Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
File:                     yeG79grg631AB2JxhcXxRyP_864.mft (raw, json)
Hash identifier:          nTN5civOwsIgzXpsfSblaZj9lljYNt4EWBbjtGanwAE=
Subject key identifier:   A2:12:2E:C0:6C:5B:81:37:C6:68:8B:06:78:86:E0:B5:67:28:AB:E7
Authority key identifier: C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE
Certificate issuer:       /CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae
Certificate serial:       019EC412CF9E1E3357C305B97E6F172A93B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
Manifest number:          04A0
Signing time:             Sun 14 Jun 2026 03:00:27 +0000
Manifest this update:     Sun 14 Jun 2026 03:00:27 +0000
Manifest next update:     Mon 15 Jun 2026 03:00:27 +0000
Files and hashes:         1: T-09y-oUF-oVxc0rII_IKxv-tqo.roa (hash: mtxY/euYWXc5W24bVNJKERPEbeVn8RYrIiTpc8jewmU=)
                          2: yeG79grg631AB2JxhcXxRyP_864.crl (hash: p8VZ2MLGsJZo8ENWS0QlY1Ns2e/N1UOpJOsm4Zzvm8s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:12:cf:9e:1e:33:57:c3:05:b9:7e:6f:17:2a:93:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae
        Validity
            Not Before: Jun 14 03:00:27 2026 GMT
            Not After : Jun 15 03:00:27 2026 GMT
        Subject: CN=a2122ec06c5b8137c6688b067886e0b56728abe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9b:56:27:ae:ac:d6:03:62:5d:65:a4:80:4b:
                    f9:85:b1:9f:60:9d:26:66:ce:21:53:25:cb:3b:3e:
                    bc:6a:66:90:c3:3e:1e:3c:99:1c:4e:dc:38:3b:58:
                    71:35:0f:1f:20:ca:3c:12:7f:5c:50:16:e3:ec:73:
                    98:f1:7d:45:66:f8:41:f8:f7:94:10:88:a9:d2:da:
                    b5:89:6a:6f:6f:3c:6f:c5:ca:71:14:5a:db:7b:86:
                    5a:17:fa:bf:f4:29:a9:38:67:de:67:cd:d7:3c:38:
                    50:51:86:47:88:04:7c:f9:81:22:4c:c1:18:2b:46:
                    5a:a3:7b:99:bc:9a:17:b9:a1:55:5a:fa:97:80:53:
                    90:71:b9:66:06:dc:e7:6a:33:99:ec:8a:db:b2:0d:
                    7a:5f:b2:89:cb:6a:61:23:9b:d4:68:27:e9:a1:8d:
                    ab:e4:9a:65:e0:a3:12:c1:90:f9:dd:86:95:80:25:
                    92:3c:3c:43:40:cf:1c:06:1e:32:0b:ca:be:d6:80:
                    b6:20:7e:09:b2:40:81:76:b5:b9:ff:0b:3d:a0:41:
                    3f:1c:14:e5:d5:47:00:ce:f1:e0:91:1d:2d:34:56:
                    2e:e1:7b:0f:c6:9e:44:58:13:4d:fd:c5:55:7c:c7:
                    8a:af:9a:fc:85:6d:d9:30:0a:00:9b:b6:63:55:cd:
                    8a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:12:2E:C0:6C:5B:81:37:C6:68:8B:06:78:86:E0:B5:67:28:AB:E7
            X509v3 Authority Key Identifier:
                keyid:C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a6:ab:00:47:92:7b:75:83:cf:ea:21:0f:00:2c:ec:9c:b7:
         79:76:83:ba:7c:d5:2d:ca:a8:ce:df:ed:6b:e2:ca:82:4c:a6:
         50:e0:e0:a7:d8:9f:13:e3:81:bb:cf:8d:10:35:61:7f:55:14:
         b3:c0:e7:e3:e2:3c:80:bc:ac:a5:b3:86:51:11:59:3e:06:de:
         e0:29:93:80:bc:71:3d:4a:3f:16:af:c5:e0:83:79:96:8e:21:
         8f:ad:c8:6c:50:b7:24:ae:27:9f:60:ca:7c:b5:49:d3:62:9e:
         5c:7e:1f:ea:c9:0b:0c:06:d1:17:e0:68:c1:18:28:b2:da:1b:
         8e:6a:2e:68:3c:1a:bf:8c:ba:f0:15:34:4b:80:77:5f:f9:53:
         28:c2:3c:15:fa:b7:91:5c:8c:7a:2e:6f:05:fe:7a:58:ad:a2:
         b1:25:20:64:30:76:7a:40:60:1c:03:09:c6:75:57:65:3a:3b:
         f2:db:c5:01:4c:54:c9:54:d8:58:56:78:c2:57:1d:07:fa:a1:
         3f:59:bc:bb:ba:f1:6a:cb:cf:20:0e:5b:38:d6:9e:24:d8:04:
         97:c6:f3:56:05:7f:6a:da:99:17:fa:c6:6b:ca:fe:ad:3d:ed:
         94:71:05:48:1a:98:f8:98:d8:f6:4a:1e:27:0f:c6:50:c1:2e:
         d5:40:a5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:48:26 2026 by rpki-client