Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
File:                     YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft (raw, json)
Hash identifier:          69MhBHfAMIy1R4T2CFJY2augyncj/bI0y9QWgjqivqY=
Subject key identifier:   A1:D1:B3:8D:C6:55:C4:FB:00:3F:F2:F4:50:8E:DF:66:19:D8:2B:BC
Authority key identifier: 62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77
Certificate issuer:       /CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
Certificate serial:       019EC224B3CEEE2AF684A1544BAB985255D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
Manifest number:          0386
Signing time:             Sat 13 Jun 2026 18:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:45 +0000
Files and hashes:         1: YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl (hash: z4IbdqwBnLIDfJhbvxJ6bXEtk9WLJK2H5NCOkk2pPws=)
                          2: otGdouxrN50G3K6_VfBD4sUjZsk.roa (hash: KaxlTsTV8jPWF44UBDhZygEc33e9Bf3O7Tb4YHBXJsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:b3:ce:ee:2a:f6:84:a1:54:4b:ab:98:52:55:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
        Validity
            Not Before: Jun 13 18:00:45 2026 GMT
            Not After : Jun 14 18:00:45 2026 GMT
        Subject: CN=a1d1b38dc655c4fb003ff2f4508edf6619d82bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:51:49:b7:a7:ce:90:bd:6c:6b:46:3d:d4:c0:
                    c8:0a:10:35:3d:c7:ac:49:4c:8a:17:f1:a3:33:3e:
                    ef:75:cb:8a:a2:49:69:c7:e6:74:0b:af:b6:67:9c:
                    ff:1a:1b:50:8c:83:d2:5c:41:97:46:f1:c9:a3:92:
                    04:52:ae:be:da:87:6b:86:36:3e:d8:d8:e0:52:eb:
                    a2:19:cb:f0:fe:4a:2a:4d:74:24:3e:32:7d:86:cc:
                    de:25:b0:aa:67:e8:30:c4:e1:54:85:ea:fb:26:a1:
                    95:27:bf:8c:ab:45:37:d1:65:fe:a4:2f:fc:2a:24:
                    0e:0c:27:48:5c:7c:7c:ab:3e:f8:cf:a0:e1:8b:e3:
                    0a:8a:40:6b:e5:0f:23:07:b0:8c:03:89:27:77:ce:
                    74:7e:0d:49:06:ca:dc:96:5e:6a:d8:b6:cd:5b:2e:
                    a0:bf:5a:a5:fa:9a:5a:b0:6c:bb:24:fc:7d:65:b1:
                    0f:b1:2b:f4:d7:3a:22:22:48:23:28:85:b0:ff:7f:
                    a2:b3:ef:aa:e5:00:f5:27:da:df:5a:06:a1:c8:81:
                    a9:72:44:b7:4e:b7:f6:5a:56:14:28:09:03:79:6c:
                    4c:78:9e:ee:72:4a:bc:3e:60:1e:fe:a5:bf:46:69:
                    04:f7:a9:47:6a:b5:74:69:e3:ea:92:2e:4b:f7:a1:
                    fa:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D1:B3:8D:C6:55:C4:FB:00:3F:F2:F4:50:8E:DF:66:19:D8:2B:BC
            X509v3 Authority Key Identifier:
                keyid:62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:a0:f0:61:fb:57:a7:d0:92:28:4b:26:9f:ff:85:a1:34:91:
         a0:67:bb:aa:65:4b:e7:37:7e:af:fc:5d:70:19:07:27:46:4a:
         ed:0e:47:4c:7e:5c:b1:67:db:4a:26:1d:26:7e:9f:cb:41:17:
         2e:d1:d7:a2:b4:e0:04:a0:7b:73:45:45:02:54:a0:9d:f1:82:
         8f:4a:f2:9f:61:b1:21:d9:a4:13:5a:e7:ad:de:7b:00:16:21:
         c9:bd:b9:45:3f:00:5b:f4:80:35:6a:b7:02:e9:13:d4:fb:8e:
         38:a4:c9:d3:fa:6f:c1:82:6e:75:ad:e0:8a:a3:4f:f4:4c:f1:
         5f:24:d5:23:c1:e6:ea:c1:d5:74:bc:03:4d:59:59:61:f0:9a:
         48:01:7a:df:ac:dc:ca:89:39:22:55:cb:64:5e:5d:10:73:bb:
         8e:74:ec:38:b0:6a:f5:a1:97:fe:da:d2:04:33:f3:06:21:b0:
         5d:79:82:e2:6b:06:9c:3a:82:12:cc:5e:eb:3b:bc:78:36:ff:
         2a:d0:49:f8:d3:6c:4a:8a:14:10:97:93:b2:bb:1c:e7:d2:a4:
         88:82:0d:d0:6a:fc:0f:ef:1a:a5:f1:c4:12:0b:b3:97:26:87:
         c7:01:31:4f:fe:73:26:9d:2e:e1:fd:41:86:88:b6:7b:76:c2:
         f6:08:c0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:44:43 2026 by rpki-client