Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
File:                     HY6rk1MM_VDaf7faXroKpEDJ7ww.mft (raw, json)
Hash identifier:          gQ8Imzh0CmQ248JFTDuOVOy/WAChpeJrJcgT4zgmPCg=
Subject key identifier:   D5:14:E6:77:60:75:F6:55:E6:9E:9E:47:D0:D2:18:B6:66:CC:C5:51
Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
Certificate issuer:       /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Certificate serial:       019EC17FB88E49EE79767A3E19E5420D1DC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
Manifest number:          111E
Signing time:             Sat 13 Jun 2026 15:00:33 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:33 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:33 +0000
Files and hashes:         1: HY6rk1MM_VDaf7faXroKpEDJ7ww.crl (hash: szsEDyNy5oT8UJJPXgXBGOrhIG2oa5kzRYZHzakoXuQ=)
                          2: YuZ5WXiv26JqcpRPGf_w1FamtRI.roa (hash: EaYcDNS6rfkVwheyBkzxUL8l/p2YFFRpDmPTFV/xjl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:b8:8e:49:ee:79:76:7a:3e:19:e5:42:0d:1d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
        Validity
            Not Before: Jun 13 15:00:33 2026 GMT
            Not After : Jun 14 15:00:33 2026 GMT
        Subject: CN=d514e6776075f655e69e9e47d0d218b666ccc551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a1:f1:ac:ad:7e:e1:96:12:1d:28:0f:03:0e:
                    4f:4e:3e:3e:1c:19:bd:af:23:0f:04:1d:69:2c:e4:
                    c6:10:d8:af:7a:80:73:5a:53:1f:a9:e8:25:67:ca:
                    5a:5d:f8:b5:e6:0a:74:80:c3:bb:f4:7c:66:f5:b9:
                    1d:2e:ef:a1:f0:14:57:e7:7a:48:2f:89:98:9d:94:
                    a5:5e:1d:ef:b9:70:8b:34:e3:09:39:03:6b:dc:68:
                    27:ad:dd:7c:4c:a4:a2:89:d0:99:37:60:b5:98:c4:
                    1d:e5:8c:fe:c7:33:7a:c0:7e:99:d3:76:bf:79:a3:
                    c7:a2:97:f0:9e:54:c0:5c:f6:4f:d3:20:ef:95:e4:
                    c8:f4:f8:d6:7f:e8:fa:9d:03:53:7f:da:be:77:bf:
                    77:21:cf:4a:e5:60:80:f4:e2:30:9c:d1:aa:19:bd:
                    12:25:b2:16:9d:4a:30:12:c9:85:f9:ff:27:44:b5:
                    fa:d0:93:c2:f4:92:b9:bc:50:a7:d9:3f:ca:ea:8e:
                    f2:f8:70:2e:ca:6c:e2:b8:2a:26:5a:e8:a9:87:c1:
                    6f:17:bd:25:ba:89:bb:d8:c6:78:00:2c:d5:e3:7c:
                    af:7d:92:ab:24:fd:41:4c:d3:36:f7:4f:b2:44:18:
                    04:da:b3:9c:7b:a0:3a:8f:79:df:45:a0:4b:f0:01:
                    a0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:14:E6:77:60:75:F6:55:E6:9E:9E:47:D0:D2:18:B6:66:CC:C5:51
            X509v3 Authority Key Identifier:
                keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:68:3d:27:df:b6:43:80:77:c1:b2:00:e5:9f:f9:5e:b5:c0:
         ba:7d:ba:86:13:56:c2:4a:a0:6f:f3:29:71:4a:c6:e2:36:12:
         56:be:3d:3f:67:81:a7:cf:92:6c:6c:b1:60:f6:45:08:f0:c8:
         c5:f9:2d:11:cb:39:bc:e0:40:42:85:38:6c:a1:2e:c9:06:6f:
         96:23:4a:2c:02:ff:11:37:11:a5:30:aa:37:7f:63:14:df:18:
         3e:04:b2:be:9e:56:20:a7:74:42:8e:1b:5e:e2:36:8b:3b:a7:
         8b:52:14:7f:d9:ad:3c:80:1d:cd:8c:48:87:38:8d:1e:5c:d5:
         2b:19:ea:22:2c:22:a7:05:f9:92:cb:b0:fb:20:00:9b:4b:c8:
         6b:b9:cd:8f:e4:0b:73:21:f4:ae:3d:08:d7:80:7d:37:14:e3:
         1f:2f:1d:23:b6:c8:ff:de:9f:a2:eb:66:fa:a2:76:53:ae:f5:
         37:36:50:63:ca:4d:dd:ea:67:a0:62:87:9c:12:e5:e6:20:c3:
         81:67:10:af:60:5d:3e:0f:52:e9:55:63:c4:c3:fa:fb:7f:84:
         f4:ff:e6:9f:f0:af:64:3a:ca:cf:40:ea:ff:76:d8:aa:1b:b3:
         b8:1f:42:f7:5b:fe:60:ea:67:4d:99:41:45:98:bb:c3:57:d2:
         7d:3a:37:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:45:16 2026 by rpki-client