Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.mft
File:                     YBtLoTPyON1qs-CprIh1yNgL9rc.mft (raw, json)
Hash identifier:          Ymz4Vt72HpF3aR51Esi+16z1rGkGt8Vm/mlE8C1cuIQ=
Subject key identifier:   B8:A9:BE:21:A3:DB:CD:25:46:56:92:E1:5A:81:BC:72:36:92:9A:82
Authority key identifier: 60:1B:4B:A1:33:F2:38:DD:6A:B3:E0:A9:AC:88:75:C8:D8:0B:F6:B7
Certificate issuer:       /CN=601b4ba133f238dd6ab3e0a9ac8875c8d80bf6b7
Certificate serial:       019EC1EE58510BF0370D3A5B325CAFBAC55C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YBtLoTPyON1qs-CprIh1yNgL9rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.mft
Manifest number:          9B
Signing time:             Sat 13 Jun 2026 17:01:23 +0000
Manifest this update:     Sat 13 Jun 2026 17:01:23 +0000
Manifest next update:     Sun 14 Jun 2026 17:01:23 +0000
Files and hashes:         1: WwDOvongC1_X8P9dsP5SDAx3pIw.roa (hash: OvjUCdki/Xpiry32DFBQzx/CWIybLt/kwDkvEQjTH6I=)
                          2: YBtLoTPyON1qs-CprIh1yNgL9rc.crl (hash: Rt1YlCV1h6pHTJRGChgmSH6tYWUK26i9sH4cTKzWTh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YBtLoTPyON1qs-CprIh1yNgL9rc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ee:58:51:0b:f0:37:0d:3a:5b:32:5c:af:ba:c5:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601b4ba133f238dd6ab3e0a9ac8875c8d80bf6b7
        Validity
            Not Before: Jun 13 17:01:23 2026 GMT
            Not After : Jun 14 17:01:23 2026 GMT
        Subject: CN=b8a9be21a3dbcd25465692e15a81bc7236929a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6a:38:7d:63:6a:e5:d0:38:14:50:07:6f:38:
                    72:9e:93:74:c9:6e:ab:f7:1d:3a:24:4d:6c:46:46:
                    e0:eb:e8:76:d8:aa:91:f6:e6:70:f1:cc:0e:28:a5:
                    a6:fc:7d:4f:49:57:82:1a:74:26:7e:ed:dc:92:11:
                    b3:a9:78:89:1a:9e:10:64:1f:b3:2e:aa:48:94:0b:
                    89:f7:ee:e4:b4:27:28:77:c8:7a:15:cf:ea:3d:3c:
                    3b:7c:ba:3f:29:2e:3b:01:61:80:80:64:55:b2:1b:
                    b4:f8:e0:e8:c6:68:5d:2b:83:37:36:38:ef:5e:53:
                    40:56:06:f5:ec:22:0f:08:1a:a8:44:98:ad:92:b6:
                    9a:21:2c:9c:5e:5a:4f:df:b3:15:a9:5e:c3:72:4e:
                    c4:98:48:9b:fb:9e:5e:d4:39:6a:0a:31:ad:50:1f:
                    c9:c3:3a:6c:79:a0:09:ae:e4:6d:14:ae:7b:3c:f4:
                    85:64:90:0e:ac:1d:71:ea:96:fc:7b:4a:bb:49:6d:
                    28:fa:ad:2f:a6:17:c6:38:4d:0b:0b:7d:b4:af:2a:
                    7e:e2:35:bf:68:2c:4e:0f:68:ef:72:c6:03:41:d9:
                    83:8a:7a:50:a8:99:23:e0:78:5f:6c:8b:98:1c:f6:
                    21:7d:5c:4a:a4:4e:ef:17:62:1f:5f:81:4d:94:eb:
                    5c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A9:BE:21:A3:DB:CD:25:46:56:92:E1:5A:81:BC:72:36:92:9A:82
            X509v3 Authority Key Identifier:
                keyid:60:1B:4B:A1:33:F2:38:DD:6A:B3:E0:A9:AC:88:75:C8:D8:0B:F6:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBtLoTPyON1qs-CprIh1yNgL9rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:9f:6a:ea:9c:c1:68:4f:c8:1e:f8:cd:84:d0:80:4c:fe:fc:
         89:d2:be:03:b2:57:3f:03:ca:91:5f:99:52:71:44:6a:ff:65:
         60:d4:51:76:c3:27:69:ab:4d:a2:e4:c4:73:93:ba:19:84:38:
         84:aa:d0:5f:0d:df:38:61:ef:7d:27:40:42:0f:44:60:cb:40:
         70:0a:e1:f7:5a:59:14:36:33:7e:7a:11:83:83:ef:62:eb:22:
         4c:a9:ba:c8:08:cd:c2:50:4d:d4:8e:45:9f:ed:44:a3:4a:7f:
         8e:6b:d0:38:84:d7:0d:82:e3:d7:b9:d5:be:7d:60:4a:29:48:
         e2:d3:1a:75:f3:2e:82:34:3e:fa:c4:25:f7:3c:14:b4:85:36:
         b1:ff:0f:82:f3:3f:f6:90:57:14:b3:1e:21:48:5e:38:60:ad:
         82:eb:71:3a:38:07:22:54:b6:d2:82:88:6c:65:97:d1:cc:66:
         c7:b9:8b:8a:d8:5f:46:c8:a4:3e:eb:70:e0:28:0d:d1:ec:17:
         2f:5f:95:cd:88:c3:56:72:5e:72:7e:57:c9:78:0b:db:b2:52:
         fb:50:22:9a:e5:cd:22:7f:5a:34:93:03:ca:ca:ff:9c:0f:6c:
         e1:2d:d9:dd:f6:be:bd:4f:39:fd:6b:58:7a:ce:11:bb:fe:a8:
         8c:a3:f1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:06:40 2026 by rpki-client