Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
File:                     yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft (raw, json)
Hash identifier:          HwVUww6y0x9JEM06XCtlfVTvR9K+7V34yLBtyWdYKkA=
Subject key identifier:   52:BF:31:9D:2C:38:50:A4:98:76:36:03:A6:F5:A1:0F:6B:0C:56:00
Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
Certificate issuer:       /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Certificate serial:       019E1E36072E7DE60A761833FBD6246BC06D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
Manifest number:          0D60
Signing time:             Tue 12 May 2026 22:01:57 +0000
Manifest this update:     Tue 12 May 2026 22:01:57 +0000
Manifest next update:     Wed 13 May 2026 22:01:57 +0000
Files and hashes:         1: E2zzXQ54xG7WLQ4EAWvDS5mcEy4.roa (hash: 1CmVUeU/gi0IzJZ7FqgYWAYmrsykqbvWe2Uux9ESnfc=)
                          2: M16a-01DtEnUChbTQJhjr1Iefi0.roa (hash: MvFHVj8+o4PtyZlfLnoWLUlGFyHMzdje5B5jzpVV+ao=)
                          3: fYFb1Y-NrescEZS13kBhzxAZwCo.asa (hash: PK8fg+eevsgYRUzK5CVwRm3AD9wujkCIUbycGA1SZNY=)
                          4: yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl (hash: 7YaBgWfhrUaPwN6uMszSWn1IKfHBMCVybZ84k/p9YTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:36:07:2e:7d:e6:0a:76:18:33:fb:d6:24:6b:c0:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
        Validity
            Not Before: May 12 22:01:57 2026 GMT
            Not After : May 13 22:01:57 2026 GMT
        Subject: CN=52bf319d2c3850a498763603a6f5a10f6b0c5600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e3:a1:8e:2e:59:68:80:a0:e4:97:52:ac:42:
                    a2:7d:2f:0b:54:57:e7:2c:54:a7:10:04:d9:cf:9a:
                    b7:6a:21:75:65:e8:9a:b9:77:ae:b6:ab:11:01:32:
                    43:c5:0c:cf:81:f9:f7:d5:52:44:8f:69:2e:c2:a7:
                    4a:7c:36:38:aa:e6:27:c6:1d:c8:74:63:c0:92:33:
                    92:f0:94:09:ff:eb:43:ac:29:0f:61:e8:18:29:88:
                    50:39:f7:a2:6f:7b:7d:54:88:de:e6:8d:6f:bb:81:
                    6a:28:71:eb:2a:44:82:9f:a0:a3:70:d2:0a:61:da:
                    63:f3:67:07:92:fc:76:45:62:df:a8:de:c8:48:ea:
                    fe:86:2f:c8:f6:68:46:b8:45:fa:bd:a8:40:e0:28:
                    9f:a7:85:2b:65:4b:06:b4:70:0b:ff:52:2c:00:aa:
                    1a:54:6d:95:aa:41:75:e2:fc:74:c7:2e:6e:1e:36:
                    e1:01:f5:03:50:9a:69:84:0e:16:6a:3d:c6:1f:c1:
                    7c:ec:6a:98:64:7b:51:26:fa:b0:7e:72:cd:e6:67:
                    cd:05:32:0f:76:ff:f7:9b:aa:8b:bf:67:ef:9d:7a:
                    80:a7:1d:5a:6e:6b:79:64:fa:70:56:73:ff:3f:60:
                    42:a2:21:24:40:21:d5:c0:21:2d:7d:5c:9e:09:3f:
                    00:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BF:31:9D:2C:38:50:A4:98:76:36:03:A6:F5:A1:0F:6B:0C:56:00
            X509v3 Authority Key Identifier:
                keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:2b:59:96:6d:3a:5b:48:71:b3:b4:30:1d:16:56:e1:7d:2d:
         b2:58:b0:b0:4f:ce:a0:a7:66:84:b1:ff:6e:aa:8a:b0:ab:c4:
         e6:c4:68:56:3e:62:4b:90:5c:42:76:f6:e2:c2:78:a4:f9:e8:
         63:ec:e8:db:49:4e:a0:56:5a:e4:f8:0f:a0:a0:a3:c0:67:69:
         cf:7d:9c:c9:12:1b:1a:f3:a5:79:20:f2:be:e1:9a:dd:fb:2b:
         76:3f:58:0c:ff:e4:d8:2b:f4:18:38:8a:7b:6b:73:e0:e5:3c:
         7c:c4:3c:95:63:18:fa:1d:b6:5d:8e:65:db:8b:dc:53:f9:12:
         ea:aa:e8:6f:eb:e3:83:ad:ca:40:df:6e:d9:dd:b3:44:68:a5:
         b6:90:8a:bf:05:8b:05:ba:82:b4:be:66:1c:18:a0:58:f4:ed:
         82:63:ab:13:9a:6c:b5:11:ed:50:f1:a0:92:4d:82:b8:75:91:
         d8:b7:84:0d:c1:8f:d9:dc:92:41:11:72:56:71:b9:72:03:3b:
         70:bc:d7:79:52:f9:be:a3:32:9d:b8:bb:48:a0:12:81:ad:a4:
         1b:9c:e6:5c:c0:95:b1:d8:2e:87:c7:c6:ca:c3:80:20:4f:5f:
         5b:5e:da:0c:ed:27:4b:38:f0:38:13:7f:d2:45:d4:90:82:1e:
         5e:79:ab:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:52:43 2026 by rpki-client