Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
File:                     yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft (raw, json)
Hash identifier:          fCjM5DXnKX5TmU3uitTLO30pv4gSx7pdZRG3CmbM0xc=
Subject key identifier:   86:3D:B6:14:CB:F1:50:DF:78:24:3E:CB:32:FD:08:79:9A:74:5F:CC
Authority key identifier: C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
Certificate issuer:       /CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Certificate serial:       019EC3DC36BDF1DF007BACF8828E56184F66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
Manifest number:          15F1
Signing time:             Sun 14 Jun 2026 02:00:49 +0000
Manifest this update:     Sun 14 Jun 2026 02:00:49 +0000
Manifest next update:     Mon 15 Jun 2026 02:00:49 +0000
Files and hashes:         1: YjABWXq1K-e_wEund0ue5nxCxOU.roa (hash: PI1L0CXgsAmafCm4unnTqfAaCBg3v/MEpLRsMdPwg9s=)
                          2: yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl (hash: NSFhrTY7Z2SZjqQDSzyGA8SMmKPMABN2GcBh3dI+YgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:dc:36:bd:f1:df:00:7b:ac:f8:82:8e:56:18:4f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
        Validity
            Not Before: Jun 14 02:00:49 2026 GMT
            Not After : Jun 15 02:00:49 2026 GMT
        Subject: CN=863db614cbf150df78243ecb32fd08799a745fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:fa:10:94:6a:6a:83:24:04:aa:7d:a7:78:
                    aa:3b:a8:9c:bb:43:75:ab:a9:84:d4:64:aa:fd:0d:
                    d6:cb:2e:27:cc:1f:3c:35:39:f0:ca:92:8b:14:2d:
                    21:f5:d7:73:4b:5c:77:e8:68:6a:53:60:32:a9:c1:
                    21:81:20:e9:37:0f:8b:e1:21:ae:d4:bf:7a:ea:a0:
                    17:3b:e9:62:26:25:52:89:af:02:d7:15:9e:25:1e:
                    98:f6:8d:6b:ee:f3:8a:48:6b:e9:fc:1c:47:97:cb:
                    f2:81:24:a5:6c:e2:58:5f:49:8f:16:40:b3:4b:ea:
                    05:c7:7b:22:60:b2:09:f2:d2:3c:b3:2d:59:9e:fa:
                    bc:d0:d0:f7:c1:62:81:9e:5f:47:9d:49:a8:8e:40:
                    93:dd:84:87:22:50:51:69:3c:3a:3a:55:c9:5a:a1:
                    1f:9d:4c:49:cf:6a:c9:01:42:02:b0:9d:f4:ea:6b:
                    c7:1f:41:d3:7e:c1:8c:31:0f:46:ff:9e:4c:e6:d4:
                    b0:fb:0d:86:a2:b7:ce:22:3d:a6:03:75:0c:c5:eb:
                    11:d6:7c:ad:29:e3:4d:3d:4d:9c:d3:11:a1:fa:4a:
                    a0:85:5b:f8:7e:32:eb:cd:a1:a2:cb:80:dc:fe:e0:
                    5a:c7:af:89:82:ce:b6:6b:34:3f:2c:90:9a:bf:7e:
                    12:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3D:B6:14:CB:F1:50:DF:78:24:3E:CB:32:FD:08:79:9A:74:5F:CC
            X509v3 Authority Key Identifier:
                keyid:C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:ef:ff:51:69:39:fc:05:83:03:bc:5c:4e:53:f8:3f:be:c0:
         e4:7d:aa:55:9b:6e:a6:13:ff:47:2f:ca:29:c3:f2:b5:e6:c9:
         b4:e5:28:f8:41:92:4e:e4:11:c8:62:82:83:38:57:82:86:8b:
         4c:21:82:bc:db:a3:79:fe:66:36:06:a7:e6:29:6f:c2:7a:12:
         79:db:fd:b1:52:f5:cf:17:5f:4c:4b:cf:a1:4b:b8:1a:e9:bc:
         b8:13:33:8f:2f:f4:bd:e8:ed:44:f3:7c:67:73:51:d9:18:b1:
         d4:29:43:3a:63:a8:de:53:01:ef:b2:0b:ae:9c:3e:03:de:79:
         17:3e:f8:6b:7e:ca:58:bb:4c:3b:3b:3a:98:b1:92:cc:16:cf:
         47:66:fe:10:e0:b7:df:8c:8b:14:00:bc:a8:0c:78:11:ec:a9:
         14:d5:f3:69:f8:45:e2:6f:5b:33:24:39:8f:f8:31:62:84:a7:
         5f:95:c8:7e:c1:5c:be:a8:52:92:20:bc:91:d0:f5:42:15:62:
         6e:54:ac:8a:c3:9e:61:b5:81:67:2d:ff:5e:73:7f:79:59:a5:
         f3:a4:8d:02:a1:13:f6:01:27:ba:0f:2a:fb:19:ec:62:69:b8:
         dd:a8:9a:9a:03:c0:3a:c2:bf:05:59:93:2e:64:11:5e:11:44:
         75:c5:36:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:25:10 2026 by rpki-client