Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
File:                     2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft (raw, json)
Hash identifier:          pBMWSzHT4VpexcgcwufQUMjBcPV5HBBG635t8RzaHV8=
Subject key identifier:   27:69:1E:1F:81:AD:CD:81:98:26:77:06:F5:6E:CC:DD:8A:F7:F9:D8
Authority key identifier: D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
Certificate issuer:       /CN=d982791736cdddd1328d0dd0decae92c058d6f25
Certificate serial:       019EBE7FD04363CC0A2A45D98CC94978F497
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
Manifest number:          0542
Signing time:             Sat 13 Jun 2026 01:01:47 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:47 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:47 +0000
Files and hashes:         1: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl (hash: KgJp2yY3gRCZQ+DDzzm2jMU424JlLDFQJfoypz8j6kU=)
                          2: w9Drqjy5pv-xgsWm0Hj9JX1HYxE.roa (hash: X6/QclUhRxI/QNNJjqFf+pxHUaHW1PpD7IKrBpkxN4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:d0:43:63:cc:0a:2a:45:d9:8c:c9:49:78:f4:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d982791736cdddd1328d0dd0decae92c058d6f25
        Validity
            Not Before: Jun 13 01:01:47 2026 GMT
            Not After : Jun 14 01:01:47 2026 GMT
        Subject: CN=27691e1f81adcd8198267706f56eccdd8af7f9d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:57:3f:2a:e7:13:56:54:96:84:8e:62:0f:3d:
                    62:53:e5:66:94:a4:d5:51:88:ee:1c:1f:fb:4a:64:
                    fb:61:8c:56:a4:16:03:fc:50:e8:0c:96:a0:4e:49:
                    2d:24:2f:55:19:5a:88:cc:5e:15:95:69:8c:6d:ac:
                    a9:d7:50:54:97:26:90:af:fa:a4:ca:4c:11:45:34:
                    b0:fc:93:4a:3d:16:2c:a4:b9:73:a8:4c:1c:54:a9:
                    be:8f:1c:eb:60:c6:4d:f6:24:56:26:fe:f4:18:e7:
                    0f:5b:41:af:9c:66:af:61:8e:5b:f1:15:ac:8c:1b:
                    26:bd:7c:e6:43:1b:23:32:3c:04:5b:05:e5:f2:ed:
                    b6:7f:ca:aa:6b:92:1d:75:9e:00:5c:72:50:c7:3b:
                    2a:c2:55:3f:61:ac:a7:1d:00:79:5f:e3:82:7d:e5:
                    de:a7:72:ce:7e:51:2c:27:be:a3:cc:9d:6d:39:a2:
                    f8:09:9f:21:6e:1e:98:38:b2:22:22:59:34:51:de:
                    13:4e:da:e3:f2:71:bc:91:57:63:10:1e:4f:8e:1a:
                    cf:26:41:22:fa:ee:16:4c:39:d8:9b:fd:fc:12:67:
                    f5:af:1e:e1:fa:0c:99:6d:b3:ad:c2:a6:8c:c6:30:
                    77:58:ad:d2:e5:cd:70:7c:b5:21:14:a5:59:6e:03:
                    89:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:69:1E:1F:81:AD:CD:81:98:26:77:06:F5:6E:CC:DD:8A:F7:F9:D8
            X509v3 Authority Key Identifier:
                keyid:D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:9d:be:82:3f:7b:4c:fd:fd:29:34:d8:78:b9:9d:ff:e0:0a:
         eb:8c:98:b4:97:76:c9:62:42:b6:86:61:3d:7e:03:c1:72:b1:
         bb:a0:e3:32:6d:e6:36:ea:f3:6a:14:58:26:d2:e1:c4:8e:8b:
         49:79:6b:40:c6:32:30:dc:b6:37:10:e7:64:d9:19:e8:4a:82:
         e6:05:74:39:4d:bf:28:52:b7:f5:32:aa:14:c0:a8:88:ee:d0:
         1b:69:a5:55:7c:3a:d3:fb:0e:ca:39:5b:3c:43:53:19:03:19:
         b6:eb:e3:7e:83:64:ea:a2:ab:23:3f:23:97:16:00:ca:13:c5:
         21:ec:55:40:26:d7:30:4a:69:2d:26:3f:c5:c9:58:37:56:23:
         14:0d:98:a1:dd:ce:3c:92:ff:12:01:f4:a0:de:a3:7b:29:11:
         6f:50:e9:3e:6f:2b:a8:bb:32:d4:64:6e:46:e4:8f:81:7f:ab:
         6c:78:ea:97:21:aa:76:31:71:f6:e5:b2:e2:6f:71:0c:b5:bc:
         a3:8b:53:19:85:ae:92:bd:c3:6d:66:07:e8:cc:fd:85:1f:5b:
         99:51:5f:ac:85:bf:72:ef:6f:9e:11:04:59:e6:f2:2c:ae:8d:
         72:2d:82:7d:85:e8:4f:a8:60:e8:a1:e4:08:8f:3b:0d:5b:70:
         0f:c3:d5:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+f9BDY8wKKkXZjMlJePSXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ODI3OTE3MzZjZGRkZDEzMjhkMGRkMGRlY2FlOTJjMDU4
ZDZmMjUwHhcNMjYwNjEzMDEwMTQ3WhcNMjYwNjE0MDEwMTQ3WjAzMTEwLwYDVQQD
EygyNzY5MWUxZjgxYWRjZDgxOTgyNjc3MDZmNTZlY2NkZDhhZjdmOWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Fc/KucTVlSWhI5iDz1iU+VmlKTV
UYjuHB/7SmT7YYxWpBYD/FDoDJagTkktJC9VGVqIzF4VlWmMbayp11BUlyaQr/qk
ykwRRTSw/JNKPRYspLlzqEwcVKm+jxzrYMZN9iRWJv70GOcPW0GvnGavYY5b8RWs
jBsmvXzmQxsjMjwEWwXl8u22f8qqa5IddZ4AXHJQxzsqwlU/YaynHQB5X+OCfeXe
p3LOflEsJ76jzJ1tOaL4CZ8hbh6YOLIiIlk0Ud4TTtrj8nG8kVdjEB5PjhrPJkEi
+u4WTDnYm/38Emf1rx7h+gyZbbOtwqaMxjB3WK3S5c1wfLUhFKVZbgOJtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdpHh+Brc2BmCZ3BvVuzN2K9/nYMB8GA1UdIwQY
MBaAFNmCeRc2zd3RMo0N0N7K6SwFjW8lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllKNUZ6Yk4zZEV5alEzUTNzcnBMQVdOYnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jMjEzZDQtM2U0YS00OWU2LTliMWYt
Y2E2YTFjYzgxYTIyLzEvMllKNUZ6Yk4zZEV5alEzUTNzcnBMQVdOYnlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jMjEzZDQtM2U0YS00OWU2LTliMWYtY2E2YTFjYzgxYTIy
LzEvMllKNUZ6Yk4zZEV5alEzUTNzcnBMQVdOYnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ52+gj97
TP39KTTYeLmd/+AK64yYtJd2yWJCtoZhPX4DwXKxu6DjMm3mNurzahRYJtLhxI6L
SXlrQMYyMNy2NxDnZNkZ6EqC5gV0OU2/KFK39TKqFMCoiO7QG2mlVXw60/sOyjlb
PENTGQMZtuvjfoNk6qKrIz8jlxYAyhPFIexVQCbXMEppLSY/xclYN1YjFA2Yod3O
PJL/EgH0oN6jeykRb1DpPm8rqLsy1GRuRuSPgX+rbHjqlyGqdjFx9uWy4m9xDLW8
o4tTGYWukr3DbWYH6Mz9hR9bmVFfrIW/cu9vnhEEWebyLK6Nci2CfYXoT6hg6KHk
CI87DVtwD8PVOQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:10:26 2026 by rpki-client