Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
File:                     ytx04QgwQh1O7qmCRM_RtBGQN_8.mft (raw, json)
Hash identifier:          +ko1yh0XADKYaNizVT/AtZjJwBheghSb/3kRaNORivU=
Subject key identifier:   85:D3:56:25:A4:E4:3C:C6:3E:81:8E:88:2E:64:50:BB:44:D9:91:C0
Authority key identifier: CA:DC:74:E1:08:30:42:1D:4E:EE:A9:82:44:CF:D1:B4:11:90:37:FF
Certificate issuer:       /CN=cadc74e10830421d4eeea98244cfd1b4119037ff
Certificate serial:       019EC2C9A93B86215AC732466397E42D148C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 21:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:56 +0000
Files and hashes:         1: DDllGy-0gN7gn7wR05GXGFPsqY0.roa (hash: 56XqjX/8wAHrfEweKci5I2st8Uu/z5VPWpGUoclsXrc=)
                          2: ytx04QgwQh1O7qmCRM_RtBGQN_8.crl (hash: mu8N0icDPumgujfN4J8+KtoA2nSAgDUEHQVCTSQag/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:a9:3b:86:21:5a:c7:32:46:63:97:e4:2d:14:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cadc74e10830421d4eeea98244cfd1b4119037ff
        Validity
            Not Before: Jun 13 21:00:56 2026 GMT
            Not After : Jun 14 21:00:56 2026 GMT
        Subject: CN=85d35625a4e43cc63e818e882e6450bb44d991c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d4:13:6e:f0:9b:29:77:18:c9:a9:83:4e:d1:
                    a3:67:42:e7:c6:95:6e:c4:f1:f6:a5:f4:df:b9:74:
                    52:c5:2a:f5:92:98:4e:6f:d0:be:20:9f:e1:77:7a:
                    98:35:9c:31:0c:94:28:5c:6b:97:fe:f3:fd:ac:23:
                    94:d1:d0:46:65:fe:9d:88:8f:05:61:e5:41:c5:1d:
                    86:f0:b8:1d:82:fe:75:f8:7e:e0:73:76:9a:6b:2b:
                    07:c4:88:7f:e9:d4:c6:4f:e7:4c:c1:54:96:3c:bc:
                    c3:bd:5f:c7:7c:81:72:20:79:d1:8a:f7:3f:30:84:
                    cf:a8:1d:e0:62:2d:a8:72:0f:7f:5e:e9:72:03:c1:
                    1c:82:8f:5f:1f:aa:93:7e:2b:d7:da:a6:5b:0a:2b:
                    52:14:be:e1:cf:a9:b3:81:3d:18:ce:9e:7b:b3:83:
                    29:8a:ec:3d:24:47:eb:88:51:a6:44:63:26:92:a6:
                    5e:50:ca:9e:ad:50:80:16:5a:b8:d0:34:47:5b:42:
                    a4:6c:50:71:59:ef:4b:ae:3e:98:2a:25:32:ff:d3:
                    47:c2:2f:81:cd:f3:ff:8c:d6:50:4b:35:1e:91:ca:
                    5d:c9:1d:ef:4d:21:0d:02:eb:89:81:a0:60:fb:98:
                    73:b2:58:25:6a:70:e4:bb:60:f9:04:44:e2:55:06:
                    d3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D3:56:25:A4:E4:3C:C6:3E:81:8E:88:2E:64:50:BB:44:D9:91:C0
            X509v3 Authority Key Identifier:
                keyid:CA:DC:74:E1:08:30:42:1D:4E:EE:A9:82:44:CF:D1:B4:11:90:37:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c1:de:1e:e0:f5:eb:ef:f7:2c:5b:56:21:c8:14:5f:7d:51:
         c0:c3:06:86:b4:3f:61:5e:4a:25:08:68:1f:b0:45:7e:d7:4b:
         69:c4:a3:d8:07:1e:76:9d:4c:d1:21:5f:89:58:07:0e:27:ae:
         46:fb:93:9b:a6:6a:28:ce:2c:9c:c5:c0:b8:0e:8f:65:5f:f8:
         eb:6e:87:30:cc:18:c5:ed:5e:6c:24:89:00:ea:9e:f1:5b:57:
         fe:20:9e:b1:fc:42:5f:cc:de:b3:b1:67:a5:d8:17:0b:1b:58:
         08:40:44:7a:4a:d0:e3:6a:7e:5b:3b:b0:24:bf:3e:b4:d3:93:
         e0:99:f3:17:24:20:af:03:a3:ce:5f:8a:e1:77:7f:3a:87:21:
         ee:d3:0f:cc:d4:aa:99:89:3f:8a:83:10:42:3e:cf:d0:65:06:
         88:43:d5:d1:21:27:23:a1:44:fc:61:96:78:79:62:96:5a:cd:
         f9:bd:a5:63:73:25:c5:ff:cf:8e:f4:fd:02:69:5d:8f:01:49:
         9e:41:33:74:a0:2d:5f:ee:c5:69:30:50:64:17:a0:f5:d9:92:
         1f:4e:d5:4d:c1:7b:91:61:13:bf:36:f0:18:82:7d:05:e9:38:
         8c:1e:bd:ec:a1:84:b1:95:7a:b7:2d:14:f7:ab:c4:00:e5:4c:
         70:b8:ed:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:45:39 2026 by rpki-client