Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
File:                     ysIWQb28-sJMVLakhZSDxeQWQLY.mft (raw, json)
Hash identifier:          QAx6om+l2vGBhgSdYdcHPAXN/aQLDqpYUQ5o8ALMS7I=
Subject key identifier:   2F:81:14:F1:F1:95:B7:45:56:36:60:E3:24:93:D3:EF:22:59:E5:74
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Certificate issuer:       /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial:       019EBEB6464B2BD4D07EF21C45F652FBE42E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
Manifest number:          1960
Signing time:             Sat 13 Jun 2026 02:01:16 +0000
Manifest this update:     Sat 13 Jun 2026 02:01:16 +0000
Manifest next update:     Sun 14 Jun 2026 02:01:16 +0000
Files and hashes:         1: 3I0ccbWDDm2AJ0Og3v2UYgTm0kU.roa (hash: vjrwzp/zqZBxc6wOSE5N6kztkRal6ScIrhGe+5Xi3bI=)
                          2: MEjN6NiBRUno6jMiVrI76qBgUXE.roa (hash: s2vQYXj0w7LOeK8L7upi2AL1yMhCtXme3TjzeGEM0n8=)
                          3: ZknLlp2vh9WJk0H7iXXLOw9c2pU.roa (hash: S6ynW8hTvcrSOBVEp2ULNqC2ZlGWhPVxKi1FBjbkc4c=)
                          4: ysIWQb28-sJMVLakhZSDxeQWQLY.crl (hash: e2Pi6yDQv5p5s56morCamtaTrzUZLD7VqFGq1nFVm5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b6:46:4b:2b:d4:d0:7e:f2:1c:45:f6:52:fb:e4:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
        Validity
            Not Before: Jun 13 02:01:16 2026 GMT
            Not After : Jun 14 02:01:16 2026 GMT
        Subject: CN=2f8114f1f195b745563660e32493d3ef2259e574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:eb:33:d9:76:36:a6:70:69:cd:95:d5:d7:76:
                    a1:4b:ec:f0:5b:5d:d5:79:93:9b:04:e2:24:f1:d9:
                    07:ec:67:21:c9:7e:cd:4e:e7:29:0b:23:69:e9:be:
                    3e:d1:88:26:a7:45:38:9e:a9:5e:20:8e:fe:88:e9:
                    90:c2:ec:e1:e9:11:fc:19:07:69:19:00:52:aa:85:
                    11:eb:62:cf:5c:42:7d:99:9a:2b:ef:83:01:19:28:
                    2b:03:c1:8f:e6:0d:56:b2:17:09:79:07:10:d5:df:
                    7c:07:db:f9:64:d2:b2:13:c9:f1:57:c2:ac:6a:dd:
                    53:06:a9:b9:a1:d5:d7:26:47:40:94:05:64:ad:34:
                    c8:a8:39:ec:8c:2f:be:bd:c1:db:6a:24:37:c6:dd:
                    5c:a8:36:42:86:c8:89:a2:67:50:32:67:e2:dc:2e:
                    3d:93:53:7f:7f:06:6b:19:53:fd:a1:82:96:a8:2c:
                    b5:00:55:c3:ce:dd:3c:32:b5:f7:0e:56:d6:1c:d9:
                    72:65:47:39:fe:2b:3c:45:fd:59:68:c5:93:6d:9e:
                    cd:3a:f5:c3:89:ab:71:2c:21:06:c9:5c:fd:05:c3:
                    f4:ec:08:03:38:8e:a2:42:6a:c9:6d:c7:3d:8c:1c:
                    94:af:26:e7:c4:8c:86:9d:4d:fd:38:d3:37:54:19:
                    d5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:81:14:F1:F1:95:B7:45:56:36:60:E3:24:93:D3:EF:22:59:E5:74
            X509v3 Authority Key Identifier:
                keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:69:af:96:58:41:cc:2e:f4:54:3a:e9:ac:77:03:f3:56:fd:
         86:f8:ce:27:36:70:0c:2f:2a:ab:43:c5:99:dc:f5:5e:d6:ed:
         a4:4c:3b:93:e5:d3:4d:f2:68:37:7f:c9:76:0e:48:97:e7:1f:
         f4:22:fc:58:19:2e:0a:b7:e3:5b:b5:08:06:35:2b:c7:c5:7f:
         5e:64:e8:3b:18:ce:49:30:a6:24:8f:e7:27:a5:24:78:72:13:
         37:16:0a:73:19:0c:74:4a:5d:23:17:7e:fd:48:69:20:6e:f1:
         40:f6:15:56:2f:44:fe:4d:71:9c:c8:34:c1:5c:3d:e5:fa:96:
         32:87:28:7a:4d:d6:2e:30:e3:7a:7c:5e:3d:d3:89:96:67:ec:
         91:e4:f2:1a:9f:3c:bc:df:aa:53:7c:b9:3f:b9:fc:b9:53:59:
         71:5d:ed:ee:bf:af:fa:ad:ac:54:39:74:d5:1a:19:bc:22:8c:
         e4:24:f0:40:b8:86:c9:04:c3:d1:20:0c:1a:28:7d:66:fc:41:
         d6:6c:a2:cc:9b:8d:4a:72:49:7e:48:a2:f4:bd:2c:1a:ed:4d:
         09:6d:4d:84:5c:9d:e4:79:e5:0d:72:4f:8d:01:ab:ef:e1:8d:
         cc:17:0c:6f:fb:32:6c:1e:5c:3f:28:8b:0e:db:57:b0:cc:ad:
         c4:f2:0c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:48:22 2026 by rpki-client