Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
File:                     YTdPxOqwDUHB7uR_37ABB4x0-oU.mft (raw, json)
Hash identifier:          KVFV/TQGmaQeJ7S4FunllAQ9APN/2LaXeiJwI9pQb8s=
Subject key identifier:   99:BF:C0:BC:C6:33:4C:25:E9:50:74:42:50:31:C6:1E:4D:DA:1C:E7
Authority key identifier: 61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
Certificate issuer:       /CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Certificate serial:       019EC29235F5FC384F4932BE5617E38D9FDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
Manifest number:          08AA
Signing time:             Sat 13 Jun 2026 20:00:22 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:22 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:22 +0000
Files and hashes:         1: 7eP7TwNaRBKXgHVXQPj9yKJaIEQ.roa (hash: ilu1OaDtcIPxYeaNVeuS9YaTFPbuPd9sYiHNRmOaCMs=)
                          2: YTdPxOqwDUHB7uR_37ABB4x0-oU.crl (hash: ZRWQwRb1+CEn4VB70yoRAMcy1VBStKiTLTzARhs+YM4=)
                          3: t6QTeO_UUKyvQ6rnuFTVQVtV-d8.roa (hash: lkQHddLK92kTmS7mRA5Mrvzd/PdOAJ8/DAOJGdqwGqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:35:f5:fc:38:4f:49:32:be:56:17:e3:8d:9f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
        Validity
            Not Before: Jun 13 20:00:22 2026 GMT
            Not After : Jun 14 20:00:22 2026 GMT
        Subject: CN=99bfc0bcc6334c25e95074425031c61e4dda1ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:97:6c:3f:6d:e6:f9:3b:64:40:a4:89:17:6c:
                    f8:2f:ec:d4:ad:ac:3e:79:94:c0:02:5b:95:4c:d0:
                    27:4b:c3:f6:ea:3c:fe:2d:be:06:6c:c0:52:4f:2c:
                    d8:79:e1:c2:29:7e:98:a3:50:a6:c8:24:21:ae:53:
                    3e:3a:d4:77:82:76:35:8c:5e:ac:22:a5:5f:74:a0:
                    3d:ab:c0:de:98:30:11:d5:2c:8f:0b:fa:32:7b:09:
                    d3:6c:13:bc:d2:d8:09:47:2e:9c:ca:fd:b5:1c:be:
                    a1:92:19:44:c1:cd:ae:a0:60:05:bf:3d:be:9e:12:
                    32:38:1c:6e:f2:fe:a6:2d:77:f3:c9:0c:83:86:4a:
                    3a:5e:a1:5c:7a:74:56:de:f0:22:6a:ee:ee:a8:1f:
                    7b:a4:7d:9d:89:b3:1b:68:86:39:b0:e8:4c:5a:96:
                    11:8d:2d:6d:09:9f:e1:35:58:a8:22:ef:95:a2:4f:
                    7a:2c:0d:cd:69:c9:24:08:68:d6:44:f1:1c:b1:89:
                    6b:e0:8b:5f:f2:28:0b:71:2e:6c:fe:e6:73:06:2b:
                    e3:f8:e6:bb:1b:69:4b:d8:1a:86:02:a1:67:2e:da:
                    b9:e2:be:d8:c3:04:39:91:30:17:12:ca:9b:7d:8e:
                    dd:7a:0f:5e:e8:a4:89:dc:b9:ca:fa:be:ee:c7:ed:
                    ae:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BF:C0:BC:C6:33:4C:25:E9:50:74:42:50:31:C6:1E:4D:DA:1C:E7
            X509v3 Authority Key Identifier:
                keyid:61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:5e:95:ef:5a:fe:1b:5f:be:81:fb:a9:3e:54:5b:a5:ea:1a:
         f7:c6:a5:c1:ce:83:1e:a5:13:cf:55:01:26:02:6a:1e:b3:9f:
         01:15:46:78:96:92:3a:ae:4d:2e:ba:de:b2:41:7b:68:4e:97:
         8f:ae:fb:a8:21:0d:ec:dc:e4:de:03:d5:5c:e0:d9:b4:3b:2b:
         4a:77:8a:ce:7f:0f:1e:53:8e:d7:94:cc:a5:14:14:1b:28:14:
         00:c0:f7:df:2c:e2:2f:f9:e2:b0:f8:22:4f:aa:2b:8f:e8:3b:
         82:ff:21:41:be:53:da:c1:7a:bd:2c:31:73:70:4d:eb:f6:8d:
         43:2b:39:ef:4c:95:fe:34:72:83:d4:55:eb:15:07:80:20:fe:
         4c:6f:00:b8:b8:69:2a:a4:5e:be:2c:e6:c2:fb:19:d0:15:45:
         08:3b:5b:ce:9f:58:fb:9a:7e:d5:2a:4b:85:de:f5:18:a0:35:
         1d:5d:81:79:db:3e:b6:b2:75:d1:fd:49:1f:9d:6c:ac:c6:03:
         e4:da:b8:a7:52:5b:4d:2d:c4:d6:2b:1c:28:27:ab:6e:c7:f1:
         cf:65:f9:bc:b2:4f:d5:ee:5a:a8:9e:7d:b1:34:c7:b5:91:13:
         cd:7d:3a:db:dd:ca:31:2a:47:f5:5b:2e:9b:10:06:1f:c3:15:
         d9:dc:3e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:51:19 2026 by rpki-client