Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
File:                     ypJvljURiT-k2fvV5k4PikODfkA.mft (raw, json)
Hash identifier:          jJ+wxHSt+FBMxQhfSQJ5J+rG7/linbDJUxm1oeKuI/E=
Subject key identifier:   8B:79:5D:E4:52:3A:BE:84:3D:70:D9:CC:01:99:D8:D5:45:A3:57:23
Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
Certificate issuer:       /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Certificate serial:       019EBE7F1748A1187E21470C9D2F9D778858
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 01:01:00 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:00 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:00 +0000
Files and hashes:         1: 8qyFq0Jw2vV5jElWSS9BdEiMHZI.roa (hash: v/1+49rt+1xmD87nJbTdyd9Pwk6XUeag3Zc7Vhx+XuE=)
                          2: ENuqnzA3ruRTEDO8nV_unXXFG3s.roa (hash: jqM94Qjxb5BwlTK0O468kBtFYUuLS+gQcO3XoaFwmmI=)
                          3: roAOVMvnNsfrpVkf2GW7F0kGBAc.roa (hash: IkSo7h5qyB5UPtAZ0suaOuHLsEp0jVopR3VGK0uOiaE=)
                          4: ypJvljURiT-k2fvV5k4PikODfkA.crl (hash: NmzuzVBxuHd3GdgxnnkvVkBvEpb1u3N4nF4XZRyp5Kw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:17:48:a1:18:7e:21:47:0c:9d:2f:9d:77:88:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
        Validity
            Not Before: Jun 13 01:01:00 2026 GMT
            Not After : Jun 14 01:01:00 2026 GMT
        Subject: CN=8b795de4523abe843d70d9cc0199d8d545a35723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:20:fc:51:f8:f7:36:8e:02:ab:43:32:01:
                    8a:2e:fa:85:41:a7:28:67:08:5d:4b:d3:c8:aa:79:
                    96:cf:0c:f9:9e:ff:2f:78:3a:a7:21:1f:b9:31:cd:
                    10:ae:02:aa:72:0f:6e:f7:92:85:c0:84:70:b3:06:
                    88:c4:fb:fa:a5:7a:d6:d3:53:4c:99:cf:bf:dd:ae:
                    d9:74:4e:97:42:6d:da:88:e9:9a:0e:b2:96:b4:12:
                    fd:27:64:aa:c8:57:4f:07:bb:65:b5:99:f7:01:38:
                    6b:bb:ab:d5:6c:e5:f9:aa:64:81:f5:95:79:49:e1:
                    c2:8b:73:f6:90:07:f4:82:fc:37:7f:82:b8:61:9e:
                    05:87:d4:07:01:8e:63:54:e2:d6:64:85:c2:be:18:
                    d6:a2:9e:87:e6:9c:5b:ed:b5:65:19:37:1a:1a:85:
                    77:f1:c7:1b:d6:a6:3a:4a:24:2a:89:e4:09:34:ef:
                    22:86:dd:18:7f:35:a0:22:0d:30:2a:e9:02:8a:50:
                    d7:60:28:3e:fc:10:d6:6e:af:f6:15:08:ed:9a:65:
                    6f:37:aa:07:bf:dc:da:da:26:cb:30:96:b2:2b:c8:
                    9d:ea:1a:07:b4:73:13:d8:67:2f:f9:10:12:86:2f:
                    8c:46:6d:6e:c2:cf:3a:cb:58:49:52:74:f3:bb:d1:
                    8a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:79:5D:E4:52:3A:BE:84:3D:70:D9:CC:01:99:D8:D5:45:A3:57:23
            X509v3 Authority Key Identifier:
                keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:74:86:e6:e9:97:1b:fd:72:d3:0e:22:22:eb:82:8f:26:29:
         c8:29:05:e4:fd:20:46:80:0a:25:df:d9:6c:4f:20:81:dd:4e:
         cd:fc:f3:58:22:47:bb:69:20:b9:08:f5:dd:c0:15:46:02:0e:
         9d:5f:1d:ad:10:e9:06:b0:98:7f:9e:6f:5d:89:57:a1:66:a2:
         49:20:27:62:25:25:12:eb:7c:9f:f2:40:56:a2:c2:78:5d:97:
         b8:c0:d0:8e:8c:43:70:e2:05:13:db:65:82:2f:3a:d5:7b:3d:
         15:8f:17:8c:77:cf:17:55:45:33:37:72:cf:16:49:2d:09:38:
         db:88:2f:66:05:a6:23:fb:32:54:8e:be:44:9f:8e:22:38:ae:
         e1:36:88:1f:4a:70:fb:d1:92:f0:1a:f2:49:d7:44:bb:36:89:
         e9:99:49:76:7b:29:8e:d8:6a:28:9b:92:1a:41:0d:95:18:64:
         c0:54:89:b7:b4:ff:99:32:c6:fc:e0:74:c4:b5:5e:50:5f:82:
         71:07:dc:11:5c:f4:57:9c:fa:da:d7:2f:65:2a:69:8f:a4:d9:
         e1:b8:dc:f4:c4:e5:be:86:15:26:de:25:6a:60:45:78:4e:2f:
         07:b2:f5:a8:5d:08:d2:04:2e:16:b4:d8:16:d2:fe:3a:25:95:
         ff:90:c0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:22:42 2026 by rpki-client