Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
File:                     YuXsnfTdA7n1AKaglH0Ue27SFmY.mft (raw, json)
Hash identifier:          oVV0C67jbICNRNsq1dtm/CP1KI5yA+gg5VcvZwPUeMU=
Subject key identifier:   F7:B9:30:89:D4:F3:E2:51:BB:1B:4C:E5:D6:C7:4D:5E:A9:11:C4:7D
Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
Certificate issuer:       /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Certificate serial:       019EC25BCD6B7812DC9FEF560A8B8F57BDAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
Manifest number:          13C2
Signing time:             Sat 13 Jun 2026 19:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 19:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 19:00:56 +0000
Files and hashes:         1: OmKYv-eBNTYluusfNr4dZe7zC_c.roa (hash: w1Hd7iJpZYHQEo80iQwx2qNAI2ou5wncgHu/GLia0Tg=)
                          2: YuXsnfTdA7n1AKaglH0Ue27SFmY.crl (hash: 3m/vCE9rFz/Wgvg7iQ75qmQnSJueiiypRiaTSi6nsXk=)
                          3: l-QyBKePUGvgwvLYQ39xVIrG-Xc.roa (hash: BEyQW94VrHgV1DUmSXCji9F0XD6RgtTzxouMSqJBF3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:cd:6b:78:12:dc:9f:ef:56:0a:8b:8f:57:bd:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
        Validity
            Not Before: Jun 13 19:00:56 2026 GMT
            Not After : Jun 14 19:00:56 2026 GMT
        Subject: CN=f7b93089d4f3e251bb1b4ce5d6c74d5ea911c47d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:13:c5:c3:5e:43:b3:b8:01:b3:2f:59:30:e9:
                    ce:01:4e:80:11:74:26:66:34:98:ab:44:23:0d:38:
                    29:51:f4:ec:a3:9f:48:1b:ce:c0:bf:17:46:81:23:
                    9f:0f:7a:a3:0e:02:b3:da:e8:2e:c9:e9:b0:a2:c3:
                    fe:50:c2:11:78:2a:a4:41:ad:18:9c:b7:af:59:25:
                    6c:80:0d:ad:5e:9c:dc:dd:cc:ac:94:33:02:90:d9:
                    d7:59:7d:ce:71:58:e9:2f:f3:e6:17:9c:49:f2:32:
                    a6:c1:19:6f:55:9e:e1:e3:cd:c4:70:6c:f6:b3:9d:
                    eb:9b:58:23:0b:23:48:b0:a1:f7:8a:39:ce:1d:40:
                    a2:c7:3f:22:d3:1a:f1:b9:ba:18:34:57:fc:a2:ac:
                    f6:49:73:19:bd:0b:1f:c5:7b:1c:77:a2:90:74:f0:
                    b2:47:16:aa:f0:bb:6d:ef:98:30:08:af:1d:0c:d6:
                    60:ab:7a:fe:91:50:99:12:bc:00:dc:2b:a9:aa:89:
                    70:f6:05:4d:96:7b:3a:24:63:3a:df:4c:d6:57:fd:
                    9b:69:3f:db:72:a4:e0:70:a0:31:a3:d2:97:db:b0:
                    d0:01:ba:f4:09:f2:d1:b0:c8:8e:38:45:d3:c7:3b:
                    d9:b4:e7:15:26:03:5a:dd:e6:a1:51:c5:2a:3f:7e:
                    62:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B9:30:89:D4:F3:E2:51:BB:1B:4C:E5:D6:C7:4D:5E:A9:11:C4:7D
            X509v3 Authority Key Identifier:
                keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c9:13:0a:68:35:8b:29:6f:4b:6b:6b:c2:05:58:e0:10:d7:
         cf:63:fa:8b:cf:65:a9:0c:44:66:06:cd:52:bd:2f:9a:53:4e:
         91:d5:bb:fd:ad:55:ff:95:2f:df:21:9c:4b:57:79:1f:14:73:
         28:73:04:be:f8:88:c2:b8:47:29:01:78:51:50:10:74:ac:6e:
         0e:6f:ab:73:ff:89:1e:e9:58:e0:a2:f1:11:05:04:cd:bf:f3:
         24:2a:16:c6:0a:d8:50:30:1f:04:fd:ff:f0:a6:e7:af:52:14:
         40:f8:d7:77:3b:9d:2a:c2:39:08:ba:60:94:e3:ab:2c:42:50:
         33:84:8c:ac:ee:f1:4d:b3:a8:05:13:92:a7:4b:34:a5:69:a4:
         8e:be:13:bd:f7:4f:ed:0d:33:68:b7:d8:aa:4e:7e:bd:9d:a9:
         37:fb:54:8d:58:90:ed:98:55:75:b2:85:95:6f:eb:f6:29:ba:
         2d:fc:d9:d3:ec:91:7e:48:27:4d:1b:a0:bf:ce:ce:3b:78:db:
         52:28:d1:9c:37:3d:53:24:a0:2c:25:6d:2b:d9:bf:e6:ee:58:
         8f:3e:12:1e:74:24:ab:93:64:25:2e:e6:35:5b:de:2b:ff:68:
         0f:89:73:5f:5a:15:88:c7:89:9d:57:8a:1b:9d:1c:65:65:bf:
         a3:84:c2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:24:05 2026 by rpki-client