Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
File:                     yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft (raw, json)
Hash identifier:          TerCYpktBIMTmOs5vlFEl9hINrizgYTpm83bqVOerX8=
Subject key identifier:   01:BF:6F:8C:35:42:39:EB:A8:E8:FF:C1:86:F8:04:71:FE:A3:C9:F1
Authority key identifier: C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
Certificate issuer:       /CN=c8e50ca17134837a50d3063d43d443385abe6f49
Certificate serial:       019EC03699B3B7031F5E9A10EB0C1E24FDBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
Manifest number:          18CF
Signing time:             Sat 13 Jun 2026 09:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 09:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 09:01:04 +0000
Files and hashes:         1: KruYfdwnUNYxfXkcEK0pRrgHkqg.roa (hash: UrG6tcE8plAV8A8NaRxXB6Nz6rhzF4jRdCMcfNiMj5Q=)
                          2: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl (hash: F3CSpkitEdXX0Zcncwl4dqanBQ5e5swTQ8ReTJYzC9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:99:b3:b7:03:1f:5e:9a:10:eb:0c:1e:24:fd:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8e50ca17134837a50d3063d43d443385abe6f49
        Validity
            Not Before: Jun 13 09:01:04 2026 GMT
            Not After : Jun 14 09:01:04 2026 GMT
        Subject: CN=01bf6f8c354239eba8e8ffc186f80471fea3c9f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7e:3b:44:49:85:25:bc:d5:60:50:67:24:ac:
                    8d:5b:50:65:57:d0:24:fe:4a:49:80:1c:88:d9:c5:
                    6b:39:14:a6:1f:27:e4:04:96:b7:c6:65:d3:aa:ec:
                    17:f4:c5:7a:97:da:bc:93:06:1d:89:fd:0a:9d:cf:
                    3e:b9:6c:24:8a:2c:0e:ad:6e:95:ba:1e:c0:ee:08:
                    fb:1c:ef:f7:82:1a:c8:e9:1a:c6:5e:17:f6:0a:2e:
                    be:1f:00:55:1b:04:5c:28:72:7a:6c:e6:85:89:cc:
                    72:50:dc:50:8e:33:48:6c:15:93:da:40:db:d8:79:
                    15:a8:1b:22:bb:70:f8:d2:28:60:fb:bc:b6:4d:ed:
                    ec:03:7b:19:fb:95:0c:a8:bd:20:22:c7:65:bb:ed:
                    90:13:79:9e:68:49:64:d9:d0:58:f9:a0:fc:69:3d:
                    b2:61:98:d1:28:de:f8:1c:52:c9:a3:8a:16:6b:e9:
                    7f:01:2f:24:af:da:09:1f:96:86:a3:b4:75:95:be:
                    1c:29:67:b2:ea:0b:7e:05:b1:a4:67:e3:5c:23:64:
                    9c:ff:3d:2c:08:cf:49:7a:0c:61:50:ea:05:a2:fa:
                    36:de:08:e2:2d:4e:77:8b:0e:ea:dc:7c:ea:85:4f:
                    dc:7c:27:c8:34:30:a3:c0:4e:71:66:07:25:8b:ea:
                    d5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BF:6F:8C:35:42:39:EB:A8:E8:FF:C1:86:F8:04:71:FE:A3:C9:F1
            X509v3 Authority Key Identifier:
                keyid:C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:4a:bf:f4:0b:6d:bc:e5:5b:5d:91:a9:1f:e4:64:01:e2:3a:
         b1:94:7a:46:62:03:3f:b7:e2:22:76:b7:d0:40:d0:46:f9:90:
         6c:b5:d8:10:b5:a5:cc:b4:1d:80:20:40:f8:69:b8:17:a5:0a:
         41:da:73:2e:ab:ed:a2:43:38:6d:87:e2:d4:17:9b:46:43:03:
         49:84:41:79:e7:ce:c6:e9:2c:f8:0a:dc:4c:03:c9:3f:1f:a8:
         18:e8:00:73:65:f0:21:19:f9:c7:f3:64:29:c8:fa:d4:8d:c6:
         b6:8d:b6:90:0a:1b:dd:d5:46:b6:3f:63:33:bb:de:7a:29:46:
         d6:2f:a9:63:7d:d3:d1:02:2f:1d:4d:6e:b3:b3:4b:6c:0d:80:
         e0:fa:b9:11:8e:c2:45:65:64:ad:6f:96:0e:ff:24:2f:87:89:
         8e:a6:b5:51:fd:e9:a0:3c:44:3d:0c:e0:16:9e:93:9c:30:e4:
         56:87:88:ef:17:4e:ad:d8:2d:18:c4:72:5d:ff:c5:10:2e:2f:
         3b:21:7d:b8:4e:a2:a2:8b:62:33:da:55:a4:5e:a9:89:66:67:
         75:99:cd:c4:ee:df:06:3a:d7:39:82:b2:ac:b9:65:6f:d6:4b:
         b0:98:f3:98:7d:2d:37:da:da:83:28:63:38:44:56:d9:34:d2:
         a7:98:df:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:43:03 2026 by rpki-client