Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
File:                     YbU0Q3UDZogVrdk80X0K0-GxqHc.mft (raw, json)
Hash identifier:          Q+IdQMXu6G5XK4GywDV3g4V1rdKI0uTvbp/Sjjvedcc=
Subject key identifier:   30:D8:43:E6:E2:92:76:AA:88:AF:DC:47:50:0C:E0:A6:0C:E9:1C:5E
Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
Certificate issuer:       /CN=61b534437503668815add93cd17d0ad3e1b1a877
Certificate serial:       019EC2923A17944783AA20238617457285D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
Manifest number:          1970
Signing time:             Sat 13 Jun 2026 20:00:23 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:23 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:23 +0000
Files and hashes:         1: 2v3v91RFQjN6l9mWptJO680RMkc.roa (hash: JpKAIgf5dUOG27b3V6ypmirRGf/czS7D9Bc0AguM208=)
                          2: 7eIzHvINnFqHZBOWvru0J6FjDb8.roa (hash: Dv2FZyAGPdsQN62gOmL7jMpfdjwxeMKFTL1oAf/BKfc=)
                          3: 8l0-rbUJJ5yl_F5t1WGOySUsQOI.roa (hash: 065Qj+kRYJW5mj1KN/1Un/hhPcBtSTaJS6BwFg5mPWw=)
                          4: QTFye-32ZtubZYZVN0cCrwUzz_s.roa (hash: Ou06XDdFUhQ2dykgxmyAA0EVBWVZBiN7PQ/FvfPl2a0=)
                          5: UsJrUy2UuzGGDnQa-en_vet84IU.roa (hash: anygphX/NHAj2pg72RtTsBDk/dlZBM2mWyxRgOxxXzo=)
                          6: YbU0Q3UDZogVrdk80X0K0-GxqHc.crl (hash: qeB4+7hDPukGIvNQo7VtKgO4OsLaAN0YOQ3dMmMYhJo=)
                          7: o2wMPqpUwKK3k92hqD5HvK3oiiI.roa (hash: 0YGmH3GBpSNDcIwjVr7t8Bv7qy4ZPt0Vk2HKaZcbgtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:3a:17:94:47:83:aa:20:23:86:17:45:72:85:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877
        Validity
            Not Before: Jun 13 20:00:23 2026 GMT
            Not After : Jun 14 20:00:23 2026 GMT
        Subject: CN=30d843e6e29276aa88afdc47500ce0a60ce91c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a4:30:21:aa:32:c8:ee:2f:cf:c9:37:fd:70:
                    8f:6e:64:57:f5:b8:8e:1b:3e:2c:a2:21:99:1d:4b:
                    ca:00:6f:87:e1:32:92:9f:03:11:15:d2:57:04:a9:
                    01:1f:dd:58:04:78:ba:7b:6a:9f:38:29:43:7e:48:
                    27:16:8b:5e:eb:35:fd:3c:93:3a:d9:2a:8e:e2:da:
                    1e:e0:13:c0:02:2f:a7:4b:ca:c0:82:ae:58:a0:8f:
                    15:06:9e:2d:fc:9b:95:2f:83:5a:7f:63:c1:49:e9:
                    53:48:b8:ab:a7:6d:26:72:23:08:f3:86:4c:22:bb:
                    df:ee:d6:0b:c4:de:85:ca:72:ac:94:53:8c:a0:79:
                    2c:fb:f9:84:a0:2a:bd:72:c9:3c:81:3c:ff:1c:c4:
                    c3:a7:c9:f4:7e:59:65:c1:33:7c:e3:c9:00:6f:dc:
                    5b:e2:b2:d0:33:f5:a0:ad:6f:29:a4:05:b0:9b:3d:
                    61:0a:04:bc:a7:9d:43:c1:d2:b2:ba:2b:88:dc:98:
                    33:65:58:78:fd:4f:d6:d1:1d:01:f5:72:93:b5:00:
                    9b:49:cf:5f:fb:53:46:75:90:eb:f4:8b:e8:e6:43:
                    c2:ae:1e:07:2a:e3:32:d4:5f:55:b2:22:96:38:7c:
                    4f:15:1f:b2:68:0d:f9:84:94:63:08:0b:6c:c3:bc:
                    57:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D8:43:E6:E2:92:76:AA:88:AF:DC:47:50:0C:E0:A6:0C:E9:1C:5E
            X509v3 Authority Key Identifier:
                keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:40:4d:00:65:38:87:8f:95:a2:00:db:52:9d:fb:cf:14:3e:
         0a:9c:a6:c6:d3:4d:e7:d3:bc:dc:56:1d:67:19:21:3f:62:95:
         1d:aa:42:bd:d2:83:8c:6a:f4:e0:fc:57:07:98:77:c7:9f:28:
         7b:85:43:d2:8e:ad:ab:e4:b8:30:85:ee:e6:4b:4c:53:c0:f0:
         53:66:3c:3a:4d:aa:7b:74:46:40:5c:02:43:10:1d:5d:78:be:
         72:ef:06:01:2c:a3:9d:11:66:82:16:99:39:60:e9:2a:89:90:
         cc:d5:66:85:ea:b3:d3:51:98:75:fb:8f:5d:c6:cb:b8:73:d3:
         9d:c4:e7:aa:c3:ca:98:76:f7:b8:f5:f6:5b:ff:fd:e3:33:47:
         f7:04:ce:02:a0:57:97:6b:0e:1e:d4:11:88:49:5f:7f:cb:2e:
         24:81:e4:eb:03:53:62:3e:02:a8:9f:30:4a:f8:2a:aa:44:d8:
         28:fa:bc:8a:17:24:70:1a:87:e4:6f:ed:da:5f:62:49:70:54:
         b0:7c:87:70:df:02:86:d7:08:53:3b:76:53:69:b2:e8:46:72:
         a8:5e:4a:d8:1c:92:e6:c7:83:95:39:77:27:48:e6:87:64:a5:
         e0:20:ce:4b:12:34:c5:b3:aa:cb:1e:3e:83:a7:54:53:7e:e8:
         74:aa:df:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:14:49 2026 by rpki-client