Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
File:                     yA3IsMZQm8dryF5n9D7giooUyXU.mft (raw, json)
Hash identifier:          nsBaz1260YffwMthoszgBzFFFhZ4jNE3IEqFSEyryJw=
Subject key identifier:   69:C8:FC:2B:12:51:1B:AE:F1:57:22:28:2B:89:E8:DE:94:D4:1A:E2
Authority key identifier: C8:0D:C8:B0:C6:50:9B:C7:6B:C8:5E:67:F4:3E:E0:8A:8A:14:C9:75
Certificate issuer:       /CN=c80dc8b0c6509bc76bc85e67f43ee08a8a14c975
Certificate serial:       019EB7A0DEFB652C1F6592EDC12265438CAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yA3IsMZQm8dryF5n9D7giooUyXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
Manifest number:          53
Signing time:             Thu 11 Jun 2026 17:00:33 +0000
Manifest this update:     Thu 11 Jun 2026 17:00:33 +0000
Manifest next update:     Fri 12 Jun 2026 17:00:33 +0000
Files and hashes:         1: cpmgiH1BslsxBNjDBIkAI1gHkq4.roa (hash: 7HS2B/w6P1YHari4czqglwcerA3k27fD3l3Bj3QIfa4=)
                          2: yA3IsMZQm8dryF5n9D7giooUyXU.crl (hash: z5/gp65psRUTuvEBVrIa4NoEEpJqCBWQwLGk+eoByI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yA3IsMZQm8dryF5n9D7giooUyXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a0:de:fb:65:2c:1f:65:92:ed:c1:22:65:43:8c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c80dc8b0c6509bc76bc85e67f43ee08a8a14c975
        Validity
            Not Before: Jun 11 17:00:33 2026 GMT
            Not After : Jun 12 17:00:33 2026 GMT
        Subject: CN=69c8fc2b12511baef15722282b89e8de94d41ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1c:68:27:8f:20:72:75:e8:6a:4e:53:e5:8b:
                    9c:60:d0:15:a5:6f:ec:ee:59:c8:a0:b1:f3:58:04:
                    bd:dc:a3:af:a7:ad:55:14:a7:be:bf:59:ce:0d:b7:
                    61:54:69:58:58:b2:3b:96:45:24:00:e8:61:16:9c:
                    3c:cf:c7:a6:68:07:b6:67:b1:c9:2a:8f:8b:97:74:
                    6b:78:c8:78:a2:3e:dd:6d:42:69:53:7a:24:4b:8a:
                    47:70:27:ab:12:cb:ff:31:9d:0a:3a:97:2b:f5:8e:
                    96:0c:f6:0e:79:c5:4e:6f:31:25:a7:fa:f0:5d:f3:
                    ef:cc:72:a5:7c:c9:85:b8:e1:9c:e9:ba:3e:e9:9c:
                    be:9e:8f:93:5b:12:dc:5b:00:ab:04:d1:e2:d5:4c:
                    9b:a3:b3:ed:04:85:c2:63:3f:38:0a:0e:0b:ce:cd:
                    21:3a:9f:d3:cd:d8:10:e5:fe:21:77:c6:b0:8b:9b:
                    05:c4:1c:06:da:3f:80:51:d0:13:ec:5e:f4:b0:73:
                    64:95:9e:46:76:12:94:ce:d2:86:4c:6a:d8:77:71:
                    df:bb:3e:6e:ed:62:8b:03:67:c4:aa:06:94:9b:c0:
                    f9:fe:62:53:5c:62:af:4a:10:2e:5f:ce:ab:79:42:
                    d2:3e:7b:38:50:13:d8:75:bc:2b:c5:27:9b:66:f1:
                    b2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C8:FC:2B:12:51:1B:AE:F1:57:22:28:2B:89:E8:DE:94:D4:1A:E2
            X509v3 Authority Key Identifier:
                keyid:C8:0D:C8:B0:C6:50:9B:C7:6B:C8:5E:67:F4:3E:E0:8A:8A:14:C9:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yA3IsMZQm8dryF5n9D7giooUyXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:59:38:08:1b:b6:94:7c:dd:97:c9:fa:28:2b:52:8c:a9:73:
         53:a2:3d:66:f4:e0:c8:aa:2e:23:6b:34:cf:41:b2:a8:6f:00:
         c7:24:9f:7c:e0:fc:dd:e4:e7:a1:bb:03:09:e4:a3:fc:d8:db:
         cb:c3:ad:8a:f1:f6:57:be:01:74:29:ea:b5:b9:ba:82:1b:bd:
         82:6a:42:e5:31:69:73:28:a7:e4:c7:91:b1:33:7a:d3:f3:82:
         8c:42:d0:df:e8:69:d0:79:8f:43:ec:ba:df:17:6e:7d:79:47:
         be:f4:ee:19:b5:01:f5:33:f0:32:58:80:a0:f3:05:53:15:b8:
         bc:1c:81:29:44:ec:44:63:17:bb:30:f1:dd:44:58:f6:49:f7:
         e6:42:9f:27:d3:cc:cc:1e:d1:5f:b3:88:9b:cb:83:9b:34:03:
         fb:c8:a9:ad:7b:d2:94:6e:bb:f6:c3:5f:9e:bc:62:a2:e5:2a:
         dc:ab:b0:a4:6a:da:53:c3:0e:ef:42:14:59:f3:2c:03:aa:2a:
         94:0d:ff:a6:62:5d:46:0e:9e:8a:c0:77:1e:33:55:0d:55:cf:
         38:4d:b8:74:3a:80:02:52:eb:18:f0:f6:8b:d3:7a:f4:07:45:
         05:af:76:e4:ba:9a:f6:6a:cf:e4:00:9f:45:1f:72:14:3e:7f:
         26:4b:4e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:32:25 2026 by rpki-client