Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
File:                     YcK0WmXBm2irsFFsnMr0VHpcwxI.mft (raw, json)
Hash identifier:          NR645zW8jWSjQKDzSXdMlyArac66Vojwq0+TyIcU9f4=
Subject key identifier:   36:13:45:F8:CA:B2:27:94:D3:77:29:0C:93:EC:10:EF:F2:7F:8A:C8
Authority key identifier: 61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
Certificate issuer:       /CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Certificate serial:       019EBEED3FD9285A60D0EAB9C367329E304F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
Manifest number:          1281
Signing time:             Sat 13 Jun 2026 03:01:19 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:19 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:19 +0000
Files and hashes:         1: TNfS4qjFMyp6FRl_4ldjm_Y_i3Q.roa (hash: V9e1y2xxqghsyNge3bSzEeJvbCQltZtzBhjXNsBZP/k=)
                          2: YcK0WmXBm2irsFFsnMr0VHpcwxI.crl (hash: MLYvvBPI0IAzJ4QDnxz8ExjCKYGdFAPKzQ5QeTy2KjA=)
                          3: aL2Fa93Pq0uyo59pgUgspQyUPKc.roa (hash: Bga4XDZkfRChSZnLWZqmel++JYpGqGLT7JPEKTaVvO0=)
                          4: rxVxvq80s018HousURd0ic36W10.roa (hash: 4vWzh852MFR+K32Ov40708je2OYVViB9fVjK6c0oRMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:3f:d9:28:5a:60:d0:ea:b9:c3:67:32:9e:30:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
        Validity
            Not Before: Jun 13 03:01:19 2026 GMT
            Not After : Jun 14 03:01:19 2026 GMT
        Subject: CN=361345f8cab22794d377290c93ec10eff27f8ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:54:60:17:41:9b:64:39:83:09:cb:5f:cc:f2:
                    70:d9:93:57:60:fe:fe:57:4f:4f:3a:cf:57:37:11:
                    6b:c7:0c:43:e0:c5:69:b4:88:e5:f3:59:86:cb:a1:
                    51:ed:16:8b:90:64:5b:9d:15:3d:54:21:86:62:a7:
                    54:c0:90:5c:64:03:ee:03:6a:63:d5:2b:21:40:a0:
                    58:3b:39:32:e7:f0:eb:81:46:5d:58:07:8e:07:4b:
                    8e:71:ee:ae:99:76:70:db:e5:0c:93:31:f4:c8:6a:
                    19:bc:b5:8e:41:66:de:72:a1:ad:e0:9b:a9:14:4b:
                    a7:7c:5f:e1:05:fa:89:5b:96:61:cb:04:ad:a8:5e:
                    84:80:c6:3d:28:3e:f8:f0:00:13:5b:d9:49:9e:a7:
                    cd:88:a5:f4:81:44:a8:6d:cf:ad:a1:aa:b7:84:99:
                    81:fc:82:d1:9e:e3:2a:ad:c5:8a:e0:23:8e:fb:d9:
                    07:3e:63:71:ab:6d:c1:f8:78:a1:df:7e:41:60:64:
                    90:d4:75:a3:5e:f2:2a:0f:22:85:4c:e9:70:e5:dc:
                    64:76:2a:47:bb:26:48:84:31:c9:8a:a5:c5:3e:fa:
                    d8:19:60:a8:3d:9f:f8:7d:f1:3a:34:a3:4f:e0:b5:
                    0c:75:f3:3e:20:2c:c3:a1:f4:a6:71:96:a8:49:eb:
                    f9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:13:45:F8:CA:B2:27:94:D3:77:29:0C:93:EC:10:EF:F2:7F:8A:C8
            X509v3 Authority Key Identifier:
                keyid:61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:97:08:32:4d:82:f2:dd:1c:d5:8c:c2:31:dd:4d:d4:79:3b:
         31:5b:ed:d6:ed:18:21:ec:3f:77:60:d7:6a:86:6f:e7:4c:18:
         76:32:c0:d7:49:24:4c:2d:35:f8:87:cf:81:0e:1a:56:c8:08:
         b6:b2:ff:16:41:a9:90:9c:57:3b:f5:2d:b7:2a:e3:10:ad:bc:
         e3:db:2f:00:d1:07:41:fb:51:05:cc:90:67:87:50:73:26:2e:
         31:1a:0d:a0:de:a7:b5:25:56:b5:0d:9a:6a:89:81:c6:55:16:
         14:26:d2:01:57:d3:a0:0a:0c:75:32:7a:09:ce:2d:3c:d6:35:
         c1:97:70:1d:e8:0b:21:d9:0f:a4:96:ea:16:41:4a:b6:80:bf:
         f2:e7:0d:4d:1c:84:f7:ff:42:ef:a1:cf:12:aa:84:a9:f9:f3:
         43:95:6b:5f:75:e1:a4:20:ec:22:be:d0:6b:ff:1c:e0:61:ad:
         55:c4:35:a1:d8:d5:a4:ab:54:45:47:e9:e0:96:f7:b3:a5:66:
         08:47:0d:3a:04:5b:c0:b1:13:6f:d3:ef:de:39:99:5a:64:4f:
         da:80:b9:00:4d:92:e5:4e:ac:44:32:9e:c3:ef:e6:d9:28:57:
         60:75:88:1e:4b:c2:42:73:34:65:ca:e7:e2:b4:71:4a:f0:a9:
         9c:f2:5e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:58:31 2026 by rpki-client