Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
File:                     YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft (raw, json)
Hash identifier:          wJVMhQn2PT520/bOij+GjcX1tv2p1DaYhEZtXtkvA3Q=
Subject key identifier:   6A:99:E3:AF:CF:18:F5:53:E0:D7:E6:42:3D:CD:D0:9C:43:1B:1F:36
Authority key identifier: 61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
Certificate issuer:       /CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Certificate serial:       019EBFFF2C3C8B456A5A90DAB7E173DB5E98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 08:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:31 +0000
Files and hashes:         1: X_VAzsonJf2-Y0J7PUgtiVvr18s.roa (hash: omFujTcefEd3WWyYkvlLAE/INtwxFEvZh0pqgOeoURc=)
                          2: YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl (hash: NwZg+X/ovTruoPHyG0YACyyjTjxbtn7NN6WZAse6Tek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:2c:3c:8b:45:6a:5a:90:da:b7:e1:73:db:5e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
        Validity
            Not Before: Jun 13 08:00:31 2026 GMT
            Not After : Jun 14 08:00:31 2026 GMT
        Subject: CN=6a99e3afcf18f553e0d7e6423dcdd09c431b1f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f0:ad:02:0c:ef:5b:06:dc:4a:ea:d3:85:ca:
                    e6:b8:f9:6e:1e:d9:6a:8f:11:a6:aa:fa:b2:97:f1:
                    33:e4:5f:b8:66:f7:c2:db:ea:5a:77:17:e5:fc:8e:
                    13:71:c4:b6:8a:30:15:65:db:d3:ff:df:6a:bf:9e:
                    f4:3e:f6:86:26:a5:fb:54:23:f3:74:2e:c8:67:40:
                    24:22:f9:15:a5:63:3a:bf:f3:a4:40:d1:94:85:dc:
                    24:0c:0a:f6:e6:0b:e9:92:0c:4e:c4:b5:bf:15:84:
                    d4:b0:71:7d:ef:de:8e:cf:af:56:d2:2d:7a:ef:52:
                    e2:aa:da:85:3d:16:f4:e5:9d:a7:bf:df:09:53:f9:
                    cf:ce:fb:49:00:46:b3:4d:00:9e:25:aa:ce:c9:da:
                    79:a4:af:67:29:1d:d6:01:9c:8a:67:0a:c5:8f:e2:
                    02:3c:29:ec:0a:5b:c3:bc:7d:20:1b:de:63:6b:3b:
                    62:1c:70:d9:a1:a6:ff:a8:ec:0a:2f:e8:85:c5:36:
                    65:14:9f:9a:e9:a9:fb:a7:7b:d6:20:7e:39:cc:d5:
                    dd:ad:94:7a:1c:8e:f9:ab:cf:04:b1:ae:5d:63:7c:
                    23:a2:ae:44:6a:29:5f:26:f6:aa:0a:3c:48:55:14:
                    15:c8:dd:be:f5:33:1a:66:ac:ff:d2:bd:69:c2:95:
                    e7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:99:E3:AF:CF:18:F5:53:E0:D7:E6:42:3D:CD:D0:9C:43:1B:1F:36
            X509v3 Authority Key Identifier:
                keyid:61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:77:4a:f6:40:0e:eb:24:4d:c4:82:b4:7b:96:01:07:e2:88:
         d7:2a:ea:98:f4:90:e6:12:76:e5:77:6e:ad:7e:78:1b:e9:31:
         9b:38:ff:c5:02:b7:21:b6:15:d8:aa:85:61:04:89:d9:41:ef:
         b4:38:30:41:88:c6:a2:aa:42:55:8a:fa:97:6e:72:bc:e3:15:
         16:ef:a5:67:be:09:09:fc:f1:96:8e:e6:51:5d:34:b7:ea:5f:
         c9:14:8e:99:9d:18:4f:f4:b8:c9:43:5c:30:d5:c3:e4:51:3c:
         d0:f2:23:5a:d6:e3:90:f1:54:ee:fd:97:7b:4b:9a:98:78:f6:
         7d:4f:54:43:6e:df:28:90:90:94:22:90:5f:67:49:14:27:27:
         0a:18:af:52:b8:da:33:6c:f9:33:92:70:c6:70:6f:cf:49:ad:
         30:b5:4c:a9:bd:36:ab:38:7e:96:c2:7c:0e:f8:b3:e4:92:98:
         a9:1a:74:78:6b:07:30:d7:52:e4:59:2a:2d:74:a4:ed:ac:10:
         23:46:a1:5d:61:3a:b8:b3:c4:94:d9:50:26:70:3c:89:c7:39:
         0a:5d:a3:a7:4e:75:e3:d2:2f:69:6f:7e:fc:73:9e:61:03:24:
         db:80:e4:52:23:eb:de:11:84:36:5b:81:45:02:d1:5c:07:a6:
         fd:dd:e1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:33:18 2026 by rpki-client