Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/751881-6e00-4da8-badf-136dd2760d25/1/yZ7pUPWy2FPRlgOyfzXjYcuoaJo.mft
File:                     yZ7pUPWy2FPRlgOyfzXjYcuoaJo.mft (raw, json)
Hash identifier:          1HaRbsbZ6WGadHtuq1f67ySNgl6/SJFDR4di6k4iu+c=
Subject key identifier:   04:5F:D6:03:D7:90:61:E6:56:4A:32:DA:3C:96:35:FE:9B:1D:43:15
Authority key identifier: C9:9E:E9:50:F5:B2:D8:53:D1:96:03:B2:7F:35:E3:61:CB:A8:68:9A
Certificate issuer:       /CN=c99ee950f5b2d853d19603b27f35e361cba8689a
Certificate serial:       019EC36DDB66A6B668D5FF5F140F9E8AB858
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yZ7pUPWy2FPRlgOyfzXjYcuoaJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/751881-6e00-4da8-badf-136dd2760d25/1/yZ7pUPWy2FPRlgOyfzXjYcuoaJo.mft
Manifest number:          3D
Signing time:             Sun 14 Jun 2026 00:00:17 +0000
Manifest this update:     Sun 14 Jun 2026 00:00:17 +0000
Manifest next update:     Mon 15 Jun 2026 00:00:17 +0000
Files and hashes:         1: V51Xd-EnU0YE3waPlZqnDLP6u1M.roa (hash: LAp4Bm3heyzVm498syilDbsxbhhgwhye7TCJj3AhSpw=)
                          2: yZ7pUPWy2FPRlgOyfzXjYcuoaJo.crl (hash: mIDhncGeD6shuExwp7nTtduyRxI/CzzMg3BTBloz/mY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/751881-6e00-4da8-badf-136dd2760d25/1/yZ7pUPWy2FPRlgOyfzXjYcuoaJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/751881-6e00-4da8-badf-136dd2760d25/1/yZ7pUPWy2FPRlgOyfzXjYcuoaJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yZ7pUPWy2FPRlgOyfzXjYcuoaJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:6d:db:66:a6:b6:68:d5:ff:5f:14:0f:9e:8a:b8:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c99ee950f5b2d853d19603b27f35e361cba8689a
        Validity
            Not Before: Jun 14 00:00:17 2026 GMT
            Not After : Jun 15 00:00:17 2026 GMT
        Subject: CN=045fd603d79061e6564a32da3c9635fe9b1d4315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ea:bb:f2:8e:73:85:8d:be:ab:7c:b1:2e:42:
                    82:b5:cc:8f:e6:69:21:cb:10:0a:72:ba:b7:ee:e2:
                    6d:6e:6a:e2:4f:6a:c9:c9:36:1c:a0:df:8f:8b:e3:
                    ec:5a:07:20:bc:e7:99:08:e8:04:31:6d:40:85:c3:
                    f6:f9:d4:83:fc:63:06:dd:4c:77:cd:07:cb:72:d0:
                    35:d7:98:a2:18:dd:cc:35:86:3c:7c:41:2d:eb:b4:
                    c0:24:45:a3:19:53:38:18:f3:3e:30:1c:12:44:5e:
                    93:bb:e5:7a:b4:01:47:92:e8:d0:a7:60:03:f4:15:
                    e3:d8:92:91:b1:9e:ea:46:31:8a:d3:29:06:27:e4:
                    b8:59:9e:0f:d9:f6:3b:20:1a:c7:0e:84:f3:b3:48:
                    00:26:78:cf:cb:73:ee:20:37:73:20:b3:b9:5a:4b:
                    b0:73:cd:6f:9b:c0:c2:40:cd:d7:1c:b6:36:2e:d4:
                    9b:0b:12:06:39:ce:bd:b4:c8:fa:4b:da:ba:68:74:
                    b9:30:7e:4a:69:82:ea:b9:fc:87:50:24:77:bf:b4:
                    80:92:e9:32:6c:ed:44:ca:5f:a6:f4:1a:ef:5d:bd:
                    b2:4c:45:43:5e:a6:a9:8a:1b:2e:7a:36:c5:b9:b0:
                    57:9c:d2:d8:aa:e1:cf:a0:23:5d:c4:b5:a4:11:99:
                    14:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5F:D6:03:D7:90:61:E6:56:4A:32:DA:3C:96:35:FE:9B:1D:43:15
            X509v3 Authority Key Identifier:
                keyid:C9:9E:E9:50:F5:B2:D8:53:D1:96:03:B2:7F:35:E3:61:CB:A8:68:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZ7pUPWy2FPRlgOyfzXjYcuoaJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/751881-6e00-4da8-badf-136dd2760d25/1/yZ7pUPWy2FPRlgOyfzXjYcuoaJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/751881-6e00-4da8-badf-136dd2760d25/1/yZ7pUPWy2FPRlgOyfzXjYcuoaJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:d2:d6:11:37:05:61:16:c5:a0:45:f6:89:70:b5:8c:35:ff:
         c5:a2:4a:41:cc:82:c8:c7:8a:ca:ca:50:64:83:1e:5b:c6:42:
         f7:4f:3d:d7:ed:20:34:ad:3a:29:99:a3:f6:fa:02:a5:ac:4c:
         73:3d:c6:d5:e3:e1:76:6f:4b:32:17:90:ad:fd:ce:c6:04:fb:
         a9:0d:cf:c0:e7:f6:d7:da:6f:8f:91:52:35:c6:10:21:8a:06:
         54:15:00:d0:b0:87:0f:80:9d:46:ff:12:36:2d:1f:3a:80:6e:
         3c:fe:0c:cd:0e:69:18:8a:7d:30:7f:31:5b:0f:74:5b:7c:42:
         bb:d3:a5:5f:2b:3d:40:c7:34:f7:a4:18:a4:3d:ce:d8:eb:ab:
         aa:99:86:af:c4:98:ae:cc:63:7a:e9:ff:6d:80:dc:12:c1:31:
         5b:18:bd:c3:1b:7e:2f:3d:9e:2e:8c:c6:a2:0f:c1:0d:d6:c1:
         53:ad:8b:a2:fe:8f:b8:d6:d3:77:6d:d9:d5:b2:26:6e:e2:94:
         5d:71:6f:ff:db:4a:86:d7:57:22:17:56:83:ae:fd:86:47:55:
         e0:ad:07:6b:24:eb:b6:f7:a9:96:d7:36:a2:49:e0:de:3b:c9:
         7c:7e:f4:ee:5e:2c:be:69:32:45:84:07:30:fe:e6:1f:6b:7a:
         80:7e:2e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:58:29 2026 by rpki-client