Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
File:                     YAJlJf1EpPx1siRPgNAiY09fdjU.mft (raw, json)
Hash identifier:          KFj+ExdDKj/C3B6jnOHr+4oC+jNDfZ8Vf3XmPyS1pg4=
Subject key identifier:   FD:B5:6C:D5:E3:86:9C:DE:D0:31:7F:67:D3:27:7D:90:F1:53:96:85
Authority key identifier: 60:02:65:25:FD:44:A4:FC:75:B2:24:4F:80:D0:22:63:4F:5F:76:35
Certificate issuer:       /CN=60026525fd44a4fc75b2244f80d022634f5f7635
Certificate serial:       019EC17FE0BADC0507DE8D70829AEC3D6C4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
Manifest number:          0353
Signing time:             Sat 13 Jun 2026 15:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:43 +0000
Files and hashes:         1: 1sBpsAgGmSmkI2DNNDGh5oQcGy8.roa (hash: hMp3WaNL7UAirQa4ZKu/uxZXkQM56eznsw/jc56uSx4=)
                          2: YAJlJf1EpPx1siRPgNAiY09fdjU.crl (hash: 3kfvoJx4/WImKqJWoctvkNqHLA1v904vZaHlJXBKzrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:e0:ba:dc:05:07:de:8d:70:82:9a:ec:3d:6c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60026525fd44a4fc75b2244f80d022634f5f7635
        Validity
            Not Before: Jun 13 15:00:43 2026 GMT
            Not After : Jun 14 15:00:43 2026 GMT
        Subject: CN=fdb56cd5e3869cded0317f67d3277d90f1539685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2c:a0:aa:3a:d2:b1:c4:ae:eb:53:25:67:14:
                    10:43:a5:5e:2c:df:90:bd:42:47:a1:4c:22:fd:34:
                    5e:23:dc:23:64:6b:8c:e5:bd:0f:fe:b9:0f:f5:cf:
                    11:f9:68:ac:9e:77:8d:be:ca:d6:1e:2c:46:26:2f:
                    4d:fd:94:ed:07:cc:47:e9:36:0c:1d:4f:ad:38:aa:
                    dd:53:ed:ad:ef:38:4d:bb:38:3d:f1:35:4a:84:df:
                    b5:b7:0e:9d:e6:e8:48:35:06:02:2f:24:7a:82:b8:
                    06:ca:54:00:35:7c:fb:64:91:32:3a:99:6e:b1:c5:
                    88:75:e3:b5:76:a8:ec:73:de:1e:dd:6d:66:29:72:
                    23:42:bd:16:08:84:da:c3:0c:97:db:54:f3:b7:86:
                    df:d0:4c:8f:99:99:4a:58:0f:ab:63:7d:76:5f:99:
                    39:67:74:66:2f:95:ef:00:5e:f1:ee:6f:89:74:d4:
                    56:5b:4a:7a:07:68:8e:5a:66:36:70:ef:4d:84:6e:
                    ae:b1:c0:a9:64:cd:76:5e:a9:3f:f9:37:2c:74:12:
                    1b:23:55:a9:f9:b5:d4:d3:9d:05:cf:1f:8b:34:18:
                    fe:61:ef:37:de:0c:e2:52:95:f8:d2:18:c6:84:01:
                    55:16:6b:c8:18:45:1f:47:1d:e9:00:60:b7:30:11:
                    5a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B5:6C:D5:E3:86:9C:DE:D0:31:7F:67:D3:27:7D:90:F1:53:96:85
            X509v3 Authority Key Identifier:
                keyid:60:02:65:25:FD:44:A4:FC:75:B2:24:4F:80:D0:22:63:4F:5F:76:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:4e:69:42:01:ae:4f:59:13:04:7d:54:fc:b9:22:b6:03:f3:
         a0:bf:87:8f:c2:2b:c6:47:1d:ed:6d:a8:f4:57:d9:57:f1:9d:
         29:e0:0b:9b:90:d2:46:bd:a0:2f:14:f7:6c:1c:de:99:45:4a:
         b6:46:ad:95:0b:df:b5:fa:01:09:50:97:a1:74:2d:97:8f:25:
         24:81:81:5f:bf:8e:e7:03:dc:5c:00:0d:93:af:53:9c:5f:d1:
         3f:fe:b3:74:1a:97:b9:e2:d8:16:9e:9d:90:3d:af:a0:91:b1:
         ad:59:fb:48:52:35:e0:e9:43:bd:b9:5c:f1:0b:1d:c2:fb:c0:
         3e:74:92:97:c8:a1:b0:61:0a:0a:10:c0:a8:eb:ed:17:65:ae:
         44:9f:61:d5:f3:e9:22:5c:90:fa:6a:1a:a8:e2:cb:e5:b5:84:
         b6:1b:29:80:c8:a3:6d:15:ad:38:ad:db:14:2b:70:56:ad:1f:
         ec:66:e5:bc:a4:b0:98:04:cb:37:db:04:a8:6d:33:f8:87:fe:
         e4:2f:e6:47:b7:a5:e8:c3:46:a2:f2:f2:7d:21:52:0f:28:9f:
         18:6b:63:cc:9d:c3:c2:49:9e:ff:90:dd:a2:50:49:0b:7b:05:
         53:74:c2:f8:d4:27:6a:d0:cf:35:1f:01:f2:31:13:59:97:40:
         a5:49:79:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:44:19 2026 by rpki-client