Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
File:                     0YZHAF-osG5H7i77_e3Jegx3Vfg.mft (raw, json)
Hash identifier:          x7OOlc4uHYcn0EMNHXQm/wGow9M4Zcwfl2j2qs58lG4=
Subject key identifier:   F5:DA:82:7E:21:AF:16:C1:6F:58:F7:C3:D2:F1:2A:E6:B7:A3:04:6B
Authority key identifier: D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8
Certificate issuer:       /CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
Certificate serial:       019EBF2342040EC08FC4DE903C69B43E6E68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 04:00:19 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:19 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:19 +0000
Files and hashes:         1: 0YZHAF-osG5H7i77_e3Jegx3Vfg.crl (hash: x2zZ4SGV7qBR8CHl6dqmZRtZBTWoJmh8IDUMIeMGOB8=)
                          2: GmHD_yxmhmb7r8gjp6el8HpBXOw.roa (hash: fVaQ2rKEBssbb0vmO7FX3uJ1zApwIkrOyFVIx+Y+u/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:42:04:0e:c0:8f:c4:de:90:3c:69:b4:3e:6e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
        Validity
            Not Before: Jun 13 04:00:19 2026 GMT
            Not After : Jun 14 04:00:19 2026 GMT
        Subject: CN=f5da827e21af16c16f58f7c3d2f12ae6b7a3046b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2d:40:90:a4:b4:5f:e7:24:f2:8d:85:33:87:
                    bb:5b:05:57:21:c9:9b:50:14:04:a9:e6:ff:c0:88:
                    b4:3f:ef:8a:d3:07:9c:39:f0:2d:7b:41:b9:32:83:
                    41:ff:25:aa:27:5c:bb:0e:28:a6:cf:91:39:e0:55:
                    15:9f:88:d2:94:eb:3c:46:e5:82:08:58:19:f8:5e:
                    68:9f:b9:59:a5:28:63:4d:a3:b5:d9:23:24:0c:f7:
                    a7:cb:d6:27:79:fb:49:d8:91:5f:f9:1a:9d:23:3f:
                    a0:3d:34:f7:df:7d:30:8e:57:4e:fa:31:c6:54:73:
                    55:b5:77:bb:b6:2b:42:4b:c4:3e:ec:74:ef:24:ec:
                    e6:4e:2f:41:4a:16:9e:c7:0e:70:31:53:c6:36:79:
                    0a:fc:c2:50:9c:dc:08:73:33:42:b7:b1:a9:81:de:
                    c5:c6:b3:4b:24:89:d7:7c:99:fb:83:d3:36:b5:62:
                    85:8c:9e:f0:b6:a2:a9:dc:f7:ae:8b:63:79:54:d8:
                    ed:b6:07:8d:11:0e:46:ad:c7:b4:7b:b6:34:c5:42:
                    ef:98:4a:33:51:3e:f5:d2:13:e9:0b:51:37:58:d7:
                    16:e4:cc:32:bd:5a:50:f7:61:63:3d:36:35:96:0c:
                    ea:f1:68:39:56:6f:53:d7:9d:a3:fb:0b:09:02:14:
                    53:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:DA:82:7E:21:AF:16:C1:6F:58:F7:C3:D2:F1:2A:E6:B7:A3:04:6B
            X509v3 Authority Key Identifier:
                keyid:D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f2:de:f5:fe:b4:46:95:c1:28:1c:4c:14:8c:2d:4f:99:9a:
         0e:e8:7b:b6:2d:db:5b:61:86:54:f1:52:0f:dd:cf:53:df:5f:
         30:a7:96:62:38:e5:67:e9:7b:e1:96:4f:80:1e:d9:d5:09:a2:
         ca:09:18:5b:ed:d5:f5:6d:61:13:cf:3b:2f:78:e5:e9:7d:76:
         38:50:4a:e8:15:06:cf:64:16:12:c5:d3:cc:11:c8:15:34:0b:
         8c:c4:22:6f:63:b3:a0:d1:4d:2f:db:9e:39:32:23:60:bc:ba:
         8d:a8:a7:7a:32:e9:cb:97:4f:d1:c1:be:2b:e4:16:ec:ea:57:
         16:59:ef:d0:6f:fa:01:62:e7:fc:d6:2c:0c:d4:b0:55:ab:c9:
         4e:0b:0f:68:5e:34:c0:ff:c3:16:43:dc:3c:5e:07:85:31:f3:
         fa:48:22:f4:92:8e:fe:81:dc:dd:2e:ed:8f:2b:cc:9f:62:66:
         b2:5c:7b:0b:58:f7:58:b9:99:89:85:8b:cc:42:e0:66:ff:d6:
         00:5b:91:7e:f1:ed:aa:81:83:aa:3b:72:2b:a0:45:0c:f7:53:
         c4:2a:22:d5:25:11:8b:ea:a5:b5:0f:9d:b9:a0:9b:ab:de:2a:
         8c:6d:99:ad:03:14:37:02:b0:ce:e8:24:9e:4c:2a:05:69:86:
         b1:40:c7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:36:03 2026 by rpki-client