Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
File:                     yFP7eYikLzmDixx_nwQAaS6Sldc.mft (raw, json)
Hash identifier:          W9O8+0ygS5p3d9ZwRXC8vZnuPKNRZYzzItq7lGPSk6I=
Subject key identifier:   47:0C:15:B0:6F:C6:54:53:BC:81:1F:61:D7:E8:22:CF:D4:72:BD:8E
Authority key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
Certificate issuer:       /CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Certificate serial:       019E90939931CEA555734CD50E44167306F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
Manifest number:          04B4
Signing time:             Thu 04 Jun 2026 03:00:52 +0000
Manifest this update:     Thu 04 Jun 2026 03:00:52 +0000
Manifest next update:     Fri 05 Jun 2026 03:00:52 +0000
Files and hashes:         1: TTJb2RAURlKPWvYkNwaWkyT09qY.roa (hash: lOE8Ruv9RewYP7cpvq3aqRSVFYYOIUiYC9/cShdcpDM=)
                          2: Y6tlWJsn2-eO2pGWaQiPAUkPW7g.roa (hash: uARQVpL4FEL+I59HsU9UtUVf5F4ZPPjEs1mpi4DNxXs=)
                          3: yFP7eYikLzmDixx_nwQAaS6Sldc.crl (hash: JgeeQdGdI3PWrtLca/twHPIyA5W3EQWqmc4NXjVr9OY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:90:93:99:31:ce:a5:55:73:4c:d5:0e:44:16:73:06:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
        Validity
            Not Before: Jun  4 03:00:52 2026 GMT
            Not After : Jun  5 03:00:52 2026 GMT
        Subject: CN=470c15b06fc65453bc811f61d7e822cfd472bd8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7d:94:bc:f7:d5:95:66:a8:d9:45:41:30:4e:
                    b9:90:f2:93:03:45:80:05:fc:33:af:3c:11:0e:95:
                    76:f0:92:14:3f:d7:7c:d8:c0:be:97:33:17:10:8b:
                    cd:54:33:d9:05:ac:2b:37:ba:a9:bf:fd:71:36:44:
                    fc:11:de:57:15:02:83:da:93:2b:dd:85:6a:f2:cf:
                    14:e0:18:79:52:4b:42:2b:a5:b4:3a:de:39:1e:89:
                    ec:8a:ba:9f:c5:d9:9f:09:7b:ac:1e:7a:5a:47:77:
                    4f:22:ef:31:07:2a:19:0b:a2:45:07:06:37:ea:8e:
                    74:d6:13:d4:73:29:d2:db:a0:31:e6:4d:b4:18:63:
                    b4:8c:ce:58:16:ac:75:60:5f:b4:6a:e4:78:90:1d:
                    23:92:ec:9d:4e:6e:f7:00:42:e3:7d:45:16:c7:8c:
                    7f:19:85:6f:21:52:a2:26:05:c9:61:1e:62:8e:cf:
                    b5:7f:b8:3d:bb:ba:42:ce:17:e1:5e:66:f8:b5:41:
                    82:67:bf:61:0e:55:f3:85:e9:83:16:97:70:9a:9d:
                    81:99:1d:f4:f5:37:f4:5d:4d:d9:de:f7:55:84:24:
                    e8:05:c5:1c:2b:e9:8e:0c:1f:ff:55:d4:ea:a4:f7:
                    01:ef:b1:8e:7f:47:e4:e0:0e:e6:b4:f1:90:fa:17:
                    74:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0C:15:B0:6F:C6:54:53:BC:81:1F:61:D7:E8:22:CF:D4:72:BD:8E
            X509v3 Authority Key Identifier:
                keyid:C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:43:57:49:8c:05:25:86:a8:40:ee:7a:04:09:42:48:82:81:
         21:ac:94:7f:1a:a4:91:62:04:c0:b8:6c:77:22:21:ef:a2:f0:
         50:49:37:51:b0:f7:70:66:82:b9:5e:59:5d:d6:bf:35:83:8e:
         31:b1:8c:eb:d7:13:27:4a:c0:bb:57:75:bf:3a:3b:26:81:0f:
         1b:87:17:00:04:82:02:8b:3c:42:26:28:fd:79:cf:57:7c:68:
         9e:d0:0b:1a:26:48:6e:3d:72:f4:a5:e5:1a:41:15:c8:87:d1:
         da:7a:0a:8c:a5:21:9b:e7:20:0b:c1:84:62:dc:b0:88:17:4e:
         3c:cd:37:9f:73:aa:79:83:4b:02:0b:02:c2:56:b6:97:e3:e4:
         c3:1e:67:c2:18:ea:7f:27:75:49:3e:2a:1e:85:de:94:f5:ef:
         3c:e4:eb:e9:b0:68:77:4d:0f:02:d0:86:ff:5a:80:41:ea:4c:
         8b:71:8c:16:61:32:b7:54:d5:2c:11:39:43:66:a1:36:eb:6d:
         af:3b:7b:a3:63:ad:dc:eb:f4:f2:44:46:92:63:a1:fa:6d:37:
         92:f0:84:c7:b6:6a:a9:f2:d6:b7:55:24:9c:65:86:87:32:d5:
         66:4c:9b:ec:32:b2:48:25:fc:1e:73:17:9f:93:19:16:cc:3e:
         06:31:47:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:14:13 2026 by rpki-client