Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
File:                     CYsceb-uEqW4fzXJmLtgs_pOZiE.mft (raw, json)
Hash identifier:          kVVlEyom5b1HTsTvCWW6qbQmRJJc5UhKGjb4sPDrKUE=
Subject key identifier:   9E:D3:67:4E:9B:E7:67:A3:78:8F:8E:9E:E0:D3:5C:B6:80:E0:4B:40
Authority key identifier: 09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
Certificate issuer:       /CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Certificate serial:       019EBEECC302A6C086F444B7CCDD5B11AFA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 03:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:47 +0000
Files and hashes:         1: CYsceb-uEqW4fzXJmLtgs_pOZiE.crl (hash: pR9esTvOXTtoTqZGxn/v3SRPVXTvn0k7Zbk9fhfU5Sw=)
                          2: I7FUEzQB2p3ba0HK6BFlJiMFpKs.roa (hash: iWKKYDbmGhj4l1sOymtdFMyXimiZWXcKaRN6JaYAqjU=)
                          3: aRdy5QnQV3v2d0uJtbF46Ws7h78.roa (hash: 37a5ol8IAhliNl2qlQKI+vNHY/DP17QwOBCBEMnoWrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:c3:02:a6:c0:86:f4:44:b7:cc:dd:5b:11:af:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
        Validity
            Not Before: Jun 13 03:00:47 2026 GMT
            Not After : Jun 14 03:00:47 2026 GMT
        Subject: CN=9ed3674e9be767a3788f8e9ee0d35cb680e04b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bc:79:59:bf:48:dc:0c:e5:66:53:42:83:15:
                    a6:77:41:b6:dc:e5:ed:a6:b3:10:a9:ec:df:5b:e4:
                    84:a4:98:ba:21:7c:24:07:4f:57:a4:3a:fd:71:7a:
                    15:2a:cb:c7:75:9a:c9:32:76:cb:dc:26:3a:8b:bb:
                    18:ce:9a:37:d5:be:2a:39:eb:da:7a:56:16:b5:a5:
                    38:ca:14:c7:a6:a4:28:3e:b6:87:ae:5f:8f:8b:b9:
                    f9:ce:94:83:5b:0d:e0:b5:09:25:be:9c:e2:be:67:
                    e7:67:3f:f6:a4:ab:0e:b5:d4:66:d1:74:62:4e:9c:
                    a4:d7:86:45:f9:d7:f9:9c:e4:aa:f8:85:96:23:f0:
                    40:00:eb:e7:d6:9c:54:ba:0e:9a:c3:3f:ab:32:e9:
                    ef:c0:4d:f9:04:df:9e:7f:89:80:ac:aa:d8:54:b3:
                    9b:b0:41:ad:01:64:e7:1e:ba:e2:03:cb:f5:65:fd:
                    2f:0a:12:78:4e:c4:8a:e3:88:81:bf:8c:d1:4b:7f:
                    f8:fd:95:40:90:aa:77:05:04:42:70:2f:ee:88:5f:
                    5a:83:ec:85:4b:4d:54:07:08:71:54:f8:2f:7d:fd:
                    1c:87:f1:65:50:30:2e:e8:11:8a:b3:76:c2:f7:c0:
                    ac:f6:87:a9:9d:b8:9c:9a:24:df:2d:ea:75:cc:bc:
                    45:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D3:67:4E:9B:E7:67:A3:78:8F:8E:9E:E0:D3:5C:B6:80:E0:4B:40
            X509v3 Authority Key Identifier:
                keyid:09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:e7:f0:4d:5b:eb:90:d7:5d:b6:eb:79:38:bd:4c:5f:90:ed:
         5d:c9:21:01:cc:d0:82:25:6e:eb:07:3d:99:8c:6b:29:b5:7c:
         4f:fd:c7:db:a1:6c:07:6b:77:6f:92:a8:b2:ef:45:49:70:4c:
         85:be:17:13:1c:b4:97:69:89:76:4b:5e:46:bb:24:30:f4:42:
         02:b7:54:c0:b4:79:9f:83:99:bf:2a:81:ea:e9:07:85:a5:81:
         51:5b:0f:de:79:34:04:04:5a:5a:93:ac:1d:c3:30:87:3e:71:
         87:61:aa:23:19:fc:a6:5f:3e:3f:bc:1f:a8:86:25:86:60:45:
         64:a0:a3:b8:97:77:8b:dd:f6:50:98:ec:78:49:c0:c2:14:18:
         0f:95:4b:fc:68:34:57:da:78:e1:91:0d:a3:dd:61:6f:26:7b:
         0f:de:ed:68:70:9c:ca:29:5e:d9:66:6a:fa:13:8a:31:c8:13:
         00:3f:de:ed:ed:03:e3:af:77:ab:d6:a2:b5:65:10:c6:6e:f1:
         24:8b:64:86:3f:e5:a8:a1:49:8f:40:6d:66:62:6e:fa:08:01:
         3e:16:bb:86:2c:01:0f:45:84:29:11:c1:18:2d:77:30:96:f7:
         77:2b:4d:13:b2:bb:08:3c:02:4a:1c:a1:57:6e:b2:e7:b1:6d:
         20:f1:80:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:39:38 2026 by rpki-client