    42:14:93:fe:1e:68:c6:a3:39:74:51:81:26:8a:38:
                    ea:66:77:19:7a:90:35:51:99:0e:d4:91:d6:ff:a5:
                    f7:14:ab:39:9b:f3:0f:a5:42:a9:6a:15:81:34:c6:
                    d8:bc:9d:54:32:e5:8b:c6:74:a1:22:3d:84:cc:10:
                    42:3b:de:5d:87:7b:3d:0a:05:a3:d5:94:ea:6a:e5:
                    ed:68:ee:41:21:63:5b:91:e5:87:b2:de:47:6a:99:
                    41:8f:3b:12:52:94:84:92:ba:a6:85:06:61:7b:c2:
                    90:96:f3:f9:a6:cd:70:9f:0a:ab:62:23:8f:5b:64:
                    66:ad:f4:55:ce:4b:aa:68:2e:93:ff:5f:14:5d:2d:
                    ac:25:cd:11:5b:44:f5:90:fd:62:fc:e6:01:8f:7b:
                    24:cf:16:e5:f6:21:4a:08:7d:86:84:ca:dc:c7:2a:
                    8a:1c:ff:c5:94:cd:4a:49:7f:7f:d1:5f:54:35:a7:
                    a0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:01:72:2C:17:1F:1F:BC:B6:20:0A:25:0D:22:34:AD:CF:9F:3C:04
            X509v3 Authority Key Identifier:
                keyid:61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:58:f9:bc:05:9b:d2:cc:c6:70:53:e3:a1:77:40:0f:cc:d0:
         09:1b:36:30:c1:8d:6e:13:f9:5c:0c:50:8a:81:e9:62:90:dd:
         38:98:3e:13:7e:07:0d:66:1a:f4:bd:e2:4f:68:ba:08:a7:05:
         7b:9d:f6:45:68:fd:cc:db:fd:56:06:54:ac:ac:95:ee:28:9d:
         7b:f6:f8:c6:b4:f9:8d:9d:d8:3d:bd:28:cb:7b:83:85:84:6e:
         c9:16:7b:8a:4a:32:8f:3b:ab:78:c0:82:89:fd:50:19:de:eb:
         9f:dc:c8:c1:14:36:4d:04:3c:57:93:c8:fb:06:6d:3c:2e:69:
         48:f3:d2:17:80:ca:00:50:91:9e:52:ef:18:e0:dc:c5:3b:38:
         b5:84:49:85:d3:af:aa:01:69:da:42:c2:1d:bc:24:37:3a:68:
         11:bf:f0:41:88:6a:ce:e6:86:22:74:b6:a0:db:67:63:6f:88:
         ee:5a:a2:fd:58:01:68:bf:50:d0:51:16:62:c8:ae:7a:91:45:
         31:18:d2:47:6a:e0:0c:9e:f0:c4:18:59:5a:a8:bd:0c:0c:69:
         62:0c:c9:49:45:88:97:f9:61:cb:1d:6d:6f:89:09:98:67:44:
         bb:5b:c2:94:ae:44:6e:b2:07:22:88:fa:fa:bd:41:57:af:e2:
         b9:f9:30:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:57:45 2026 by rpki-client