Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
File:                     bYvF0sabkWFcyibbtupwV3A24m0.mft (raw, json)
Hash identifier:          ujQH2QQugh2ez1R/rkCw3afoGFiPQIGbQfSBRtolKww=
Subject key identifier:   A4:B6:82:8E:CC:6D:91:A9:BA:FD:77:1E:FB:13:B2:7B:44:AC:DB:A6
Authority key identifier: 6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D
Certificate issuer:       /CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
Certificate serial:       019EC4133EEDC7FAEAA07376210B849C7B25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
Manifest number:          1127
Signing time:             Sun 14 Jun 2026 03:00:56 +0000
Manifest this update:     Sun 14 Jun 2026 03:00:56 +0000
Manifest next update:     Mon 15 Jun 2026 03:00:56 +0000
Files and hashes:         1: bYvF0sabkWFcyibbtupwV3A24m0.crl (hash: dOLinDZvw8F1q5pIaPZMGHMQwA29Ahc6D5UQwomoxkg=)
                          2: iNHmZBm96p22r1v1NNf0vUA5CNU.roa (hash: W3eGIa/whnFHaDnHwnO2+GYR1xjT6RdNQB1XA+AY4TQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:13:3e:ed:c7:fa:ea:a0:73:76:21:0b:84:9c:7b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
        Validity
            Not Before: Jun 14 03:00:56 2026 GMT
            Not After : Jun 15 03:00:56 2026 GMT
        Subject: CN=a4b6828ecc6d91a9bafd771efb13b27b44acdba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:79:45:7b:d9:3a:84:ef:86:f8:21:22:fe:fd:
                    ed:a0:b1:45:30:2e:bd:f8:9d:eb:82:2f:54:77:fe:
                    ac:32:7d:52:21:2a:28:88:ea:5e:1e:75:ae:f6:7e:
                    fd:47:95:f2:35:65:fd:3e:7d:6b:1f:c7:d3:5d:fc:
                    b0:af:0d:58:1d:8d:93:a8:62:96:52:9f:92:f5:85:
                    d4:b3:3d:40:85:46:df:32:4d:e2:4e:1b:c1:77:2c:
                    c8:5f:7a:ea:65:b2:5e:bf:bd:84:96:a7:69:b5:bf:
                    c4:54:a3:02:3c:03:86:03:8f:02:eb:8c:d4:f5:88:
                    29:98:0d:1f:2c:8f:09:0b:ac:a3:a1:e5:ad:ef:12:
                    bf:6d:4f:2d:1b:22:6b:3e:d4:7a:ec:77:fb:4c:69:
                    38:4e:72:72:88:4a:63:73:35:d8:e6:a1:c3:74:dc:
                    d1:a6:5c:d1:cb:1e:46:e1:61:96:1e:19:6f:4a:0b:
                    8f:f5:5e:86:9b:43:eb:cb:52:79:6b:bd:5c:e4:e2:
                    d8:85:4c:d6:8b:e0:fd:7c:bf:7c:32:61:0d:43:44:
                    0c:16:99:f8:41:08:cb:0b:45:08:29:6b:00:77:a7:
                    82:44:98:f6:a7:9f:a6:e4:85:91:ce:83:66:02:a3:
                    d5:27:6c:c1:0b:02:df:68:bd:cc:27:4a:ca:bd:69:
                    c4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B6:82:8E:CC:6D:91:A9:BA:FD:77:1E:FB:13:B2:7B:44:AC:DB:A6
            X509v3 Authority Key Identifier:
                keyid:6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:04:d7:04:e1:ef:e1:26:35:a9:b9:14:d7:23:44:f5:e5:5e:
         68:75:87:e7:8f:92:52:49:34:c8:67:98:1d:a0:ed:02:37:0b:
         6f:b8:b9:ad:f9:f8:e5:55:f8:25:af:63:9a:0e:ab:c3:76:31:
         94:a1:3b:ed:9d:fc:41:4f:f6:72:0f:2f:13:75:27:ea:e1:50:
         7c:82:b0:6c:fb:d8:48:8a:f0:15:67:49:eb:c1:4f:e1:b9:e1:
         61:9d:93:13:05:5c:6c:e2:e0:7a:e2:f9:bc:58:e9:a1:8d:4e:
         7b:05:c3:a5:0d:d9:68:09:90:6e:52:9f:8e:c6:71:03:00:e2:
         27:9f:4f:81:3a:3e:41:97:2b:c6:71:26:bb:f6:85:70:81:eb:
         48:95:3c:34:cd:59:46:8e:2e:f3:56:1a:17:dd:41:16:90:c3:
         b5:18:c2:03:78:6e:54:6c:af:13:08:0c:6c:b4:b7:d5:ea:af:
         ad:d8:41:63:8a:8d:05:8d:c6:2c:b0:23:17:89:6b:25:c8:f9:
         4a:68:0d:78:e0:4b:b3:4e:f0:b4:08:f1:cb:3e:cb:3a:ac:4f:
         89:78:08:1f:06:b1:9f:76:8d:0c:e2:f5:73:0d:d8:97:50:8e:
         33:cf:0e:66:a4:c8:af:86:02:d9:98:09:b7:09:0f:3c:f5:72:
         fe:78:51:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:38:45 2026 by rpki-client