Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
File:                     y9_OOlNV-GH9xIwyASx4ydr5paQ.mft (raw, json)
Hash identifier:          UrLkD6IgfbS7bKxAsiB1+og3y0YmNSGw5MUnnq3bxZg=
Subject key identifier:   33:57:71:DA:FB:04:07:87:B2:06:BA:97:92:00:9C:31:E4:DF:84:50
Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
Certificate issuer:       /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Certificate serial:       019EC2C9515E230BEA6EF2AC354C1D3DB940
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
Manifest number:          1954
Signing time:             Sat 13 Jun 2026 21:00:33 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:33 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:33 +0000
Files and hashes:         1: 0hZDbxJrYBFNWkvmSImZbnA7DGo.roa (hash: 57YJGR/yDb+wDZGdceoc2Xq+t08LwYTEo56m7ozgeUc=)
                          2: PTk-Qm4SRO2CGZKyMh3pPECOku4.roa (hash: iHUYxSng1eYpsnCjK8T+uznexsa7QiF4CgUQAgbQr4k=)
                          3: UmiyGlAKeVSGM9owvAHcbjgh7iE.roa (hash: 9qPTC4+fv8bleeF17R0jz4ih1d6GM3RKI4JmMBNNV6k=)
                          4: XKQ33UaszWr3UcKOxkCn_h2IO0g.roa (hash: u7DgA9+pxN/MkyUzWxvuGfSEIEQmvUWyH2yknFwZpng=)
                          5: wruoJGCkndyJjRWEP8IowcC6dp8.roa (hash: 7qigFPgc4Oa1kf4DmFoQRYwnWdqHGod1Ik5fQyi6ptA=)
                          6: y9_OOlNV-GH9xIwyASx4ydr5paQ.crl (hash: o97+2HZZah8ycihaQiZ+AtVgYCAT74xS/2HvCxeJ24Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 21:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:51:5e:23:0b:ea:6e:f2:ac:35:4c:1d:3d:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
        Validity
            Not Before: Jun 13 21:00:33 2026 GMT
            Not After : Jun 14 21:00:33 2026 GMT
        Subject: CN=335771dafb040787b206ba9792009c31e4df8450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:10:5a:95:05:2f:83:2c:93:6d:2d:10:f3:78:
                    35:c2:29:02:90:80:89:cd:48:93:a4:f9:72:41:e5:
                    a2:14:69:ac:22:13:fc:f2:88:1f:32:0e:a0:d7:68:
                    c3:41:55:d5:7b:1b:30:2f:65:bb:a3:4a:1f:9f:26:
                    bf:bc:af:a0:66:69:2b:38:fa:50:78:91:85:44:c3:
                    43:63:f6:bf:69:ce:f2:75:99:e5:5a:41:d5:b0:37:
                    e7:23:2b:d8:11:aa:f4:b7:23:12:a9:1d:9b:ad:4c:
                    b3:60:49:34:43:d5:c4:4c:77:f1:3b:68:dc:a7:5e:
                    1a:9b:cd:33:49:b0:b4:00:05:ae:18:16:d5:03:ef:
                    ef:44:e6:d4:95:05:56:76:16:58:51:d4:4b:bf:ac:
                    08:2d:9d:a4:b4:91:b6:d4:56:f1:3d:0b:78:41:c4:
                    2a:e1:fc:17:db:5f:96:4c:24:bd:ea:46:7b:31:21:
                    ee:dd:5c:a9:29:e2:71:35:0d:e3:45:9c:16:cc:be:
                    cd:88:55:8e:c3:10:18:0f:c1:e4:7d:d1:4d:d7:f2:
                    70:49:2e:bb:6f:57:92:86:90:3b:9e:83:91:72:c9:
                    40:b0:b4:ac:5c:a0:4a:ac:ba:15:c8:88:99:06:6c:
                    ac:44:80:03:e3:52:16:f0:02:dd:9b:bb:8e:19:c5:
                    f0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:57:71:DA:FB:04:07:87:B2:06:BA:97:92:00:9C:31:E4:DF:84:50
            X509v3 Authority Key Identifier:
                keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:7e:ea:a5:a4:44:b5:f2:43:18:9d:43:07:42:07:84:f3:d1:
         38:bc:37:d8:1e:0d:50:c4:1b:aa:75:8e:da:0d:03:a4:fa:f1:
         9c:48:30:58:13:00:63:94:02:10:98:49:4b:22:6a:95:b2:ef:
         bf:e6:f4:f2:fa:9d:6d:c1:03:1d:90:c8:25:d3:c3:38:a8:d3:
         ca:1b:29:46:6d:2b:8e:23:16:ad:46:cd:28:64:92:65:ed:60:
         43:63:4b:a7:5b:8a:c9:1e:a5:3f:ae:85:2b:1c:4e:2f:a8:e8:
         be:96:ac:c4:4f:73:8f:b0:35:a6:07:de:80:7f:7a:31:dd:57:
         65:b1:6b:bd:2f:62:a0:4d:03:df:15:e6:02:f1:80:7a:ed:51:
         c3:dd:4c:1f:16:d1:a1:b7:eb:67:76:3c:c8:62:aa:80:20:44:
         5d:32:af:3a:e2:c9:aa:1c:79:26:0b:03:60:7e:fb:3e:a0:ad:
         11:65:73:9c:7b:4a:24:be:9d:c8:3f:fd:3e:e2:e7:d0:6f:20:
         c2:c8:c4:99:0c:a7:ab:65:55:d2:1e:f2:d7:1a:48:22:5d:e5:
         c4:44:a6:77:a6:a8:3b:45:c3:f5:29:53:c5:cd:e7:b1:3f:ae:
         aa:03:2d:c5:5d:63:53:72:45:ae:4a:24:f7:df:41:41:94:a4:
         7f:37:20:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:08:51 2026 by rpki-client