Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
File:                     jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft (raw, json)
Hash identifier:          EDgizEn3xJ4WxmHYJtHMlH5WAXQIPQkxkLeSWNdKaKE=
Subject key identifier:   1B:79:E1:F4:AA:6A:2B:D9:3E:6C:55:E6:5D:4B:F2:8F:72:51:9E:17
Authority key identifier: 8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E
Certificate issuer:       /CN=8d80b45455d89731f87bb53f4dbe641189837d4e
Certificate serial:       019ED3BD6CB86FF71C9589A771FB427960FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
Manifest number:          0602
Signing time:             Wed 17 Jun 2026 04:01:07 +0000
Manifest this update:     Wed 17 Jun 2026 04:01:07 +0000
Manifest next update:     Thu 18 Jun 2026 04:01:07 +0000
Files and hashes:         1: jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl (hash: byxEHZCMcsdFayrAJrkxgo5RK6mZAZtxHZkVbqk5rDA=)
                          2: mq6jdAhoY64n-S89EB8sdE29Spk.roa (hash: bvsiwXRJB+1a6z+HtrBRTvbHG/Lsx8kIyh6UkUd8Cek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:bd:6c:b8:6f:f7:1c:95:89:a7:71:fb:42:79:60:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d80b45455d89731f87bb53f4dbe641189837d4e
        Validity
            Not Before: Jun 17 04:01:07 2026 GMT
            Not After : Jun 18 04:01:07 2026 GMT
        Subject: CN=1b79e1f4aa6a2bd93e6c55e65d4bf28f72519e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:85:59:e6:c1:41:8e:04:1c:4c:95:91:73:54:
                    58:ad:6e:f7:0f:eb:10:40:03:5b:91:52:0a:77:fd:
                    59:70:e4:b4:27:78:c5:0a:b6:25:cf:d2:24:9f:c7:
                    5d:0e:ae:c3:1f:2d:fc:f8:94:3b:22:cd:7e:b3:4d:
                    a3:79:53:31:49:81:3e:f5:98:a0:60:cc:74:2b:35:
                    aa:86:b6:19:9e:58:48:94:e4:3b:3b:14:12:98:9b:
                    e7:73:3d:71:05:93:07:a2:b3:35:e7:54:bb:3c:8e:
                    ab:8a:31:93:6c:74:1d:49:d8:40:88:ff:b3:ed:8f:
                    d1:9c:f2:34:6d:7c:61:96:7d:3f:dc:51:86:f3:4d:
                    3d:db:ca:c5:10:6d:62:d8:e9:16:05:ff:67:73:c5:
                    21:31:31:20:2b:7e:3d:83:5a:e7:21:d4:e9:a2:3c:
                    f3:0b:10:80:39:a3:5f:e7:c7:b6:a4:28:b9:d4:6f:
                    49:21:f2:04:f2:32:5b:98:85:6e:6e:06:00:c0:f6:
                    e6:8c:eb:e5:ff:ac:75:4d:8c:ff:32:f0:83:ea:ba:
                    88:63:3b:28:02:1f:c0:c0:04:85:14:d2:d9:45:bf:
                    c8:4a:b2:d3:fa:59:35:5c:85:54:a0:0a:f4:a9:67:
                    81:bb:07:e0:2a:e5:1e:f2:03:26:74:3e:f8:55:78:
                    d1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:79:E1:F4:AA:6A:2B:D9:3E:6C:55:E6:5D:4B:F2:8F:72:51:9E:17
            X509v3 Authority Key Identifier:
                keyid:8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:87:ec:11:39:fd:fe:1d:2f:24:bd:5f:d0:38:27:42:13:27:
         6b:f5:3f:cc:c6:2c:0e:05:23:cc:fc:69:c6:83:cf:14:50:2f:
         c1:e5:bb:42:12:c0:24:bc:81:26:98:8b:4d:03:00:ec:ae:bb:
         37:c5:4b:d9:35:98:e4:e8:bb:bd:6f:ab:1b:ad:47:7c:56:df:
         1e:25:75:5c:57:d1:fb:d3:08:13:a5:fc:ae:8f:a7:c1:1d:a5:
         cb:cb:fd:a5:b9:00:31:24:1b:fd:82:2d:62:06:a8:57:48:2c:
         9b:86:61:bb:09:90:3c:ca:40:d3:84:cc:7d:0e:e5:94:e9:c0:
         a6:83:9d:12:15:03:29:88:9f:e3:9f:8e:e8:6c:66:a5:cc:c1:
         56:4d:39:2d:0f:2d:34:36:a9:9e:08:73:26:5f:c4:34:8c:da:
         6a:00:e6:45:07:03:08:93:3e:d3:65:bc:c4:8d:6f:70:4e:39:
         98:d6:a8:5a:0c:16:6b:ea:af:32:8e:96:4f:5b:c0:3f:41:35:
         a1:5b:b7:8a:6c:0f:78:da:a3:74:87:49:63:99:81:a3:54:e5:
         00:65:e7:8b:75:64:b6:c3:ca:2d:11:82:21:c5:f5:41:e4:2b:
         5b:05:a4:5d:2e:b9:2a:2d:46:1e:e8:1a:07:0a:7b:a9:44:b9:
         8e:47:de:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:47:42 2026 by rpki-client