Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
File:                     Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft (raw, json)
Hash identifier:          OVDTs58GblazBptxVFXfiGgRrjsfonaoTlTgROwGufo=
Subject key identifier:   6F:C5:AD:67:1A:C0:06:C9:55:AE:53:3A:00:7D:FB:DE:B0:1A:84:86
Authority key identifier: 63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
Certificate issuer:       /CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Certificate serial:       019ED3192859865AC1A36EBADA275F4F2467
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
Manifest number:          0F65
Signing time:             Wed 17 Jun 2026 01:01:41 +0000
Manifest this update:     Wed 17 Jun 2026 01:01:41 +0000
Manifest next update:     Thu 18 Jun 2026 01:01:41 +0000
Files and hashes:         1: LDt7gaxmt08mgFC-M4WkB6Rh2M4.roa (hash: GmZKtwbYE0ZQZpsBSkP4BAk8kkV/eLe4GNjMQ2lsJKY=)
                          2: Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl (hash: Wzd303vUb7rbquF5Y7S63FBm+c42t8lBv2YNFhTVVJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 01:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:19:28:59:86:5a:c1:a3:6e:ba:da:27:5f:4f:24:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
        Validity
            Not Before: Jun 17 01:01:41 2026 GMT
            Not After : Jun 18 01:01:41 2026 GMT
        Subject: CN=6fc5ad671ac006c955ae533a007dfbdeb01a8486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5f:33:13:9b:3a:51:1c:43:8a:5f:b2:27:50:
                    87:45:02:23:cc:6e:92:b0:ed:ad:b4:86:3a:32:08:
                    49:5c:7f:db:ed:5d:cc:1a:3e:3a:ce:cb:a9:6a:27:
                    42:30:7b:fd:94:d7:57:7c:12:fd:01:5d:74:76:2d:
                    b4:94:6e:f0:e2:24:18:e3:f3:31:73:d1:de:22:a5:
                    49:98:1c:2b:1d:1e:57:a1:53:5e:f9:fa:ab:c4:c0:
                    43:e9:4a:bc:c6:a2:e2:ee:27:0e:9d:66:12:34:61:
                    73:42:19:f9:eb:d3:49:67:b6:cb:71:b3:55:a6:2a:
                    e0:bf:4b:fc:f5:6d:68:b1:d0:7a:a6:fc:d2:a3:89:
                    4c:d8:3a:ec:86:38:4b:cb:4d:d1:cb:c6:e6:17:bf:
                    c8:18:d6:09:34:fa:69:b2:bc:41:b3:16:5f:47:28:
                    ed:53:c8:8c:48:f2:43:6b:0b:af:d9:89:18:9b:a1:
                    83:8d:a3:38:23:3e:26:62:2e:f2:7f:e9:f4:73:4a:
                    80:f0:d4:03:6c:69:57:05:10:8a:95:f6:9d:b8:96:
                    51:c6:26:06:e2:2c:54:7b:69:9c:14:5f:38:d4:33:
                    4d:35:14:42:47:6f:4f:12:78:33:a2:71:9f:bf:a6:
                    62:46:fa:37:4e:60:fe:f3:e8:51:a2:eb:a1:11:07:
                    6e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C5:AD:67:1A:C0:06:C9:55:AE:53:3A:00:7D:FB:DE:B0:1A:84:86
            X509v3 Authority Key Identifier:
                keyid:63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:04:0b:5f:7c:e7:8d:97:b4:70:c1:86:41:7c:b4:a6:3e:9e:
         51:d7:c7:f8:c0:1e:ac:1d:2a:71:d3:08:de:59:b6:82:ad:8b:
         0c:2a:6b:19:4b:6e:c3:b0:4d:ba:c4:af:6b:c5:d9:be:81:3f:
         32:cc:03:b9:c3:d3:fe:b2:fb:6d:f3:d9:ca:e1:0a:d7:a3:64:
         f6:8b:7a:aa:b4:25:21:af:19:76:9c:c8:43:e3:d0:d1:2c:ad:
         8d:7d:77:35:dc:5a:bf:1c:e5:cc:83:f3:d9:6e:5d:85:b5:17:
         68:c6:d8:3e:2d:0a:93:02:d9:41:ef:fa:b9:09:1d:b2:fd:90:
         18:5d:3f:d7:c4:8a:b1:fc:0c:a6:be:56:6b:8c:77:a4:84:b4:
         1f:41:52:38:18:58:68:a9:d6:aa:24:a4:6b:58:49:bb:f8:f9:
         c6:00:2b:33:ef:87:91:de:02:56:89:a1:f7:d9:63:5f:27:96:
         6d:33:3b:7a:11:12:0a:31:75:2a:8f:be:b1:a6:f3:1f:80:0b:
         5a:1f:10:8b:a7:a7:1f:78:8f:12:ae:a8:9e:3c:d1:f3:1e:64:
         18:72:77:ed:7c:29:48:dd:68:71:fe:32:f0:d9:47:5c:f4:ea:
         2a:4f:c4:6b:80:17:76:cb:25:53:b5:49:ce:0a:64:10:1b:14:
         99:0d:de:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7TGShZhlrBo2662idfTyRnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZmFhYzI5YjkwNTM0ZjkxYTlmYjBlYjYzMThmMDAxOTQ1
MWM2ZWUwHhcNMjYwNjE3MDEwMTQxWhcNMjYwNjE4MDEwMTQxWjAzMTEwLwYDVQQD
Eyg2ZmM1YWQ2NzFhYzAwNmM5NTVhZTUzM2EwMDdkZmJkZWIwMWE4NDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz18zE5s6URxDil+yJ1CHRQIjzG6S
sO2ttIY6MghJXH/b7V3MGj46zsupaidCMHv9lNdXfBL9AV10di20lG7w4iQY4/Mx
c9HeIqVJmBwrHR5XoVNe+fqrxMBD6Uq8xqLi7icOnWYSNGFzQhn569NJZ7bLcbNV
pirgv0v89W1osdB6pvzSo4lM2DrshjhLy03Ry8bmF7/IGNYJNPppsrxBsxZfRyjt
U8iMSPJDawuv2YkYm6GDjaM4Iz4mYi7yf+n0c0qA8NQDbGlXBRCKlfaduJZRxiYG
4ixUe2mcFF841DNNNRRCR29PEngzonGfv6ZiRvo3TmD+8+hRouuhEQduVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/FrWcawAbJVa5TOgB9+96wGoSGMB8GA1UdIwQY
MBaAFGP6rCm5BTT5Gp+w62MY8AGUUcbuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV9xc0tia0ZOUGthbjdEcll4andBWlJSeHU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82NjEyODUtNzk2NS00ZmE0LWJhYWIt
NzRjMTQwNWMzNDc1LzEvWV9xc0tia0ZOUGthbjdEcll4andBWlJSeHU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82NjEyODUtNzk2NS00ZmE0LWJhYWItNzRjMTQwNWMzNDc1
LzEvWV9xc0tia0ZOUGthbjdEcll4andBWlJSeHU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwQLX3zn
jZe0cMGGQXy0pj6eUdfH+MAerB0qcdMI3lm2gq2LDCprGUtuw7BNusSva8XZvoE/
MswDucPT/rL7bfPZyuEK16Nk9ot6qrQlIa8ZdpzIQ+PQ0SytjX13NdxavxzlzIPz
2W5dhbUXaMbYPi0KkwLZQe/6uQkdsv2QGF0/18SKsfwMpr5Wa4x3pIS0H0FSOBhY
aKnWqiSka1hJu/j5xgArM++Hkd4CVomh99ljXyeWbTM7ehESCjF1Ko++sabzH4AL
Wh8Qi6enH3iPEq6onjzR8x5kGHJ37XwpSN1ocf4y8NlHXPTqKk/Ea4AXdsslU7VJ
zgpkEBsUmQ3efw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:38:15 2026 by rpki-client