Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
File:                     ybBR6OaBSbZgROfeSuWdc25Teqo.mft (raw, json)
Hash identifier:          90SuVzISRzpoSNdV0n6D9HchJVRyBC2kJ57ULtl6mBQ=
Subject key identifier:   E5:E3:A2:7C:65:01:28:86:EF:71:38:82:CD:D7:71:81:2A:EF:9C:81
Authority key identifier: C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
Certificate issuer:       /CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Certificate serial:       019EC035D4FC413ADA6F0C989481E745AC8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
Manifest number:          0943
Signing time:             Sat 13 Jun 2026 09:00:13 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:13 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:13 +0000
Files and hashes:         1: ElQ5chtEAtBtP2GIXdac_TddA80.roa (hash: HOH5oCt/YkRKpTxo1H1ugWQGWMm04Hcv5fnFxFjdw8s=)
                          2: mDTOHKx9pFPb6EOP9UxQxm-ClKw.roa (hash: 38/vqHt1v0uvrIdlEvEwCRci+eMQynBKytD9wiXBCtc=)
                          3: nu9XCXuPflVxiBkepDLOxds4g2s.roa (hash: W/feVk1DUwfkmSjB+I5O4CPhUu5C032era/IbMRpza0=)
                          4: ybBR6OaBSbZgROfeSuWdc25Teqo.crl (hash: iYi1ju1IE34A72aDlPu03qILX8c6RcnsACbn+2GKvwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:35:d4:fc:41:3a:da:6f:0c:98:94:81:e7:45:ac:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
        Validity
            Not Before: Jun 13 09:00:13 2026 GMT
            Not After : Jun 14 09:00:13 2026 GMT
        Subject: CN=e5e3a27c65012886ef713882cdd771812aef9c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:26:e3:1b:ef:88:f4:cf:f7:20:75:43:78:37:
                    5a:55:a8:08:ac:6f:8e:b4:81:98:1e:9f:d0:58:7c:
                    36:6f:cb:39:36:9d:14:74:4f:3e:69:50:c0:ea:85:
                    9d:d9:a7:e6:91:61:fb:d4:80:8f:80:cf:15:d8:6e:
                    82:78:f5:08:05:1e:d3:63:8a:b7:34:f3:87:af:01:
                    af:8f:8e:f2:3e:d7:a4:8e:84:78:82:f4:f9:53:2b:
                    a5:78:95:f9:2a:9a:08:eb:46:39:d1:38:28:77:17:
                    0b:5f:1c:ef:25:66:fa:7e:0c:a1:0e:76:ee:15:91:
                    3c:d1:a5:e1:0c:dd:c8:dc:f3:65:d9:28:d1:41:02:
                    7b:01:e6:34:b2:cf:91:e4:0a:df:69:95:69:6a:6d:
                    fa:24:fb:51:d8:ad:20:79:81:98:7f:75:06:89:05:
                    b5:c5:85:fe:81:86:90:9d:01:53:7e:88:e9:8c:ac:
                    bf:a1:80:c1:46:9d:63:10:40:8a:3f:8b:55:66:0a:
                    0a:f0:2d:63:4c:b9:72:f5:2d:1f:0f:26:06:88:13:
                    ff:03:b9:4b:66:29:ea:5f:f4:0f:33:0e:df:a7:ef:
                    be:c1:51:a9:e1:0a:bc:78:20:e2:38:d1:f0:02:e8:
                    7a:2e:49:c7:85:f7:c8:6c:c7:6d:17:3a:94:fc:b6:
                    ee:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E3:A2:7C:65:01:28:86:EF:71:38:82:CD:D7:71:81:2A:EF:9C:81
            X509v3 Authority Key Identifier:
                keyid:C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:bd:51:51:b8:8b:5d:7e:21:6e:51:80:bc:d9:28:e2:74:b9:
         91:05:cc:b7:a1:ca:d5:3b:38:70:f4:17:23:c2:d5:c4:47:fc:
         ea:68:e9:e9:4c:f7:94:6a:3a:d9:7f:0d:70:bd:6b:bc:39:51:
         fd:ce:69:0d:1d:ba:1d:05:77:78:02:fe:06:ed:b2:06:7f:10:
         f0:d7:78:29:5b:d5:1f:4b:3f:5a:8d:87:80:ae:0a:98:69:a2:
         76:17:f2:29:ed:f0:13:70:80:8c:82:e4:9c:b9:dc:32:32:02:
         01:e2:b9:1c:c1:e2:4b:79:ad:ba:43:63:61:45:b8:45:c4:ef:
         99:03:b5:a5:7c:55:ed:e2:ea:0e:0a:e1:51:d7:6c:b7:24:e6:
         6c:b4:64:ec:e2:3e:cc:47:3d:f7:03:f0:37:9d:25:ca:f3:c9:
         13:de:ff:f7:0d:6f:3a:18:96:8a:63:00:64:42:6a:42:e0:78:
         65:c6:58:b3:2a:02:46:8f:5c:90:c7:c3:83:58:d6:ba:3b:61:
         ac:c4:e1:ab:44:a4:28:5e:2e:e9:90:ed:81:19:12:76:fd:c3:
         2c:be:c9:dc:9f:a2:81:f6:06:b9:16:ee:0b:a0:23:cf:f3:8a:
         98:70:73:a5:33:91:d6:76:52:cf:4b:2d:71:7c:56:36:3f:dc:
         cd:0d:61:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:20:04 2026 by rpki-client