Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File:                     yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier:          XS3Zj09i1ik6HiO8OsBaDdEkFha88K8RcT8iiz8GVOw=
Subject key identifier:   EE:A1:55:6A:A2:97:4E:10:D6:D1:0C:AA:C8:A8:85:EA:C6:4F:60:D9
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer:       /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial:       019EBFFF174EA07AF76F5A65A7C3BDDF798B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number:          1208
Signing time:             Sat 13 Jun 2026 08:00:26 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:26 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:26 +0000
Files and hashes:         1: 0Lwj5i1c4Zxo9S7reLT043tZQto.roa (hash: YQ43Pzm8kIwiUn3utvGc8HdrkEgRWVgYKvbGV3IgZ04=)
                          2: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: 529GZhpvpHgU+wozg/qqI7yavA5Ic2NE/zudwntvO7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:17:4e:a0:7a:f7:6f:5a:65:a7:c3:bd:df:79:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
        Validity
            Not Before: Jun 13 08:00:26 2026 GMT
            Not After : Jun 14 08:00:26 2026 GMT
        Subject: CN=eea1556aa2974e10d6d10caac8a885eac64f60d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9b:84:4c:da:4e:33:91:b2:76:1e:7d:86:f0:
                    86:f2:e7:9f:c3:48:11:9d:1d:a9:0f:34:76:b8:3f:
                    dc:5c:68:b5:f8:27:4a:cc:5a:a9:bd:ba:66:4a:dc:
                    54:80:cb:d0:75:ef:35:ab:cf:92:a6:dc:a6:3c:c8:
                    33:a0:19:89:c3:92:a1:a4:0d:f7:ae:ef:80:7a:bd:
                    7c:d0:de:23:de:03:74:e1:c5:79:89:c9:0c:aa:37:
                    cd:0b:38:e4:06:3b:17:7f:01:72:52:aa:16:8b:19:
                    f9:17:40:8c:2a:0b:5a:0c:21:ed:42:44:69:ee:90:
                    fd:97:23:23:87:f7:f3:a9:1c:12:08:fb:96:7b:10:
                    72:5e:ef:d3:f4:a8:80:d8:86:81:b2:6f:39:99:a2:
                    46:09:48:87:1f:b0:3d:13:a0:c1:f9:5a:d5:2a:45:
                    77:b3:b0:f0:31:33:a0:39:d9:8a:40:07:0a:ef:4c:
                    3f:37:8f:51:d6:8a:27:ea:c0:2f:75:06:b7:18:58:
                    7f:24:29:66:df:81:17:6c:4d:5c:c8:2b:67:f0:63:
                    b4:66:00:a8:3e:dd:28:a7:36:06:d4:e2:28:6a:e3:
                    bc:9d:91:66:38:e3:6b:55:e2:a6:d6:e7:6b:56:c1:
                    99:24:a2:51:43:56:0b:81:d1:04:a9:49:8e:3f:6e:
                    18:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A1:55:6A:A2:97:4E:10:D6:D1:0C:AA:C8:A8:85:EA:C6:4F:60:D9
            X509v3 Authority Key Identifier:
                keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:2f:43:f4:06:8d:54:38:e5:91:6c:ec:01:c9:a8:f4:e8:43:
         64:72:06:2a:45:77:1f:ae:48:3e:d8:75:90:b2:d3:f2:07:67:
         8f:35:92:86:df:1b:2a:35:7d:f6:6b:56:09:0f:e2:e9:7c:73:
         21:8c:8c:2a:85:08:2c:89:3f:64:b8:c9:24:78:97:ad:ca:6b:
         c8:42:3c:44:65:10:05:34:de:a2:25:b6:5d:22:c7:02:6a:f7:
         71:7b:4e:fc:19:20:44:e0:52:7c:11:f0:ab:20:15:81:f1:f4:
         a2:06:ab:bb:46:09:45:32:83:be:db:24:27:ad:68:82:e4:08:
         7e:0f:28:db:aa:e0:f8:d8:6a:d3:60:63:b7:da:37:57:51:30:
         9f:eb:6e:4a:d4:75:ec:e5:0a:bc:8c:39:1e:d3:b2:36:d1:b9:
         e7:31:67:67:c9:75:d7:a1:06:26:37:d1:f5:6b:eb:54:86:90:
         11:f8:60:0f:ef:1a:89:fa:ce:f6:29:56:ac:cb:ce:87:88:e0:
         00:f5:4d:4a:9a:db:69:82:55:00:9f:7b:eb:b3:6a:ed:ee:c6:
         c1:03:77:6f:7c:0e:a5:52:82:da:b3:01:3c:3f:44:2c:87:d4:
         30:5a:cf:c9:97:b8:1d:62:85:d2:67:77:98:6f:6a:75:85:11:
         0d:20:96:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:26:19 2026 by rpki-client