Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
File:                     yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json)
Hash identifier:          YELBmdhNKMSH9osHnnvzlOgQ+wjoeh/yEYcyfIniIyg=
Subject key identifier:   F8:24:C5:17:E1:D9:07:07:FC:03:04:A8:65:DC:7A:F9:31:28:CF:BC
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Certificate issuer:       /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial:       019EC03655A80B5BCEAA1176C9938E172897
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 09:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:46 +0000
Files and hashes:         1: JBraeIgnuA6e6r7UQt_AjcfpK9E.roa (hash: tQM9C7OHo0XqPssxXUnuLcGysh5HiluPj8tqyjMnFVk=)
                          2: qQLv7uOVYz32Fa-HCYFsduryaUY.roa (hash: msrPJ+vS8iPsGg0xQfm9cnyh8JOxajlO3J5ownd6l7I=)
                          3: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: t/VlQ8p3VyRfne05JWpersRxEhWUFQ0XJpOXBmqr3/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:55:a8:0b:5b:ce:aa:11:76:c9:93:8e:17:28:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
        Validity
            Not Before: Jun 13 09:00:46 2026 GMT
            Not After : Jun 14 09:00:46 2026 GMT
        Subject: CN=f824c517e1d90707fc0304a865dc7af93128cfbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:37:9f:0f:15:da:48:ec:23:eb:66:9c:b5:6b:
                    75:a4:ba:ea:17:3c:64:14:e5:cf:73:b7:9a:8f:73:
                    5d:70:c2:91:33:b3:95:08:53:60:ac:6a:75:8c:e5:
                    32:bd:c8:83:51:d9:c3:c0:4f:c3:1c:a2:f0:21:81:
                    34:38:e5:d2:43:ca:25:08:b3:1f:3e:e3:0d:27:22:
                    2d:5f:20:a4:39:65:d9:d6:10:c5:6a:71:74:58:64:
                    3a:26:83:c3:15:a3:57:20:34:26:37:66:59:6b:60:
                    72:10:c1:a5:67:be:40:1a:5e:f5:32:b5:f0:a3:61:
                    99:62:54:85:9f:17:f8:6d:de:c3:fd:70:6d:17:cc:
                    86:22:49:e4:31:b6:83:81:1a:8a:8b:74:97:63:7a:
                    ec:74:68:fb:be:e2:8c:a3:2f:7b:c7:76:01:b3:ef:
                    f3:72:bf:ee:b1:55:f9:fa:63:1a:2a:ec:37:75:37:
                    c5:d5:4a:39:32:04:c8:98:85:48:e0:8c:7a:1e:59:
                    61:67:10:ab:cf:c0:a5:8d:12:3d:2e:94:01:0c:9b:
                    3d:da:71:f3:08:09:07:19:6b:bf:36:22:ac:b3:71:
                    9e:ba:bf:16:24:26:e5:13:db:28:45:f7:75:61:3d:
                    72:7a:36:e4:70:bf:27:d1:9b:76:6d:03:e1:12:b6:
                    2c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:24:C5:17:E1:D9:07:07:FC:03:04:A8:65:DC:7A:F9:31:28:CF:BC
            X509v3 Authority Key Identifier:
                keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:5a:3f:d8:47:e2:dd:da:41:d7:f9:a3:fe:91:46:95:5e:18:
         53:16:f3:73:45:95:03:9e:49:88:47:a2:15:79:61:7d:48:c8:
         a2:45:49:68:80:32:58:0f:ec:04:49:87:5f:20:7d:7b:ea:66:
         cf:49:95:0a:73:0b:c9:86:5a:88:df:d8:82:9a:96:90:42:98:
         76:b4:62:0b:02:30:ad:c5:e1:a7:2a:2d:d2:f7:cf:92:7f:a0:
         79:a6:e9:e2:b8:05:44:aa:6b:09:a3:89:a8:08:a8:39:05:24:
         09:c8:01:09:8d:d9:06:6c:95:0c:ec:0e:30:73:56:cd:93:0a:
         28:2e:c1:94:73:71:aa:d2:28:df:1d:6c:34:0e:44:43:8c:4a:
         ac:a2:57:89:ba:19:0b:6a:1a:be:ec:7f:0b:87:66:86:b1:13:
         61:1e:8a:c4:a0:84:16:48:08:08:91:8c:bb:06:a4:cc:8a:0b:
         76:6f:b3:96:4c:fa:62:0f:56:e0:4c:f1:d7:db:07:cf:e8:9b:
         a4:16:3e:00:fe:90:a8:65:10:66:35:51:df:ee:c2:45:75:b6:
         83:ff:31:e9:9a:3a:e9:3c:96:10:7b:db:3f:cc:6d:71:bc:aa:
         e1:e6:0c:ff:44:36:73:ff:b7:5c:d8:04:5f:c2:9b:65:3b:ea:
         3a:e0:a3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:56:04 2026 by rpki-client