Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
File:                     yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft (raw, json)
Hash identifier:          bTK47x/nmwbkXsjpVdKPu2FqL+x+1jmDItk3Y0Bcno4=
Subject key identifier:   D4:23:51:C0:65:63:F5:60:A2:90:54:CB:C9:C4:EE:8E:9A:81:64:FB
Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
Certificate issuer:       /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Certificate serial:       019EC06D88B8CDBE77653A7AFC008FABA305
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
Manifest number:          0DB4
Signing time:             Sat 13 Jun 2026 10:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:04 +0000
Files and hashes:         1: E2zzXQ54xG7WLQ4EAWvDS5mcEy4.roa (hash: 1CmVUeU/gi0IzJZ7FqgYWAYmrsykqbvWe2Uux9ESnfc=)
                          2: M16a-01DtEnUChbTQJhjr1Iefi0.roa (hash: MvFHVj8+o4PtyZlfLnoWLUlGFyHMzdje5B5jzpVV+ao=)
                          3: fYFb1Y-NrescEZS13kBhzxAZwCo.asa (hash: PK8fg+eevsgYRUzK5CVwRm3AD9wujkCIUbycGA1SZNY=)
                          4: yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl (hash: yMFAcaXFwUmvVPhI21HadQlm+sbF7IT04Kg7vTm5sX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:88:b8:cd:be:77:65:3a:7a:fc:00:8f:ab:a3:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
        Validity
            Not Before: Jun 13 10:01:04 2026 GMT
            Not After : Jun 14 10:01:04 2026 GMT
        Subject: CN=d42351c06563f560a29054cbc9c4ee8e9a8164fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8b:bd:86:86:d1:76:8e:bc:a0:7d:dc:b1:4d:
                    85:e9:cb:5d:f3:80:42:17:c4:40:c3:9e:eb:be:ac:
                    a7:28:ff:ab:54:cc:71:74:5e:53:de:19:e8:72:b7:
                    cc:8e:24:4e:74:b7:5a:8d:03:e0:1f:20:20:04:74:
                    b8:49:14:29:c9:d0:35:11:fe:d8:74:f4:d4:ee:d8:
                    16:4f:1b:6b:97:06:5a:84:9e:ae:5f:6a:ad:97:d3:
                    51:e7:4b:24:db:41:76:86:8d:a8:3d:c8:91:19:9c:
                    78:ca:2a:7f:6b:41:97:54:a5:80:4e:8e:c0:f1:c4:
                    1a:db:3d:ae:f6:02:ab:14:8a:2d:45:d5:e9:da:fd:
                    a1:63:c3:82:a6:47:79:a6:44:36:c0:1f:7a:67:99:
                    ae:0e:d6:d9:d0:c8:29:a7:25:4f:86:50:3e:a4:dc:
                    00:b1:d7:94:12:3e:7e:65:3c:d9:95:d2:4c:70:b6:
                    3c:44:58:96:d8:8f:6c:6b:ad:94:bb:07:9f:09:8b:
                    fd:9d:12:6a:dc:24:50:1f:d8:d4:e4:de:68:e5:54:
                    93:f1:36:e8:ee:e7:41:c7:74:97:db:eb:55:07:52:
                    67:c3:4c:71:0a:92:2c:21:0b:6a:06:94:71:ba:d3:
                    20:e9:d2:e0:7b:9f:e9:40:13:cd:ab:63:3b:15:e6:
                    66:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:23:51:C0:65:63:F5:60:A2:90:54:CB:C9:C4:EE:8E:9A:81:64:FB
            X509v3 Authority Key Identifier:
                keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:c4:55:be:61:95:a7:f0:8b:ba:a7:cb:25:dd:d2:a8:ad:1a:
         ea:89:f4:7c:c1:77:ab:ee:da:8a:1d:93:bf:02:d3:f3:70:a8:
         d5:14:87:2d:38:82:42:7f:b7:fd:79:95:e1:cb:72:85:3b:5f:
         33:30:32:5b:89:5c:84:f0:e6:a1:68:30:33:55:5d:36:2c:13:
         02:2d:15:88:aa:4a:6a:f9:c4:48:17:e8:78:52:8f:c4:86:72:
         f2:35:85:7c:42:e7:bc:5a:33:37:20:a0:e3:62:03:8d:93:52:
         4b:f5:99:d4:a2:e0:43:d2:ef:57:6a:db:ee:f8:55:b6:41:76:
         bb:8f:75:ed:88:9a:02:2f:01:5e:cf:72:29:64:87:e2:5e:26:
         2c:cc:ae:b8:da:e2:ec:5d:49:a7:11:7a:fb:ba:6d:ed:68:e8:
         d7:9a:a8:ca:1c:a9:5b:ba:d5:91:21:d8:a2:87:b5:21:66:d8:
         5a:ff:ee:15:a6:4d:56:c2:5a:ab:ce:8d:4b:9d:66:5b:73:28:
         b8:61:f8:97:57:3d:d7:2d:a1:35:7e:06:d7:8c:32:e9:3e:ab:
         44:66:c3:44:18:a0:47:aa:ec:0e:ec:d1:75:41:c9:98:4c:38:
         fc:46:7a:b6:db:c2:b3:2b:c8:8e:b1:d9:a8:91:9d:6a:b8:80:
         5a:39:d9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:29:32 2026 by rpki-client