Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
File:                     mYkvB5PMiUvypMdIda8Iqi0dHJk.mft (raw, json)
Hash identifier:          rhI3mAGmMojJDSH8MsJBcdZWguR5FOpi1I8ZEWxuC5I=
Subject key identifier:   26:5A:AF:E6:20:8E:B4:C7:D2:44:42:4C:60:F8:6B:67:70:56:3D:12
Authority key identifier: 99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
Certificate issuer:       /CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Certificate serial:       019EBF23A2F14AB3D3AF6A0CE889DEAB2E1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
Manifest number:          10FD
Signing time:             Sat 13 Jun 2026 04:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:43 +0000
Files and hashes:         1: 8d01Xvs_aaIVSfahCINvVoz5qZs.asa (hash: hdcUHQVv+Z/OXdZkuAsmuPgKWFluiU3e3EejuVlqoak=)
                          2: mYkvB5PMiUvypMdIda8Iqi0dHJk.crl (hash: 8aBBPpmD3Y18uPQBbn1ZPNAvTJPHzAPw0MKgsSe0Lok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:a2:f1:4a:b3:d3:af:6a:0c:e8:89:de:ab:2e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
        Validity
            Not Before: Jun 13 04:00:43 2026 GMT
            Not After : Jun 14 04:00:43 2026 GMT
        Subject: CN=265aafe6208eb4c7d244424c60f86b6770563d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:64:e5:06:36:8d:7e:9d:61:95:f9:2a:63:86:
                    de:26:68:9b:08:cf:9e:b8:9a:c9:76:1f:02:de:7a:
                    88:07:95:af:44:c6:4c:7f:0d:04:b8:2a:bb:0d:26:
                    08:02:b2:49:b1:59:b3:4a:19:dc:f2:f0:0f:af:ef:
                    3e:e7:59:43:99:0a:7b:01:f4:b9:38:9e:e4:0b:a9:
                    a4:a7:b7:31:79:05:8f:77:61:16:0d:d4:6f:f4:1a:
                    92:c3:87:9d:f7:64:2f:80:8d:ce:fa:a3:cb:1a:64:
                    0a:d3:82:bd:22:32:63:d7:8c:a2:2b:7d:39:c7:26:
                    32:77:c9:cf:2d:f2:ab:1f:95:9f:5d:ea:ba:dd:91:
                    0a:06:23:a2:5d:77:3a:51:f1:6e:24:b7:c9:b7:2a:
                    29:88:77:f1:2d:5a:f5:6b:ec:7a:66:29:93:ba:c0:
                    c1:d5:a8:fd:81:8f:50:02:bd:cf:9c:c0:47:ba:73:
                    1a:86:ee:85:86:c9:27:b0:82:64:6e:95:ed:83:d3:
                    63:31:73:2e:5c:89:40:21:2e:7c:ab:96:3a:ad:86:
                    10:24:82:49:bf:f9:93:86:8d:20:e7:27:20:0c:4d:
                    2e:14:78:55:84:0d:2a:68:14:40:56:69:f2:45:0c:
                    22:68:29:cb:da:bc:95:33:25:f2:ff:10:ac:10:60:
                    e9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5A:AF:E6:20:8E:B4:C7:D2:44:42:4C:60:F8:6B:67:70:56:3D:12
            X509v3 Authority Key Identifier:
                keyid:99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:9a:9d:44:eb:ef:98:06:8a:aa:53:13:38:ed:97:93:43:25:
         34:f4:5b:30:c9:74:93:2d:03:e4:26:54:17:09:cf:8d:cc:86:
         a9:06:2a:20:da:32:b0:58:4c:10:1e:ab:66:e1:52:01:34:81:
         01:ec:cd:1b:6c:3f:2b:78:a7:29:a1:d1:a0:cc:96:15:93:cb:
         58:25:89:ce:bf:1a:27:7b:e2:f5:bb:89:47:ed:14:e7:45:28:
         fd:8b:ce:f3:62:ad:8b:0f:48:50:0e:08:42:91:ac:88:eb:7f:
         ae:c5:f5:db:e8:11:77:5f:34:c7:e3:bc:70:da:60:46:99:32:
         47:4a:69:8c:ba:21:45:eb:92:f1:94:33:33:f0:ad:f5:9a:cc:
         8a:0e:4b:a4:88:99:c5:fd:6a:98:45:91:d6:3b:76:6e:9c:e1:
         a6:dc:f5:97:70:16:54:73:a5:d3:f9:7e:0b:40:f3:1c:1f:47:
         b4:5e:e8:11:3f:a8:3e:d4:d7:cd:1e:42:7b:df:0b:52:bf:ce:
         68:a7:47:1f:b0:d7:5e:4f:e3:19:2a:d5:ea:b7:ca:d9:c8:1e:
         dc:d0:25:49:ad:2d:f7:90:66:c9:fe:ac:d6:1a:e0:05:34:a0:
         96:70:ad:2f:83:ac:ce:2c:19:9e:62:b1:70:33:c2:15:66:63:
         51:65:b3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:53:10 2026 by rpki-client