Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
File:                     ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft (raw, json)
Hash identifier:          6HCwrKuCGCabOb++NXvb/iE+u/031ZNKXaZ/u5Pgpho=
Subject key identifier:   C3:70:9F:50:13:28:F6:54:46:E2:AC:29:5D:55:11:74:A3:1B:83:04
Authority key identifier: CA:51:54:15:89:05:D1:D4:4C:45:88:DF:D2:58:02:F3:24:A9:3D:61
Certificate issuer:       /CN=ca5154158905d1d44c4588dfd25802f324a93d61
Certificate serial:       019EBE10994D00AAA1F35B91AF0ACD3BA3E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
Manifest number:          07B1
Signing time:             Fri 12 Jun 2026 23:00:19 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:19 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:19 +0000
Files and hashes:         1: 4okKBfXSNKomjqjfKSyXyfQW8mg.roa (hash: c/G+cvhNW3akdlAhAKvUtf/mU2MrPEwZm3MMXGbYwZo=)
                          2: jDQ8F_F11yNWOX6kbTNP0Ql0Wi8.asa (hash: a4/BoGxMxUQA6ejTQInWpx7OBve66J6mI7qjuV4Hb5Q=)
                          3: ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl (hash: K64gBTRAhz5WFR9IwN8jSsm2sJ45blg4OeKmQty4Hl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:99:4d:00:aa:a1:f3:5b:91:af:0a:cd:3b:a3:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca5154158905d1d44c4588dfd25802f324a93d61
        Validity
            Not Before: Jun 12 23:00:19 2026 GMT
            Not After : Jun 13 23:00:19 2026 GMT
        Subject: CN=c3709f501328f65446e2ac295d551174a31b8304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fa:31:a4:c8:81:26:21:5b:3d:12:bd:f2:a1:
                    7b:b1:78:91:b3:e0:55:70:1c:25:39:58:70:6a:49:
                    57:bb:7f:0d:c8:5e:00:b9:ad:62:9a:b1:c7:5e:4f:
                    a1:dd:b1:72:9a:4d:ac:39:5c:9d:02:6a:d9:33:b4:
                    6a:70:7e:ec:a0:e5:a4:13:be:c8:f7:58:b4:83:c1:
                    cc:d0:7c:62:19:01:44:5d:c5:82:62:97:d2:0d:e1:
                    79:f7:c0:eb:dc:bd:f0:1f:ce:f4:8d:33:d0:af:4c:
                    95:39:fa:17:34:2f:76:98:95:61:bf:92:a5:2b:4a:
                    7f:bf:88:22:4d:3f:82:49:d8:02:26:f7:6c:f5:ae:
                    d8:0c:ff:39:8a:e3:76:1f:46:e3:de:dc:77:4b:4e:
                    fd:f5:43:67:ed:ec:14:6b:1f:41:c7:eb:a9:39:aa:
                    c3:8e:06:b3:64:ae:dd:37:80:be:e4:1c:5d:b2:a3:
                    f1:de:31:51:cc:c2:9a:48:25:82:e7:4b:0c:3f:6e:
                    9e:9f:f7:ca:bc:c8:a2:e5:d7:f6:8e:0b:f4:0f:dd:
                    73:b7:c4:04:4a:5a:3e:2a:f2:d5:e8:1a:f0:11:c4:
                    23:f6:ec:9c:28:d6:b9:88:63:55:d3:41:9a:a1:d9:
                    23:df:20:e3:91:d5:31:3f:49:57:9b:20:93:bf:b5:
                    59:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:70:9F:50:13:28:F6:54:46:E2:AC:29:5D:55:11:74:A3:1B:83:04
            X509v3 Authority Key Identifier:
                keyid:CA:51:54:15:89:05:D1:D4:4C:45:88:DF:D2:58:02:F3:24:A9:3D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b6:b4:89:5f:46:8c:19:e1:b6:be:57:81:7f:47:1c:01:00:
         2f:a2:78:99:b7:8b:55:4e:2a:54:0e:fa:42:86:8e:bf:60:81:
         59:aa:51:03:20:73:cb:eb:1a:48:23:85:3e:2d:95:4f:da:c1:
         c7:af:c9:22:28:57:ce:dc:a9:d7:41:84:5a:2f:1c:42:60:1b:
         01:52:6c:2b:d7:f4:d0:7b:54:05:b1:74:7d:a6:9f:83:18:e2:
         8a:7d:f7:f3:fb:e3:90:e9:be:68:b9:13:85:b6:ce:3f:75:d5:
         f7:0a:a3:52:d8:d4:aa:3f:67:28:8f:0d:4b:ee:6f:40:a7:da:
         dc:d0:58:10:5d:81:44:56:7c:bb:25:10:a0:8c:fc:41:f8:92:
         31:61:48:9e:7e:b1:5b:b2:3c:59:73:b7:d6:ed:51:5e:4f:42:
         1a:e2:c2:34:83:31:4e:d1:f7:67:d6:b7:d4:5b:f6:be:7b:92:
         6e:1a:df:db:65:9c:35:e0:04:05:08:12:80:ad:b2:98:b5:1f:
         bc:88:9b:0e:85:a6:93:04:78:31:7f:78:f0:22:54:f2:6b:53:
         c1:5a:4e:a5:60:bf:5f:03:9e:86:6b:29:67:af:79:b9:14:75:
         d9:a6:3d:dd:6e:e9:d2:b4:a0:26:86:b5:29:7d:e7:44:0e:f0:
         af:3c:8a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:36:21 2026 by rpki-client