Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
File:                     yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft (raw, json)
Hash identifier:          QPkFXGn0Kxear28l++At3LgobpdiefdrCgZpfWB9Tt0=
Subject key identifier:   8B:8C:EC:16:53:74:24:47:47:80:25:53:CA:9B:2A:96:1A:B6:97:11
Authority key identifier: C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
Certificate issuer:       /CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Certificate serial:       019EC480B26B47B13816A0B32DE97D5EA996
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
Manifest number:          15E1
Signing time:             Sun 14 Jun 2026 05:00:28 +0000
Manifest this update:     Sun 14 Jun 2026 05:00:28 +0000
Manifest next update:     Mon 15 Jun 2026 05:00:28 +0000
Files and hashes:         1: xJ9oLhi0jZ3bx5rEVTQJ-Dbq8Ic.roa (hash: 8Hl158eCXhXx4gFRUokLsBxI0i7haKKmOz5b/bBgdPg=)
                          2: yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl (hash: zT4nt1z3+06pJGHb8VOHkm39XT3qwCFn8B6ggqk/8Vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 04:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:80:b2:6b:47:b1:38:16:a0:b3:2d:e9:7d:5e:a9:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
        Validity
            Not Before: Jun 14 05:00:28 2026 GMT
            Not After : Jun 15 05:00:28 2026 GMT
        Subject: CN=8b8cec165374244747802553ca9b2a961ab69711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:41:20:c3:ea:b9:69:c7:44:de:5d:8c:8b:2e:
                    bf:f5:c7:90:09:bb:c5:17:1e:5b:06:16:46:ce:41:
                    0d:2a:ed:4f:bd:8b:ca:7f:c0:92:5b:3d:24:6c:96:
                    96:13:ad:b2:c0:77:ac:ea:bc:a6:c2:4e:33:18:b0:
                    80:72:72:c9:c6:73:7b:2a:6d:5d:74:e8:a7:0a:e0:
                    ec:58:cf:98:3f:50:34:d6:16:00:19:17:62:86:56:
                    68:5d:07:d9:fd:86:0b:a7:1d:18:ee:c4:50:81:0d:
                    d6:1a:d3:4a:12:6d:f1:5e:aa:f6:3d:e7:d5:d6:fb:
                    8e:dc:a2:20:cb:87:3e:4e:4e:20:6f:8c:4c:82:3b:
                    91:61:f3:be:65:0b:e2:29:e1:5c:eb:44:ad:56:69:
                    3b:c2:b8:d4:94:8b:04:08:e9:b9:a9:48:b6:f6:98:
                    9e:94:01:ca:14:21:78:c8:91:56:08:56:68:c8:6b:
                    15:68:97:41:35:2d:25:ba:c3:94:69:1e:64:54:d3:
                    06:02:5c:11:83:c6:a6:4d:db:65:c7:12:bd:91:e5:
                    eb:67:59:a8:5a:67:1c:b5:01:d5:b2:23:cd:27:12:
                    8a:2a:e7:f8:d9:dc:e1:7c:c5:13:14:f3:e7:a9:07:
                    fd:4e:3c:db:ac:80:1d:2d:f9:50:df:87:7a:6e:ac:
                    b7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8C:EC:16:53:74:24:47:47:80:25:53:CA:9B:2A:96:1A:B6:97:11
            X509v3 Authority Key Identifier:
                keyid:C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:39:04:0e:51:4b:03:65:a3:1e:1a:dc:04:bd:0c:2e:8f:ca:
         a5:90:88:63:af:9a:e2:27:71:f8:5a:b1:a9:e0:eb:0c:14:3e:
         27:aa:b4:fd:03:59:d3:42:e7:86:b7:0a:67:3b:13:51:2a:53:
         7f:f1:d8:0e:35:8f:40:e2:93:05:f9:78:4f:03:d7:1e:74:a0:
         7b:75:27:39:aa:e6:1a:bf:7a:9d:86:30:d6:e9:84:de:82:48:
         15:e3:4b:e1:c9:90:02:ff:cf:eb:84:f1:da:f2:cb:ac:63:61:
         b7:e5:27:1d:6c:53:e6:74:62:71:ec:5f:f0:36:2d:b1:83:6d:
         d2:74:dd:00:f6:2a:d8:2e:16:35:cd:8a:04:35:8c:a9:63:02:
         9d:00:50:fc:02:8b:8b:b4:1a:16:09:51:10:51:94:03:cb:48:
         bd:32:1c:90:d2:5a:25:b0:4a:e3:38:3a:dc:05:ff:a9:25:da:
         6a:9a:7f:f9:8d:93:d5:30:44:b1:e1:5c:a5:4a:d4:0d:44:3b:
         fd:04:10:6e:80:7f:f6:0b:24:5e:94:46:f5:6e:8d:64:48:e7:
         37:b2:f9:a8:94:3d:2c:47:ca:fa:e8:d7:59:79:49:92:87:9f:
         ef:98:24:8a:79:eb:82:d7:f5:85:ac:59:e8:46:ba:d2:a9:67:
         00:ef:1c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:48:02 2026 by rpki-client