Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
File:                     Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft (raw, json)
Hash identifier:          UhdaBE9GjH3L6sa8hQr1uJ8KnimYSi8rEUmxa8uOzQY=
Subject key identifier:   71:90:64:29:DF:57:A7:0F:2A:A1:A9:80:32:33:C5:C9:47:39:53:32
Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
Certificate issuer:       /CN=63a759b06e6fed03b0930749153fc16a12a501e0
Certificate serial:       019EBF91D52474D1E7604AB1A4641A6E51CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
Manifest number:          0A32
Signing time:             Sat 13 Jun 2026 06:01:05 +0000
Manifest this update:     Sat 13 Jun 2026 06:01:05 +0000
Manifest next update:     Sun 14 Jun 2026 06:01:05 +0000
Files and hashes:         1: OZwTEhhz89DG-d3VUUmj7RDclB0.roa (hash: VGKfh4SeFwSQNLUtXLKPpcLTHLslj6UGjADg7S741KI=)
                          2: Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl (hash: 42p8fGLK6JYOFjRplyaofSgSrQX8RaNByOO8/0jugrk=)
                          3: _cO3dPrIFou0SkBFKvSED_RiaEA.roa (hash: l5NyYi26dL87o5NLg8E85DjdFhJOd6MAl45991rZZ/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:d5:24:74:d1:e7:60:4a:b1:a4:64:1a:6e:51:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0
        Validity
            Not Before: Jun 13 06:01:05 2026 GMT
            Not After : Jun 14 06:01:05 2026 GMT
        Subject: CN=71906429df57a70f2aa1a9803233c5c947395332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f2:6a:7c:eb:6d:e0:fc:e2:36:d7:8a:50:bf:
                    20:5e:ea:60:2b:9d:fb:9f:18:0e:71:d9:bc:57:b8:
                    a5:53:f2:de:7d:8a:b4:d2:44:0d:24:6c:62:46:f7:
                    bf:9f:01:f0:00:98:d4:2f:ee:b2:f3:5f:8a:e6:d7:
                    91:c6:97:19:d1:43:e2:53:45:f2:8a:ec:2b:cd:aa:
                    dc:aa:60:3d:9f:2e:0c:f6:a2:34:f0:fd:6a:0c:d0:
                    5e:95:e6:80:42:62:c9:06:5a:fc:4b:5d:e1:fa:71:
                    96:b9:b8:f3:0d:d6:a7:fd:cf:50:88:8e:9f:79:95:
                    8a:ff:57:ea:9f:f1:fc:11:50:a2:8b:42:7f:e5:4b:
                    71:fb:65:82:ad:d6:74:d1:03:d2:a9:df:2a:d6:b5:
                    7d:fb:16:5c:dc:2f:67:1c:8c:b0:7a:40:3e:4a:96:
                    e6:6e:04:b0:b7:96:76:44:bd:92:37:94:9d:e4:6d:
                    5e:5e:fe:8a:f9:ac:94:d2:37:ea:49:eb:1d:cc:1e:
                    bb:be:af:39:8f:7c:c5:f3:c0:fc:9d:f7:0a:de:1c:
                    05:79:c4:b4:18:80:d3:d3:e3:89:ed:f7:14:3e:b7:
                    60:7a:87:e0:dd:c6:79:f8:ac:c1:5d:e7:bc:fd:aa:
                    1c:95:de:7a:27:e1:90:df:92:dd:48:45:55:0f:c9:
                    5b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:90:64:29:DF:57:A7:0F:2A:A1:A9:80:32:33:C5:C9:47:39:53:32
            X509v3 Authority Key Identifier:
                keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:43:2e:73:13:a0:08:af:a5:bd:c8:df:5b:95:53:83:e2:bc:
         2e:d7:c2:91:66:6d:ac:06:81:97:0c:b5:a4:a5:91:81:e9:7c:
         2a:12:c7:98:c3:c4:21:3c:cb:77:1c:ba:14:65:65:a4:e9:8e:
         60:e5:43:2c:66:8f:e1:bc:7c:dc:3a:2a:79:2d:14:4a:63:22:
         e6:2a:32:67:15:7a:1f:af:4e:dc:21:a5:58:6e:f8:66:3f:43:
         49:18:91:8a:a4:5e:57:a5:85:a3:e5:04:be:36:60:11:4e:cf:
         5d:cc:9c:eb:19:3f:16:ce:2d:3c:87:09:9c:52:35:81:23:47:
         f7:bf:f2:d8:24:b4:eb:b8:80:93:a3:2d:c0:14:31:42:fa:f4:
         48:48:84:b5:86:be:2e:a4:5b:e2:fa:8f:cc:aa:99:19:3e:45:
         ef:76:45:29:79:8d:06:aa:79:27:3a:dd:cd:e8:02:b3:f2:af:
         17:ee:39:e9:18:fe:4e:e8:29:4c:be:be:dc:46:5d:1c:a0:45:
         95:ed:e4:b6:1b:fb:57:11:e6:d5:40:75:d2:e8:09:b6:04:3c:
         b9:35:cb:db:0e:ec:95:c6:ac:af:8d:58:58:0d:e4:65:34:03:
         48:11:0c:4f:9c:45:b2:6c:46:49:af:93:49:80:c6:4d:ed:74:
         9b:b0:7b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:31:02 2026 by rpki-client