Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
File:                     syycJt98zYrTjYm9XUk4C5Ox4Ak.mft (raw, json)
Hash identifier:          hwHoeEx2HQAJ/DADibFCUVoprkDZ55ed77K70m5qfQY=
Subject key identifier:   98:9A:37:5C:BB:9A:BC:E1:7F:2A:F2:5A:20:2C:72:6C:FC:08:73:BA
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Certificate issuer:       /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial:       019EBF5ACBFFB7ACA2C7E3941841F38977C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
Manifest number:          16B1
Signing time:             Sat 13 Jun 2026 05:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:59 +0000
Files and hashes:         1: D0lOqZlz6l7-ZrCUQ8GBdVANexg.roa (hash: K1RGqnZZYJTD3uw/i1TIaxwWVFvWBkxVYj1unQ+iV0M=)
                          2: TtF2-5jlTeNtomtDsnLXaVfZZQs.roa (hash: bOFctgKhUglT+7Rnoc8CMHSaJ6gExTqm2TI5PVgaKVs=)
                          3: YK_IawN261WogeBGmqdkhiTNN_I.roa (hash: 4EC+vEV7ucG4EBdmqBbe7XaUHceglhtUCKP+XHw06Nw=)
                          4: cxrYDYRve-AK30Fn1TQ9Kqrsm3M.roa (hash: omj5Dxmbd1CeguDg9OXaZDFdwZG6Smx/H+Y39YrtYK8=)
                          5: syycJt98zYrTjYm9XUk4C5Ox4Ak.crl (hash: b4U5G1Vas0YnAlKWcskK5FMNMlD7v4lF01ftSSZQVAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:cb:ff:b7:ac:a2:c7:e3:94:18:41:f3:89:77:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
        Validity
            Not Before: Jun 13 05:00:59 2026 GMT
            Not After : Jun 14 05:00:59 2026 GMT
        Subject: CN=989a375cbb9abce17f2af25a202c726cfc0873ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6a:33:a1:34:77:cf:09:b1:ac:0e:2b:40:8c:
                    e0:90:14:36:9c:03:7b:69:06:c7:b9:2d:8d:dc:38:
                    27:50:ef:12:e2:1b:e5:3c:6f:c0:7d:28:16:37:f1:
                    29:12:66:e9:39:bc:f8:7a:41:52:50:5a:5a:21:6e:
                    dd:30:04:74:5a:7a:51:1d:f9:08:fe:46:df:0e:75:
                    41:b9:42:0f:de:c8:81:4a:91:57:85:88:d9:66:dd:
                    b1:04:9e:1a:28:24:b3:b8:a2:d0:60:64:de:c1:2a:
                    1a:97:87:c0:66:ff:23:4e:72:ef:30:9e:56:1c:e4:
                    f9:2f:0f:42:85:e7:58:a5:99:78:50:56:2c:15:3f:
                    1e:b3:eb:70:54:49:4d:6b:a5:c4:45:2e:25:0f:33:
                    4f:2f:5f:24:5c:4f:93:53:bb:b8:50:23:fd:5b:1e:
                    59:e0:09:4c:27:f9:7c:7f:b3:f1:17:76:eb:62:9b:
                    ad:d2:1c:17:bc:b0:be:5f:d7:8f:b2:dc:3e:d6:0b:
                    3d:6f:8f:e0:b8:bb:82:85:e7:5e:1c:17:71:92:c0:
                    22:89:8f:ec:05:eb:7d:70:32:96:41:2c:6a:ff:e6:
                    bc:f5:c9:72:a9:80:e1:9b:4f:c7:8b:ed:d8:a6:55:
                    80:93:87:ec:a1:ca:4e:12:85:0c:5f:fa:36:68:f3:
                    f1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9A:37:5C:BB:9A:BC:E1:7F:2A:F2:5A:20:2C:72:6C:FC:08:73:BA
            X509v3 Authority Key Identifier:
                keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:f1:07:50:fb:82:ba:f2:39:25:b8:65:15:15:a6:f4:cf:09:
         f4:12:8c:2e:cf:33:6c:b4:5f:ac:c0:33:b2:89:37:81:bf:66:
         8c:90:89:00:da:16:42:e7:d4:b4:7a:e2:c9:3e:94:4f:f7:de:
         0f:af:01:05:17:d6:68:ed:61:6a:d1:0f:61:b8:9c:f4:29:a0:
         30:01:4b:12:bd:d2:83:63:d5:93:4c:87:7b:89:f5:b6:95:89:
         74:4f:9e:99:03:26:0d:9c:d0:e5:a4:8c:ad:45:08:6c:33:ca:
         f4:37:81:77:ec:af:ba:d3:84:64:e1:5e:fe:ab:e7:f4:99:d8:
         0a:3d:26:02:32:5a:eb:c2:9a:ba:10:32:56:b6:0b:89:32:43:
         af:59:e5:c6:28:1d:a5:df:d1:f5:9b:3f:16:c2:9f:35:28:92:
         6b:11:9a:cb:d2:7a:3b:40:09:bc:aa:55:ec:97:c9:a9:ce:23:
         af:8c:fa:5b:e7:fe:39:6b:68:99:1b:32:74:b3:1b:bd:4b:01:
         81:39:ba:3a:8a:e6:f7:17:b2:0e:58:b7:0a:e1:15:04:d3:1b:
         a5:29:53:ac:e3:8f:a0:73:78:ae:bf:b4:83:5c:6c:d2:47:5f:
         bf:91:a9:d9:da:0a:83:84:93:1c:4e:dd:38:4b:bf:58:8e:92:
         05:28:56:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:03:39 2026 by rpki-client