Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File:                     Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier:          DxHyzwHTyl1tTtAprPD2osRMa+SDTi26sjndTA1pBHk=
Subject key identifier:   1D:7D:9D:5F:34:B7:C3:86:76:F8:A4:8D:FF:4F:46:F8:C2:F9:6A:B8
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer:       /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial:       019EBFFF9AA27AB3EA6D98A8CEE207F4362D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number:          0833
Signing time:             Sat 13 Jun 2026 08:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:59 +0000
Files and hashes:         1: 6ZBPRGxMRhzUL39PVDVSduo6FUc.roa (hash: mXhPY8g7CrKLHAIlSEURMCEabcnrrTvn2LVrA4zymb8=)
                          2: B0WU8sYjxbF2I99DOG4CZtJFemU.roa (hash: kZf8Vi7lYB4Gl+U+zxW5wY6bn3f+hQC1mSLMVib18Xg=)
                          3: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: 9/jC8fAAO2ErO/tsYyOjv/kpSDa+i4nHjXdDzPtu294=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:9a:a2:7a:b3:ea:6d:98:a8:ce:e2:07:f4:36:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
        Validity
            Not Before: Jun 13 08:00:59 2026 GMT
            Not After : Jun 14 08:00:59 2026 GMT
        Subject: CN=1d7d9d5f34b7c38676f8a48dff4f46f8c2f96ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:37:a0:cc:02:ae:48:f1:67:7c:15:24:fe:
                    b7:89:1e:c3:0b:1c:fb:94:9a:9e:8d:f7:d8:3e:7f:
                    bd:66:dd:57:d1:64:f3:b2:de:c4:60:8f:28:9f:19:
                    69:4f:d3:ed:11:1f:e6:4d:59:13:95:77:16:b0:48:
                    02:a9:9a:18:3b:0e:32:da:90:d3:85:19:a6:ba:7b:
                    b8:b1:31:5b:20:fa:90:b7:2e:f5:e6:dd:46:36:11:
                    50:a7:86:47:84:16:bb:7b:c0:3d:8d:3b:4f:b5:ca:
                    e7:0e:e9:17:57:9f:f7:05:97:5b:90:a1:ca:25:b3:
                    7d:f4:59:69:26:d8:69:ad:bb:7d:e3:aa:56:8e:3f:
                    ac:84:43:76:0d:02:30:44:85:26:e7:ec:eb:45:19:
                    35:32:10:a8:01:01:0c:02:7f:8d:a6:1c:02:a1:38:
                    12:a4:69:55:73:16:d8:54:8d:9b:a0:16:e6:2d:e5:
                    c4:b5:c3:f5:0e:71:dd:01:ba:bb:14:e6:51:fa:23:
                    3f:46:0a:67:5a:02:f6:42:ed:61:a4:3d:82:43:d4:
                    c7:c3:84:38:24:4b:68:e1:81:07:16:9a:58:2f:bf:
                    e9:99:be:77:07:68:f5:40:c1:c6:b9:ad:61:ab:ce:
                    a7:08:e1:03:19:ce:f7:2f:3a:12:5c:8a:b2:c7:df:
                    bf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7D:9D:5F:34:B7:C3:86:76:F8:A4:8D:FF:4F:46:F8:C2:F9:6A:B8
            X509v3 Authority Key Identifier:
                keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:1c:20:4f:f9:91:c6:89:17:b9:c1:e3:ea:ef:be:d9:0d:80:
         ff:06:73:c2:88:01:ad:2d:fa:72:23:2d:13:d9:bb:86:be:9b:
         b4:68:9c:7f:98:da:4d:34:2b:d8:58:19:12:f6:69:28:39:e6:
         1e:94:59:9b:2e:e8:16:4f:51:36:20:8d:74:5e:67:06:55:96:
         cc:fe:3d:1c:71:d8:19:8d:71:d5:d7:c1:cc:01:3d:0f:d9:8d:
         ac:65:41:29:ad:7e:1b:f9:70:db:78:9c:ad:bd:00:fb:1d:b1:
         ce:ba:83:6c:b8:23:9f:e5:8e:40:9f:fe:e9:3c:70:2e:a8:07:
         39:7c:11:7c:f7:61:1b:7c:ca:8b:5e:e7:99:57:ef:47:d0:9c:
         ab:d5:3a:26:cd:ba:b2:f9:c4:b5:89:33:0f:d2:6c:88:aa:b1:
         99:42:35:79:56:7e:1d:48:0d:09:4e:10:36:a1:d0:15:38:f8:
         5e:89:8a:51:26:b7:96:39:51:b7:24:54:51:8d:12:93:b4:4d:
         d1:85:cc:88:d8:25:d6:52:2a:94:b8:fb:6f:0a:fd:4d:c9:8f:
         67:05:d7:a7:a1:d9:b3:41:cc:37:3c:82:61:a4:c3:a9:fb:8b:
         97:bd:65:e0:35:ea:12:72:19:7a:10:f1:c9:1e:62:80:3a:53:
         1e:c3:c9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:34:03 2026 by rpki-client