Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
File:                     yxODRz6KqHJwaPx1LgYOPb9j4O8.mft (raw, json)
Hash identifier:          YZwMLr6u7ZOtUFaVorBtCoCqsxr/Li8PAG0J81ogpyA=
Subject key identifier:   FD:FD:9D:98:BD:42:3B:70:12:C6:F3:BD:18:72:6D:ED:BB:4A:ED:0A
Authority key identifier: CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF
Certificate issuer:       /CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef
Certificate serial:       019EBFFF6D135890EDA08957C1A99D40D4CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
Manifest number:          0B16
Signing time:             Sat 13 Jun 2026 08:00:48 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:48 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:48 +0000
Files and hashes:         1: 153fjxVtV5IdmULjsKFsyho7xsA.roa (hash: sMHTNIGNQvUhkdN5VlDx3F2+I4FUHbgADAQUyA3sCa0=)
                          2: yxODRz6KqHJwaPx1LgYOPb9j4O8.crl (hash: HH4GtxU7o8K1QxQY+dBWbxCcKa0n9T6hloqRI0f0JO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:6d:13:58:90:ed:a0:89:57:c1:a9:9d:40:d4:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef
        Validity
            Not Before: Jun 13 08:00:48 2026 GMT
            Not After : Jun 14 08:00:48 2026 GMT
        Subject: CN=fdfd9d98bd423b7012c6f3bd18726dedbb4aed0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a5:95:dc:db:b6:12:69:bc:44:5c:fb:f6:20:
                    cf:30:5b:3f:44:20:b0:e3:d3:a4:86:ed:06:96:73:
                    ef:45:c5:58:76:81:ea:4f:10:36:99:88:2f:ba:84:
                    e6:84:73:81:f0:c7:32:52:54:bb:ca:19:1c:3e:85:
                    53:91:c5:ee:c5:01:33:d9:68:4a:3c:e6:b9:cb:b8:
                    56:53:e1:7e:8e:73:b3:17:57:0f:1f:58:eb:72:b2:
                    8e:4e:bf:c1:5f:c8:36:e9:74:b2:70:17:4a:40:9b:
                    a3:01:e9:1f:28:ec:52:11:b3:5e:a4:36:c3:79:f9:
                    84:80:c2:c2:52:dd:9e:16:8e:a6:7e:cb:ac:91:54:
                    ec:62:b4:93:75:8b:73:00:04:d9:17:9a:4a:82:38:
                    4d:05:af:b2:e3:25:67:ce:ff:f6:77:e2:36:cb:c4:
                    26:2a:90:50:ba:35:15:c6:fa:d0:64:d1:f5:d0:d7:
                    9d:ed:35:e3:25:65:16:da:a1:00:58:6e:aa:30:a1:
                    85:ba:35:67:21:ca:95:a1:9b:61:73:8b:d1:6b:7d:
                    f4:4b:ba:dd:d8:87:1c:96:a0:04:be:f0:ee:0c:de:
                    91:fb:28:2a:b2:e5:a1:2f:f5:09:82:2f:71:d1:6d:
                    b4:61:26:59:13:ad:e9:b9:12:dc:31:85:d3:4c:8c:
                    ef:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FD:9D:98:BD:42:3B:70:12:C6:F3:BD:18:72:6D:ED:BB:4A:ED:0A
            X509v3 Authority Key Identifier:
                keyid:CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:17:0a:6c:be:15:ac:35:2d:23:cb:88:ca:08:fc:25:4c:e9:
         dd:02:17:06:ec:0f:d0:e8:f4:28:d5:8b:12:56:94:9c:3a:78:
         2a:41:a7:9d:c6:30:98:f5:72:42:85:34:b7:f5:7f:8d:53:93:
         80:bd:72:ae:31:19:7c:3c:55:6e:e1:31:e7:15:27:6d:9e:fc:
         96:75:f7:c6:b7:2e:b7:ab:86:04:8e:56:db:b9:e5:97:f0:e6:
         fb:53:49:3a:3a:e6:68:58:31:0c:2e:f5:06:11:2b:ae:9e:57:
         21:a2:c6:db:4e:d7:3d:84:28:33:e3:df:03:e9:74:76:22:25:
         ee:7d:e3:1c:e4:98:3d:f6:77:cd:e5:bd:9a:e7:8f:26:f6:ac:
         b8:e5:19:48:ab:0a:d5:4c:ce:11:4f:34:e2:b2:cf:07:2a:71:
         15:b4:e9:89:6d:2d:94:48:f7:1b:22:be:cc:91:dc:b0:a3:84:
         58:eb:82:f5:52:a2:e9:78:20:8c:5e:92:fc:b1:b2:37:32:7a:
         d3:be:7b:13:94:04:f4:5e:96:7c:75:94:18:68:47:0f:d0:3b:
         d6:fd:a3:6d:dc:ae:0c:99:6e:bd:50:3b:ac:99:cf:02:88:d5:
         01:1c:04:3e:f4:67:68:97:1b:ae:48:c0:ee:f5:97:f2:5d:6a:
         ca:b0:59:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:54:55 2026 by rpki-client