Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
File:                     Y9nR2VwetxbugZUEWnfLohgdeew.mft (raw, json)
Hash identifier:          ckYwDIbBphZNAH9GwKHaN43dK4yI/3R1QfNbgGPR6mQ=
Subject key identifier:   64:D9:A6:4C:0D:45:7C:12:65:37:32:B0:13:EA:9F:C4:C4:72:1D:95
Authority key identifier: 63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
Certificate issuer:       /CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Certificate serial:       019EBFC81B07E6A4DD01337F2D5C0994452E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
Manifest number:          196D
Signing time:             Sat 13 Jun 2026 07:00:22 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:22 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:22 +0000
Files and hashes:         1: 4IporOiK6JktRpGESiSAAQpMF7U.roa (hash: lg+Ex4UPGBW/ZbBLSg9owvXX4yPCqEFw5/NmsjkdpGk=)
                          2: NkORSlpsNzTNf4Yu6bNI9qrV2xQ.asa (hash: wbUaskZvxVYhABFMYZHgXLXqscELVMuo7ua+/E/mtdY=)
                          3: Y9nR2VwetxbugZUEWnfLohgdeew.crl (hash: 7AmV5vC3qLy85WxCbTfo7N4xa7iHkBFHc5N0sVrocZc=)
                          4: fNxI3dXScPmMR3z1E-3FYKWMeS8.roa (hash: aphBfexzTqun+pqPzK9ahrBEriTPK5GbP96jBpZa6kw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:1b:07:e6:a4:dd:01:33:7f:2d:5c:09:94:45:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
        Validity
            Not Before: Jun 13 07:00:22 2026 GMT
            Not After : Jun 14 07:00:22 2026 GMT
        Subject: CN=64d9a64c0d457c12653732b013ea9fc4c4721d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:94:83:85:9f:36:9b:55:02:ea:5c:77:4b:c3:
                    fb:49:24:e8:02:a2:76:41:7c:84:e7:40:4f:bf:2a:
                    c2:8c:45:1f:c8:37:62:d4:fb:13:3a:ce:7a:a1:f4:
                    44:55:bf:b2:7a:48:e3:b4:05:1f:84:c2:c5:76:5b:
                    24:e1:47:20:ab:cc:a7:b5:2e:d2:3b:c3:3e:75:15:
                    10:9f:53:f2:8e:fb:8f:1a:e7:d2:bf:93:92:3e:fa:
                    1f:9c:84:d1:d0:47:52:ac:f8:d8:ac:b5:78:71:39:
                    f3:a5:ee:27:b1:ee:d8:b0:bd:da:b6:b4:f9:ae:d4:
                    c5:e9:e4:8e:9a:9f:94:22:17:e3:63:82:26:4c:e0:
                    5c:77:f1:08:39:05:4e:bf:51:80:8d:01:33:1f:d3:
                    5b:63:25:d5:70:98:cf:92:ed:ee:d3:cc:20:e4:5a:
                    14:a5:d3:20:93:1b:3b:8e:4d:67:7b:47:eb:9f:90:
                    b5:71:35:31:5c:d6:37:69:fc:86:bc:d9:57:1b:e9:
                    2c:7b:43:67:26:f5:62:2b:8c:d9:e8:dc:32:97:70:
                    b5:c2:4b:2c:5c:64:50:57:0a:ca:c2:dd:3c:5c:44:
                    ea:db:f9:54:fe:7a:be:dd:2a:da:2e:07:59:71:6a:
                    1e:5c:6e:bb:a9:8b:6a:ad:1a:d6:47:db:e2:9b:2a:
                    89:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D9:A6:4C:0D:45:7C:12:65:37:32:B0:13:EA:9F:C4:C4:72:1D:95
            X509v3 Authority Key Identifier:
                keyid:63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:62:0d:e1:23:54:8c:b8:02:ea:ee:55:6d:40:ec:e5:c6:1c:
         04:83:e3:22:37:74:1a:34:5c:14:87:67:b9:6e:1c:23:d7:ed:
         a3:34:83:b6:e1:0e:f9:5f:bd:61:d5:14:1c:05:ab:ae:d0:21:
         b6:03:f4:63:4d:e6:98:86:c8:47:ca:a5:e8:83:1d:58:0f:b0:
         ec:e1:d9:ae:b4:49:c3:b2:fc:76:df:f9:41:06:46:ea:9d:4c:
         90:44:3c:d5:1d:18:57:a3:30:6c:b3:d6:86:0a:92:e0:6b:a7:
         29:c9:01:0c:72:cc:91:76:9e:c0:cf:de:dd:79:c0:b3:3c:e5:
         fb:36:a5:41:85:fe:6b:32:a8:3d:2f:44:c4:d2:da:80:d3:17:
         c4:4e:2f:9d:d0:b5:41:ce:4c:69:e4:98:ea:49:77:51:ac:04:
         3e:a1:28:df:b5:31:0d:89:47:10:6e:c7:f9:ab:99:ae:f4:0a:
         aa:21:02:77:b6:48:43:24:81:5a:a5:25:9d:21:05:b4:9f:73:
         35:2f:69:dd:af:57:17:fc:d2:ea:79:82:7a:c9:4c:a9:ca:98:
         c5:da:60:9e:75:cd:37:b2:d1:60:a1:5f:3f:0a:cd:03:ed:e7:
         6d:11:7a:e8:2c:46:84:df:97:f4:e6:81:0b:88:5b:e0:fc:d8:
         93:86:f0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:04:55 2026 by rpki-client