Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft
File:                     YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft (raw, json)
Hash identifier:          6OTX/Dx4a0OUF1Ui9hw+FBHNOvPVQF99W+sYi7mxXQY=
Subject key identifier:   AA:FE:B3:12:B0:CC:40:AE:B1:0C:4E:F7:EE:26:5E:73:27:78:75:9A
Authority key identifier: 62:3C:52:CC:DA:E5:62:9F:CF:70:C1:91:DB:FE:A3:AB:6D:54:97:44
Certificate issuer:       /CN=623c52ccdae5629fcf70c191dbfea3ab6d549744
Certificate serial:       019EBE10DB99F81C724C06B4B2F1AE3D79E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft
Manifest number:          0138
Signing time:             Fri 12 Jun 2026 23:00:36 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:36 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:36 +0000
Files and hashes:         1: YjxSzNrlYp_PcMGR2_6jq21Ul0Q.crl (hash: eEgiYELBztiyV9HwWZTQodYmMJyJmfr5YP99d1/zVZU=)
                          2: qLtdjMaYYUHUKpxEyfvu-Lg0bgk.asa (hash: J2X18n3waDdkd9hEMyPEI6UzN5Mlccq2mc0wjMIT8Og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:db:99:f8:1c:72:4c:06:b4:b2:f1:ae:3d:79:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=623c52ccdae5629fcf70c191dbfea3ab6d549744
        Validity
            Not Before: Jun 12 23:00:36 2026 GMT
            Not After : Jun 13 23:00:36 2026 GMT
        Subject: CN=aafeb312b0cc40aeb10c4ef7ee265e732778759a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:55:a8:e3:bd:ed:22:26:79:09:f6:2d:75:23:
                    b1:53:04:a6:cc:bd:18:04:e9:2d:6a:38:ad:d3:82:
                    df:be:35:6f:58:8d:6a:47:d6:08:f7:03:54:60:eb:
                    81:18:a4:1f:15:f1:8e:ea:e4:e7:61:6f:35:9e:d8:
                    37:56:6e:32:0d:f8:48:41:6e:fa:d6:a5:d5:04:8c:
                    24:48:63:87:5f:ba:af:50:d7:ab:c1:50:80:76:55:
                    9f:5f:c6:b6:de:82:a0:d8:de:df:5e:b3:9b:82:cc:
                    64:0b:5c:60:47:b5:3a:14:3a:ab:21:62:5c:08:2c:
                    c6:1b:fb:49:c9:a1:c3:aa:38:b4:33:48:1d:3c:a5:
                    b9:d5:e6:b8:bd:ba:cf:2c:86:96:6e:ed:cc:11:36:
                    2d:6b:52:10:89:90:61:ef:20:f2:c0:74:fa:da:e4:
                    e6:65:ab:41:58:68:28:f2:1e:20:7c:aa:77:96:b6:
                    ee:81:43:65:db:cf:0d:d7:7e:f9:01:94:29:9a:f9:
                    59:7a:30:e1:b5:5a:1c:ad:1f:4b:29:8b:4a:a9:ee:
                    8c:f5:62:23:7a:e7:3d:c9:b5:2a:5d:69:12:29:8e:
                    32:e7:6d:5b:05:b1:52:ee:a8:db:f8:b8:6a:d8:e2:
                    41:0c:22:f3:52:65:95:33:30:e5:0c:6a:5e:d1:d9:
                    0e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FE:B3:12:B0:CC:40:AE:B1:0C:4E:F7:EE:26:5E:73:27:78:75:9A
            X509v3 Authority Key Identifier:
                keyid:62:3C:52:CC:DA:E5:62:9F:CF:70:C1:91:DB:FE:A3:AB:6D:54:97:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:7e:dd:d6:99:c8:12:09:22:6e:81:d1:e7:7b:d0:42:6d:73:
         d7:10:5e:a3:67:3f:1d:e7:bf:d1:f0:bf:21:dc:96:36:f3:3e:
         e2:33:6c:ed:85:c3:0d:f1:3a:74:15:57:c0:40:a6:ef:f5:4c:
         eb:d8:3f:1e:68:81:e5:e6:86:a9:2a:7a:b7:75:b2:80:5a:1b:
         dd:86:6f:88:ba:a7:1e:21:cd:bc:30:4f:d3:ea:f7:2c:bd:36:
         75:d9:bc:3f:46:96:4b:fc:25:9d:06:d2:91:cd:52:57:dc:49:
         db:90:bd:f9:b9:d9:5f:7f:01:12:44:4d:71:c3:da:d2:ff:5e:
         18:d6:29:6b:47:72:c9:ca:8d:fc:57:1c:fe:4d:36:69:4d:55:
         61:40:2c:22:3f:44:66:32:d7:63:00:dc:c5:78:22:b8:2d:b9:
         e8:f4:25:2c:dd:bf:b3:a0:14:22:2f:c5:4c:bf:31:34:bc:5a:
         ab:f4:87:ee:a5:ea:bf:ce:0e:55:e5:e0:f4:16:0b:de:a4:00:
         c8:8f:b2:be:55:15:40:e1:bf:6a:cb:74:dc:15:5b:16:a9:6f:
         e6:b7:14:83:94:2f:b7:d0:a1:37:03:d6:89:5d:86:36:42:58:
         fd:4c:72:ac:ba:7a:bc:61:a4:60:e2:e6:58:e8:58:a2:4a:84:
         05:06:7c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:35:26 2026 by rpki-client