Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
File:                     Y0cDI_IxIpymkfPglRnBrILy6gE.mft (raw, json)
Hash identifier:          u2ei8B1ijHkWCqW6CSQYbU1Yg/inL5GoIRv6wrNGt7M=
Subject key identifier:   FE:03:7A:75:8E:1A:3D:9E:D9:C9:BC:70:A4:35:CA:7F:78:F1:41:01
Authority key identifier: 63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
Certificate issuer:       /CN=63470323f231229ca691f3e09519c1ac82f2ea01
Certificate serial:       019EBF912CAA0284F0E863E43A594E764319
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
Manifest number:          0444
Signing time:             Sat 13 Jun 2026 06:00:22 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:22 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:22 +0000
Files and hashes:         1: E0krjXu009T3jt9cr3fYovQCDpI.roa (hash: IPGdjP1/THS8Y3edpbZ6Sxvb1Cj7DJTCDKtVyiJIZuE=)
                          2: Y0cDI_IxIpymkfPglRnBrILy6gE.crl (hash: tPA372rsgt8zqPq2yAau4sBdcr71nyrXI/ZU9Mb4qbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:2c:aa:02:84:f0:e8:63:e4:3a:59:4e:76:43:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63470323f231229ca691f3e09519c1ac82f2ea01
        Validity
            Not Before: Jun 13 06:00:22 2026 GMT
            Not After : Jun 14 06:00:22 2026 GMT
        Subject: CN=fe037a758e1a3d9ed9c9bc70a435ca7f78f14101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b5:f4:d1:39:7c:ea:03:23:6a:a6:4c:be:83:
                    08:40:6b:df:78:84:82:2f:50:a7:3b:94:13:01:03:
                    c2:2d:21:e1:61:d2:96:76:e8:15:b4:9a:3c:32:53:
                    44:0b:19:65:af:49:a2:9c:30:4d:4d:d8:03:70:10:
                    36:d9:45:3f:84:cf:94:d0:82:ea:8c:30:52:84:e7:
                    45:7c:ac:80:f9:56:77:84:14:f3:74:fb:61:3c:1c:
                    7c:a5:4a:65:a5:a7:10:aa:e3:e8:aa:f0:c5:47:f3:
                    05:16:84:f2:7e:9b:ce:a8:c3:ea:a2:c9:83:a8:42:
                    8d:12:04:bc:9d:26:1f:f4:43:41:c0:16:b2:66:f0:
                    42:e1:cd:93:7d:1f:b2:a4:14:2e:fc:aa:6e:a4:c7:
                    a0:a1:84:27:b1:41:14:bd:68:34:c6:2e:3e:06:cb:
                    f6:67:3f:77:44:28:ad:43:4e:0f:f5:6e:6c:0d:68:
                    cc:62:15:6e:38:12:2d:6f:22:75:c3:1e:7b:ef:46:
                    8c:ad:a3:d1:dc:4c:cb:34:dc:c2:c9:d3:2e:7e:1e:
                    06:98:ea:4e:d7:04:73:6e:3d:02:29:d4:36:9f:66:
                    f9:86:71:45:3a:42:bb:c1:e7:04:84:63:cf:ff:19:
                    b7:9c:32:fa:cc:2b:45:2b:fd:92:7a:99:3e:3d:69:
                    9e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:03:7A:75:8E:1A:3D:9E:D9:C9:BC:70:A4:35:CA:7F:78:F1:41:01
            X509v3 Authority Key Identifier:
                keyid:63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:05:ae:7c:d7:4d:28:c8:70:ca:34:d0:91:7e:87:05:5d:94:
         b3:57:9b:ce:3a:0b:96:74:90:f3:3e:f9:8a:a5:61:c2:ca:31:
         e2:8e:0f:c5:a0:f9:da:5e:8f:9a:60:6e:9c:7b:76:a5:8c:2f:
         db:29:27:de:a7:49:2a:9d:96:b8:64:9d:4b:1e:78:dd:57:e7:
         4f:45:d1:11:9e:97:97:48:1c:4a:f4:e7:c8:5c:73:78:1f:8f:
         e3:77:a0:3a:f4:88:1d:42:1e:8b:51:76:48:69:b1:84:a3:35:
         8d:d5:4d:9d:70:2e:a6:36:42:43:e2:77:e2:22:4b:65:4e:47:
         ad:1a:c7:d9:3a:2f:dc:a6:5f:31:9a:e5:18:b9:c6:15:b9:46:
         a3:e1:8b:06:ff:1c:e2:f6:80:d8:25:78:53:ae:45:a0:e7:d7:
         e4:39:a3:89:8c:ac:32:7e:9c:4f:f6:9a:07:3c:3d:e1:99:c6:
         d9:7e:42:60:ab:1d:76:e3:0b:e4:b5:71:94:20:05:c3:22:19:
         b3:51:79:f2:07:61:54:50:c1:80:f8:e2:1a:2e:ff:ef:c4:77:
         ad:10:ab:da:a0:04:ec:e8:63:f2:7d:e1:dd:4c:b2:a6:f5:be:
         30:39:ad:46:50:de:d4:9e:86:31:29:e5:6c:e8:69:cd:ca:c3:
         03:bd:8c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:43:25 2026 by rpki-client