Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
File:                     YC8n-tkkUqJUswoGDtODsTx1jtY.mft (raw, json)
Hash identifier:          Rixt6Z3N9SG2PdbEXN3JYUEqnFEI2hZjCy44kWhl0Ts=
Subject key identifier:   0A:21:8E:E1:7B:82:17:79:A6:99:F4:54:D1:88:26:57:88:89:46:44
Authority key identifier: 60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6
Certificate issuer:       /CN=602f27fad92452a254b30a060ed383b13c758ed6
Certificate serial:       019EC3009A0930EC6218D6009A074259E78A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
Manifest number:          0BC0
Signing time:             Sat 13 Jun 2026 22:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:56 +0000
Files and hashes:         1: YC8n-tkkUqJUswoGDtODsTx1jtY.crl (hash: AeZ509XKIkzOYN/XFfkI5EsaQtz6NrnLjKB77tuJwN4=)
                          2: yjdYp8YMAtj2_Dytxy6NEaoV14M.roa (hash: /wldluyAt2xqR07lomlO0CgTxaAUVhzs9ZM3VW1cPGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 22:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:9a:09:30:ec:62:18:d6:00:9a:07:42:59:e7:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=602f27fad92452a254b30a060ed383b13c758ed6
        Validity
            Not Before: Jun 13 22:00:56 2026 GMT
            Not After : Jun 14 22:00:56 2026 GMT
        Subject: CN=0a218ee17b821779a699f454d188265788894644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4a:bb:42:c7:f6:a4:b9:7f:19:a1:47:14:84:
                    8a:7f:01:62:9a:07:16:cf:c6:e0:3f:2a:4f:7e:06:
                    b0:45:8b:c3:e3:b9:34:d4:83:b4:cb:07:63:53:b6:
                    96:88:85:22:c1:82:9b:dd:75:d2:42:8f:34:62:7b:
                    1f:3c:c7:78:76:cc:b7:0f:80:96:e3:aa:17:3b:6b:
                    da:25:bd:75:7b:ed:84:09:b2:d7:54:fd:58:5e:1f:
                    1e:ff:da:88:0c:ca:b0:b4:64:33:32:91:ac:58:da:
                    ef:8c:bd:d9:a9:2b:db:2b:ee:3a:e0:55:eb:fd:05:
                    ce:a8:3d:b5:43:09:8b:30:2f:7d:c9:c8:df:f4:08:
                    12:5d:4b:d5:cf:fa:13:2a:ea:57:bb:ef:fa:06:ee:
                    1a:cc:2b:4b:72:d4:b2:4e:93:8d:39:4e:7b:92:56:
                    8a:02:91:77:28:96:65:2a:95:4a:29:21:2d:ed:ea:
                    1d:88:f6:f1:f4:50:e9:ea:42:50:45:79:d6:66:ac:
                    f6:47:1f:88:e2:f9:83:f7:0d:e1:c3:6f:c0:0e:ee:
                    5e:4b:ce:ca:1a:e6:58:b4:cb:74:34:f4:80:07:b8:
                    de:9d:11:6b:dd:8f:86:7f:c0:d4:b5:0e:90:62:80:
                    7a:16:9a:80:39:c6:fa:fa:e9:4a:d4:9c:50:f2:67:
                    88:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:21:8E:E1:7B:82:17:79:A6:99:F4:54:D1:88:26:57:88:89:46:44
            X509v3 Authority Key Identifier:
                keyid:60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:83:ab:e1:79:cf:36:2e:83:93:b2:d2:9a:0f:85:69:bb:a8:
         0f:c1:00:49:82:c3:fc:37:59:c2:da:3b:49:3b:10:ce:da:0a:
         1d:20:f6:6a:89:a3:94:7a:78:ce:3f:c6:18:e6:76:91:26:2a:
         2c:fe:c1:86:e3:e3:ba:d3:85:f9:a1:a4:35:f1:51:92:0f:4d:
         44:7a:3a:4a:5a:47:e7:0a:35:77:f5:b4:69:76:29:19:79:20:
         94:d0:60:a3:f9:1b:49:42:eb:3e:52:38:58:f7:b8:dc:d5:44:
         f9:66:4c:71:be:06:1c:19:0b:1a:79:1a:8d:df:4e:29:16:d9:
         e6:b3:e1:47:00:64:87:f6:58:f4:5c:79:2e:62:c7:24:3c:ea:
         7a:c3:12:b8:af:33:99:0c:2e:1b:ed:e4:d6:1b:82:25:f7:fc:
         46:fe:bc:55:ac:35:37:93:e5:dd:e8:c7:ef:b0:c9:c7:2c:f4:
         a7:5c:15:de:23:08:0b:f0:c8:44:f0:13:5e:29:ce:eb:41:66:
         43:44:25:88:dc:8e:da:f6:e8:7c:80:0d:6c:31:54:af:c1:1e:
         a8:0d:24:bc:77:bb:e2:cf:1b:8c:76:44:7c:9f:7e:28:2e:cf:
         d8:78:09:35:23:35:1c:3b:aa:27:6b:78:75:0d:4d:29:2d:78:
         4d:34:16:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:11:03 2026 by rpki-client