Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
File:                     ylmb3Bz8eujML7oV_NgMoRc3hGc.mft (raw, json)
Hash identifier:          pkkeaUlZ8ShB28c0D+Pd4l6WCEGCnygpFjQ37Aorz8U=
Subject key identifier:   EC:51:5D:2F:4A:4C:6B:4D:63:43:C7:9E:75:E5:3F:37:FD:50:EC:44
Authority key identifier: CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67
Certificate issuer:       /CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
Certificate serial:       019EC1EDF14807B677EC059638D0FC9EC980
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
Manifest number:          0573
Signing time:             Sat 13 Jun 2026 17:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 17:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 17:00:56 +0000
Files and hashes:         1: hLDJZ-V17lQ1uYy4Yb_7EyNt5EY.roa (hash: 0stvy4uT+ZzDa9Ceq2lwui9WwwpxCgyyC5wsX5cUjjE=)
                          2: ylmb3Bz8eujML7oV_NgMoRc3hGc.crl (hash: UeEsm4rNKc71YzDS8nVE/zlKKHKLjV2T94mowDwH3XI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ed:f1:48:07:b6:77:ec:05:96:38:d0:fc:9e:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
        Validity
            Not Before: Jun 13 17:00:56 2026 GMT
            Not After : Jun 14 17:00:56 2026 GMT
        Subject: CN=ec515d2f4a4c6b4d6343c79e75e53f37fd50ec44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:07:1a:63:05:d8:50:0e:e7:88:14:67:87:
                    96:e6:dd:66:c5:11:a5:e9:3e:23:6b:91:b9:3d:2e:
                    75:3f:62:80:f1:98:2d:0a:9b:ce:72:ff:26:4a:80:
                    5b:f0:e4:f5:11:8a:4f:fa:65:54:00:dc:fb:c1:8b:
                    23:5d:4c:07:0a:11:3d:a7:a1:34:d6:5f:f9:98:36:
                    bd:07:f7:52:93:a4:2a:a0:30:89:cd:9a:d2:15:a2:
                    90:95:b4:09:a1:c4:cd:9a:ea:f5:dc:83:b4:64:f0:
                    13:3d:d5:af:8c:39:33:ef:b6:85:27:6b:d2:86:0f:
                    80:da:f0:75:e3:b1:b5:67:3a:e0:1c:a8:dc:4e:55:
                    bd:0e:0e:ac:35:89:fc:23:13:93:cd:a5:49:13:87:
                    85:c5:45:c1:b2:57:f9:4d:26:76:bd:7b:a0:31:3a:
                    58:3a:2a:50:d7:dd:48:7b:6b:4d:84:20:e0:26:0e:
                    82:9d:33:11:ba:00:c6:b7:f1:f3:29:ae:ac:51:8a:
                    9b:11:cd:4f:a7:23:91:f6:7a:62:ad:d5:7a:0b:a2:
                    4d:69:91:2c:77:3b:9e:20:49:df:5b:c4:18:8b:0c:
                    fa:d8:3b:74:74:30:17:b2:ed:b0:d0:4d:b1:34:80:
                    3c:82:7e:5d:58:89:b8:0d:3a:cf:ec:9a:f3:c0:0c:
                    de:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:51:5D:2F:4A:4C:6B:4D:63:43:C7:9E:75:E5:3F:37:FD:50:EC:44
            X509v3 Authority Key Identifier:
                keyid:CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:99:05:05:b2:13:a9:93:4b:12:1c:fd:1b:79:f6:97:b2:b5:
         cb:34:b4:60:3e:2d:8a:ee:05:c2:47:e1:f7:60:cf:a5:41:ea:
         0c:58:37:7d:39:0c:96:a6:fb:c2:f8:d5:ca:9d:20:70:85:93:
         1b:8d:5d:ea:d5:bb:26:44:6c:74:71:bf:ab:97:72:d3:39:a3:
         e2:a3:72:62:0f:21:81:2f:97:6f:ea:b7:9d:8a:c8:f8:ec:86:
         f0:7d:da:63:81:4d:c9:af:43:e8:1d:a3:3e:68:3c:e1:59:ce:
         79:1c:22:d2:d7:3a:f8:8c:ee:31:e5:23:b9:b7:c6:6c:31:0d:
         b7:e3:3e:09:74:36:ff:5e:3f:4b:ef:8c:18:e7:6f:a1:24:74:
         a6:4e:eb:7a:84:38:1f:9b:ce:53:29:1e:7e:ba:d9:5b:03:05:
         e4:54:8f:c5:f0:09:18:26:55:10:e9:cf:f8:73:7f:47:a0:ea:
         f4:98:45:ae:42:14:bb:ad:74:c1:79:cb:09:a5:30:fa:48:f9:
         1c:6f:c0:cd:75:3a:f8:f7:65:c9:4c:4e:87:d8:67:05:a2:9f:
         06:25:d8:76:5c:82:45:8c:d1:ba:c1:2d:c0:1d:c3:c4:48:27:
         0d:62:86:ee:27:aa:02:91:38:16:ed:94:c3:ec:61:f4:82:a6:
         f3:0b:19:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:57:10 2026 by rpki-client