Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
File:                     Y0JgC_HMkhaub-FpoenVQYrZOiI.mft (raw, json)
Hash identifier:          IRmGhmwYjunfY4qcO7MKcallTeDEM2DBS48IX47tUe8=
Subject key identifier:   94:D5:29:4B:62:04:28:40:E7:DE:52:94:C4:21:17:42:81:CF:7E:FC
Authority key identifier: 63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
Certificate issuer:       /CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Certificate serial:       019EC3370562FB96E8EDA3A4181B2AE956AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
Manifest number:          0F8C
Signing time:             Sat 13 Jun 2026 23:00:23 +0000
Manifest this update:     Sat 13 Jun 2026 23:00:23 +0000
Manifest next update:     Sun 14 Jun 2026 23:00:23 +0000
Files and hashes:         1: 51U34o8JYb8CQVhcBv2qFWgAPgs.roa (hash: xu3fMRX2q3+Mv4t+1E/L+4OKYLdaxsUvme7/Xi7jOeA=)
                          2: Naj_hbjSCfJxAXzUztYdICw-HJU.roa (hash: oHxNo2orkmmjEzObI45+SgF12BlHV9OAFLzlNY9SiB0=)
                          3: Y0JgC_HMkhaub-FpoenVQYrZOiI.crl (hash: JvXpcWlM4T18mzLzmsqXUsEMcRJknLFjyuUiCWUojmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:05:62:fb:96:e8:ed:a3:a4:18:1b:2a:e9:56:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
        Validity
            Not Before: Jun 13 23:00:23 2026 GMT
            Not After : Jun 14 23:00:23 2026 GMT
        Subject: CN=94d5294b62042840e7de5294c421174281cf7efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:87:e4:a9:56:74:ca:89:9d:50:c9:52:d0:4e:
                    01:ed:d8:84:17:04:41:e9:1a:f0:aa:a6:27:b4:96:
                    04:88:34:bf:d5:8f:b3:99:47:82:bd:a9:98:87:38:
                    be:6b:0e:69:f1:45:82:59:e3:93:55:96:41:b5:cf:
                    86:ff:51:0e:85:da:15:df:31:b0:ce:57:1b:d5:db:
                    42:0a:71:0c:0b:e6:95:8d:ad:47:0b:90:ee:e7:cd:
                    93:cf:b9:72:32:12:f4:b6:08:fe:08:d1:9a:b7:80:
                    f4:b6:61:ab:8d:1a:9a:c1:f6:40:03:12:9a:76:c5:
                    e4:ff:a1:4c:32:d7:dc:81:1d:ea:8b:11:10:a7:c1:
                    df:ef:e4:53:68:a4:09:06:ca:27:58:84:02:08:42:
                    6b:a5:e0:44:04:62:f7:52:39:95:07:bb:be:6e:c8:
                    dd:23:23:e0:f6:b7:c7:b2:43:21:29:1a:c0:1b:73:
                    b5:69:45:46:b9:06:87:a7:94:ba:1f:c6:bb:41:52:
                    d8:7c:72:ab:15:ef:ff:e5:2b:e2:45:62:c9:97:87:
                    f4:53:be:98:1a:44:be:f4:4b:d2:b6:8e:c0:d3:f0:
                    bc:2d:84:ea:d5:64:3e:e2:56:6d:4e:28:7e:d9:c4:
                    0e:3c:5d:28:4e:27:e0:b8:46:6e:5d:12:f9:03:72:
                    98:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D5:29:4B:62:04:28:40:E7:DE:52:94:C4:21:17:42:81:CF:7E:FC
            X509v3 Authority Key Identifier:
                keyid:63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:46:11:a1:94:00:c6:d5:bc:30:e6:0d:a1:36:e0:76:38:d6:
         41:9b:76:27:97:0e:05:14:ec:dd:b1:06:c2:9c:77:94:ee:13:
         70:ff:48:44:11:80:52:c7:19:b0:db:59:9c:2d:c6:0b:83:c8:
         11:eb:81:ad:d8:b2:3e:22:1e:d3:94:52:94:ae:4b:c3:37:f8:
         0d:fa:6e:2d:3f:e7:e6:04:19:15:12:72:bf:14:80:45:09:43:
         51:ce:ef:6f:6c:17:de:8f:99:ef:61:48:47:bb:b7:43:60:52:
         29:9e:aa:07:26:0a:02:a9:89:ca:83:53:32:13:dd:ff:f7:cd:
         09:04:52:32:d5:c9:e0:eb:cf:67:fa:1b:73:32:f9:cc:bd:72:
         05:f5:e4:95:bb:cd:e3:82:02:f8:e1:f6:0a:fc:4f:5e:43:17:
         f9:f3:49:87:1a:2b:04:9b:62:f2:45:d5:51:04:df:38:a1:44:
         33:e8:6f:81:63:33:b8:26:48:67:0b:f4:57:4e:84:c4:61:f7:
         ee:4d:f6:33:a0:b4:4b:38:69:c4:42:71:e5:63:45:90:68:fd:
         88:4b:9e:42:68:9e:a1:64:16:31:f1:b7:76:59:84:a5:da:e5:
         b9:e5:d2:7d:e6:40:c7:0d:3b:71:08:be:10:55:f2:40:71:9b:
         08:f0:f0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:41:06 2026 by rpki-client