Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
File:                     YihBc2HBxAaumnJX2qn7BiB4LTU.mft (raw, json)
Hash identifier:          O+vSOuqSzqIM7Lh4UJHTFKICy9V57qv/UhKUxWbDc8o=
Subject key identifier:   FF:9B:FD:6C:8B:CB:31:BD:6A:76:9E:F2:24:48:2A:1E:EB:14:E9:41
Authority key identifier: 62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
Certificate issuer:       /CN=6228417361c1c406ae9a7257daa9fb0620782d35
Certificate serial:       019EC36E60219882476E9E0C262D241F92AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
Manifest number:          1201
Signing time:             Sun 14 Jun 2026 00:00:51 +0000
Manifest this update:     Sun 14 Jun 2026 00:00:51 +0000
Manifest next update:     Mon 15 Jun 2026 00:00:51 +0000
Files and hashes:         1: 0821mhhu_dqdcqQbxajhPPTXDuU.roa (hash: ooSLPjcpcEvK3V7j97ECx3S8mqo+5KuosVxep9334Qg=)
                          2: YihBc2HBxAaumnJX2qn7BiB4LTU.crl (hash: +goeclmKJeeNWbFKBfZurx1xzeyRTMNBD5+mOtkvCJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:6e:60:21:98:82:47:6e:9e:0c:26:2d:24:1f:92:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6228417361c1c406ae9a7257daa9fb0620782d35
        Validity
            Not Before: Jun 14 00:00:51 2026 GMT
            Not After : Jun 15 00:00:51 2026 GMT
        Subject: CN=ff9bfd6c8bcb31bd6a769ef224482a1eeb14e941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3d:72:0c:fd:93:1b:2c:1a:c7:1a:ea:af:7b:
                    60:3b:dd:51:45:d3:2e:64:d1:42:13:0e:d6:7b:2c:
                    5c:2d:f9:77:7e:48:49:b7:84:f0:a5:16:73:da:bd:
                    2f:0e:94:cc:c4:ec:6d:29:33:75:d5:07:5a:33:d7:
                    76:78:6f:da:60:74:57:62:e0:eb:f5:8e:37:51:c5:
                    1c:af:84:33:91:9e:3b:c9:4c:60:65:5e:a7:c2:81:
                    41:3b:df:44:54:69:d1:dd:78:c3:2f:e8:61:c0:42:
                    ba:9a:8e:09:96:07:77:26:b1:53:1b:7c:43:10:32:
                    67:44:77:5e:77:29:43:2b:f0:a7:b1:23:8d:22:2e:
                    2a:15:26:1c:3f:14:ca:02:f9:2b:8e:ba:05:df:b0:
                    03:76:f2:17:73:17:20:8a:95:df:3c:9e:71:fd:6e:
                    0b:d2:36:bf:71:71:af:e1:07:0f:5f:79:c4:de:3a:
                    9e:85:b8:8c:31:67:4a:31:62:0b:69:a2:4b:2c:7e:
                    9e:46:b2:66:60:da:fd:b1:c0:e4:d0:e6:a8:2e:93:
                    0d:03:50:5d:eb:c0:3b:8f:85:0c:24:ba:f2:d6:7b:
                    a9:52:44:23:27:bc:bd:69:cd:b0:7e:74:38:fc:96:
                    e0:c0:e1:06:df:19:1c:de:ff:06:78:cc:fe:9c:0e:
                    9c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9B:FD:6C:8B:CB:31:BD:6A:76:9E:F2:24:48:2A:1E:EB:14:E9:41
            X509v3 Authority Key Identifier:
                keyid:62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:4d:e9:e7:90:ca:2b:24:15:60:c8:47:48:94:4d:e6:7c:c2:
         d7:71:69:da:48:28:ac:66:f0:d8:50:fb:9e:55:47:0d:f3:fc:
         98:07:48:59:43:12:c3:d1:4d:a9:27:05:d9:56:ab:95:02:88:
         e2:2e:08:f7:df:e3:51:41:d1:8a:e0:00:59:b9:48:b8:2a:24:
         05:ed:d9:44:60:d9:7e:ce:01:99:03:f4:70:7a:63:69:2d:c1:
         a1:5f:a0:65:29:3a:2f:03:8b:c5:73:f3:d3:c5:c8:f9:28:67:
         3d:04:df:1d:34:10:77:95:6b:cc:c9:d7:ad:21:95:93:81:a7:
         91:56:db:b2:dc:a1:0f:3d:24:13:ab:2a:65:e6:aa:12:0d:82:
         0e:9c:0f:01:27:64:32:7d:4c:28:04:12:74:d6:85:4d:8f:83:
         7a:37:b0:5c:3e:04:60:37:7e:92:f8:6f:bf:b4:d4:29:23:16:
         87:49:e5:c8:3e:c5:38:16:1e:29:1a:78:9b:17:11:2f:b0:be:
         1c:e0:2e:77:b9:87:11:11:30:d4:75:d4:ac:67:b4:e0:ac:82:
         fa:cb:60:9a:5a:0f:b0:4f:39:b4:92:4e:c4:dc:b7:4a:19:60:
         f3:7b:d6:1c:59:ef:31:59:b0:de:a3:cc:fe:b0:34:12:ec:0c:
         27:60:d1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:09:13 2026 by rpki-client