Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
File:                     yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft (raw, json)
Hash identifier:          UdqWNk5P9x0hzDL9vc3imW9HR7L+xzZ5qjFlot+a8Cs=
Subject key identifier:   EB:7E:10:3F:D7:F4:40:C0:4C:EF:9C:99:A1:FF:22:5F:F3:67:F9:DE
Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
Certificate issuer:       /CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Certificate serial:       019EC36E6A4ACE0410A94030826DE66758EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
Manifest number:          0F9F
Signing time:             Sun 14 Jun 2026 00:00:53 +0000
Manifest this update:     Sun 14 Jun 2026 00:00:53 +0000
Manifest next update:     Mon 15 Jun 2026 00:00:53 +0000
Files and hashes:         1: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl (hash: K1+9Dq/JGQr4Ru0zy+Gark21l3N66c1oTnutHnXI+Tk=)
                          2: yZypMalDZN_1H34j86whs9HOsns.roa (hash: QTHAsSMIZiio2WTla/ss5QYgZ5yq+TMYt6pBCLwJH0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:6e:6a:4a:ce:04:10:a9:40:30:82:6d:e6:67:58:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb
        Validity
            Not Before: Jun 14 00:00:53 2026 GMT
            Not After : Jun 15 00:00:53 2026 GMT
        Subject: CN=eb7e103fd7f440c04cef9c99a1ff225ff367f9de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d1:5e:5d:bc:bd:55:12:79:26:33:4e:b0:fe:
                    8f:5c:50:76:bf:63:45:d5:8e:78:f5:85:71:16:50:
                    ff:ff:63:4d:09:e2:97:a2:5e:2a:71:37:58:85:6c:
                    b2:01:a9:2b:87:0e:f9:8d:03:eb:c7:00:ad:c4:34:
                    24:d5:fe:57:a5:44:e9:1a:1f:13:c9:97:93:ff:c6:
                    86:2d:c5:31:20:15:3a:26:2c:06:a6:fd:21:94:55:
                    48:a8:4d:7a:7f:78:5d:23:82:69:2e:84:44:05:bc:
                    99:86:cd:99:c4:8d:d9:c2:d4:f7:e1:b6:5d:5e:fa:
                    36:90:05:3e:ba:bf:48:4f:75:2b:8c:de:ec:c3:15:
                    73:66:60:e9:01:e6:fa:7c:14:fc:39:de:fb:55:55:
                    26:69:b0:ce:7c:b2:87:91:65:26:38:1b:38:4d:50:
                    aa:f9:fa:64:24:68:e5:1b:af:52:a0:1c:a1:71:7c:
                    8e:d2:45:56:3a:76:8c:e7:4f:e8:10:69:22:e3:7f:
                    36:d2:2d:1d:0b:88:51:2b:e5:39:63:95:ea:9a:7d:
                    53:69:bf:70:30:31:23:61:f3:48:3a:0f:f1:99:d9:
                    0e:03:ef:d2:b8:5f:0d:66:94:2b:93:69:98:65:0e:
                    1b:fd:45:04:6a:39:1c:af:45:af:61:21:85:5f:88:
                    35:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7E:10:3F:D7:F4:40:C0:4C:EF:9C:99:A1:FF:22:5F:F3:67:F9:DE
            X509v3 Authority Key Identifier:
                keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:06:c5:a9:dc:6b:fe:05:9e:2c:f2:95:10:4f:a6:21:a1:4a:
         40:6e:e5:4e:97:4d:79:e5:b4:9c:ac:55:8a:3c:ee:ae:9b:de:
         6e:7d:76:f3:2b:af:3a:79:a2:8c:fd:8f:72:a3:2e:c8:a1:3e:
         bf:ad:2b:54:77:87:f0:41:f4:cd:1c:01:88:ef:e3:07:ff:4c:
         ee:07:2f:f2:5e:bd:e9:78:80:33:26:51:ba:b6:cd:ff:29:97:
         a6:6d:82:93:48:b6:ee:13:5a:f0:f4:3b:5b:8d:25:6b:ce:a1:
         a9:81:e2:b4:17:3e:52:aa:63:b3:d4:7c:28:bc:31:2b:2d:e1:
         1b:eb:c8:4f:a9:54:5d:25:da:87:7d:69:32:32:8f:f0:cd:0e:
         9c:31:77:3a:90:87:ae:ab:b5:9f:d1:27:05:d5:cf:79:d6:2c:
         fc:29:e1:f6:69:ea:09:28:35:09:9c:b2:8c:51:6e:df:aa:6e:
         8f:0a:71:8f:88:15:d9:0d:93:4b:94:0e:7f:81:09:23:34:e1:
         70:eb:e2:fd:fe:8d:cd:a0:0f:af:83:02:8c:8f:2f:90:37:5b:
         2b:16:e0:6d:30:8b:ce:8b:fd:54:50:0c:a8:35:51:46:54:ab:
         55:74:eb:5b:2a:91:c4:30:85:63:cb:fd:ce:a9:31:97:73:1e:
         cf:2e:39:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:52:02 2026 by rpki-client