Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
File:                     YdOLN5gKDfrpz5osW1at6X-vUC4.mft (raw, json)
Hash identifier:          Q0JJxLIt14YfkpCym598uFsMTQhis80+2GVaSL9t+n0=
Subject key identifier:   81:0E:78:6E:EF:06:7D:0E:3C:5F:67:5F:B8:48:FC:B1:8D:BC:98:20
Authority key identifier: 61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
Certificate issuer:       /CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Certificate serial:       019EC224FB5010A487CB1634E38B73512E43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
Manifest number:          0DE6
Signing time:             Sat 13 Jun 2026 18:01:03 +0000
Manifest this update:     Sat 13 Jun 2026 18:01:03 +0000
Manifest next update:     Sun 14 Jun 2026 18:01:03 +0000
Files and hashes:         1: YdOLN5gKDfrpz5osW1at6X-vUC4.crl (hash: E/kmDDtBfF9AoRpZIpRhG1Gqfc1l0fZ/HaNrVHZfZBI=)
                          2: kGLxA9onzrf8JLssDr-KbBw0Iso.roa (hash: iCYCJqbAYcmF46KnTkB1atw07n5B8BjwCirxzmxkzlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:fb:50:10:a4:87:cb:16:34:e3:8b:73:51:2e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
        Validity
            Not Before: Jun 13 18:01:03 2026 GMT
            Not After : Jun 14 18:01:03 2026 GMT
        Subject: CN=810e786eef067d0e3c5f675fb848fcb18dbc9820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a2:39:2c:8a:6a:76:76:91:ce:74:f7:aa:6b:
                    79:95:e8:df:a1:ff:b8:af:cb:63:9d:a6:a5:f2:9a:
                    1a:82:75:19:1f:c4:7c:b1:8d:3f:bd:65:b6:9c:21:
                    85:2e:17:53:00:82:d8:38:32:00:5c:bd:c7:ae:27:
                    76:4e:a0:56:be:01:27:ed:38:d0:14:40:4e:1b:2c:
                    86:39:77:c7:d0:26:a5:8f:4c:e2:65:f4:68:69:f2:
                    2e:8a:8f:fe:61:98:91:c8:89:68:7e:b3:f5:a5:ac:
                    d3:05:a9:59:7a:61:3d:f6:2c:fe:78:48:8e:d7:15:
                    84:95:5d:4d:d1:e8:d5:73:e4:fe:a8:f6:f9:7b:d0:
                    01:e1:ab:7f:b9:33:db:2e:c0:97:c4:05:30:d6:28:
                    d5:34:e9:dc:85:3d:2e:ac:35:4c:7e:93:4c:ef:52:
                    ef:39:5b:cc:4a:5f:85:08:b6:fc:37:e2:fc:5a:6f:
                    f6:c8:f5:9a:c6:57:b5:fd:ae:44:1d:5a:a7:f8:bb:
                    2f:3f:a8:d5:13:d5:14:8d:bc:65:db:ef:67:4b:5d:
                    77:86:5b:5b:33:91:65:0e:62:6e:31:eb:5d:61:14:
                    e7:9b:83:35:09:11:f6:a1:40:9b:d1:ff:7c:9f:f3:
                    8e:b1:52:84:90:0c:41:ac:03:8e:1c:21:5c:82:89:
                    97:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0E:78:6E:EF:06:7D:0E:3C:5F:67:5F:B8:48:FC:B1:8D:BC:98:20
            X509v3 Authority Key Identifier:
                keyid:61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:99:fa:77:56:3f:ef:01:6e:31:ec:c1:90:9a:e2:34:a9:98:
         2b:bc:1e:0b:f4:e9:14:22:75:9e:fd:b5:2e:92:c3:04:33:42:
         00:f9:e0:45:07:e2:ec:3f:e1:41:f5:1e:5a:02:e0:52:e0:d0:
         c5:2f:98:e6:d6:c8:d1:09:7e:af:78:6f:63:bd:2b:c7:2e:ac:
         61:31:f6:2c:9b:c4:5c:7a:fd:d4:e0:96:9a:c1:f5:0d:4a:20:
         21:6a:37:89:ab:f5:fc:6b:d8:ed:3f:f2:d1:7c:60:af:6b:52:
         08:45:1b:4a:17:a7:2d:a3:8d:9d:8d:49:2a:c8:bc:bb:c6:50:
         d0:ba:39:01:ca:74:86:33:a5:db:13:36:95:5a:0d:a2:e3:2e:
         9c:d9:cc:31:8f:ff:89:ce:fa:54:5c:b9:3e:60:5f:58:d8:f8:
         8c:c8:f8:7c:0c:71:4c:67:c2:15:5f:fe:90:c9:47:ab:65:bd:
         b9:9f:a4:bf:69:de:61:7f:72:14:b2:13:ac:28:fb:bb:d5:b3:
         3a:f2:6d:13:a1:8c:a0:c4:23:a0:19:5a:0f:ad:e4:65:33:f7:
         a5:29:bc:33:e2:fa:52:60:0b:27:aa:9b:2e:fa:00:1a:94:fa:
         7c:51:db:16:d4:b0:33:92:d4:d9:6f:74:2e:b9:72:86:14:58:
         3b:c5:41:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:47:17 2026 by rpki-client