Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
File:                     yAYJ8hhRvff3TtGPDwnfku23U1U.mft (raw, json)
Hash identifier:          zzRMmNlqEppm7wAe5hcICroa3FZLTykWkcQfL3HONOM=
Subject key identifier:   EF:D9:FE:20:AF:96:B0:24:85:2A:38:BD:67:5A:47:53:82:70:7A:78
Authority key identifier: C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
Certificate issuer:       /CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Certificate serial:       019EB8B48D8DB37B7C2AF80402B0E966BD92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
Manifest number:          111B
Signing time:             Thu 11 Jun 2026 22:01:40 +0000
Manifest this update:     Thu 11 Jun 2026 22:01:40 +0000
Manifest next update:     Fri 12 Jun 2026 22:01:40 +0000
Files and hashes:         1: 7dhm2Zcd4Yp-TNCgcfPEdG07eU0.roa (hash: Ku59KYA/bpOTiSrNCRzEUdSrtiwxD1BQ8G4rzI5+xwk=)
                          2: yAYJ8hhRvff3TtGPDwnfku23U1U.crl (hash: MK91xlfTBRNHxSbszJiBLy2WZWS+JuH6/L0pUqtyZ1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b4:8d:8d:b3:7b:7c:2a:f8:04:02:b0:e9:66:bd:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c80609f21851bdf7f74ed18f0f09df92edb75355
        Validity
            Not Before: Jun 11 22:01:40 2026 GMT
            Not After : Jun 12 22:01:40 2026 GMT
        Subject: CN=efd9fe20af96b024852a38bd675a475382707a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:de:1c:79:b3:3c:67:b8:33:8a:97:aa:24:a0:
                    66:02:80:c7:b3:e2:a6:66:3c:62:e6:32:e1:89:56:
                    cc:72:01:2d:8a:d9:e4:68:32:ed:df:61:e1:17:fd:
                    a5:e8:a1:61:8b:53:98:04:28:94:09:a3:ca:1a:86:
                    b8:57:36:05:49:e8:76:f2:16:8e:16:38:a6:3b:b9:
                    d1:a0:8a:a8:69:6b:cc:a2:8e:cb:a8:50:57:87:f5:
                    ad:34:a1:93:0d:f5:8d:4b:8f:96:1d:5f:e4:dc:ec:
                    89:c3:05:e6:98:07:67:77:fa:90:d7:46:22:de:de:
                    0e:bc:fd:da:f0:52:ab:72:1f:7c:8b:27:14:8b:e9:
                    f9:02:58:0d:ba:a0:e7:fd:45:f7:d7:9b:46:36:52:
                    17:ae:80:5e:45:4d:61:1a:0f:9d:37:c5:aa:4b:a7:
                    45:95:ee:3b:cb:72:cb:95:fd:db:65:83:72:fa:77:
                    71:f4:31:6b:d4:30:2d:a9:dd:a6:f3:b8:f6:65:d1:
                    23:4b:d6:f5:5e:d1:ad:c1:25:27:af:36:b9:83:62:
                    fb:f6:14:9f:6f:16:43:32:eb:a5:6c:05:b7:13:e7:
                    ce:09:5f:f2:d5:f4:5c:88:3b:0a:75:98:d2:65:b2:
                    23:e8:42:72:eb:df:fc:22:57:bf:a4:9e:82:08:97:
                    17:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D9:FE:20:AF:96:B0:24:85:2A:38:BD:67:5A:47:53:82:70:7A:78
            X509v3 Authority Key Identifier:
                keyid:C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:0b:c9:cb:96:fa:d8:b3:df:fd:21:bb:13:f5:9d:6e:02:dd:
         ef:b1:d7:2d:2c:63:5c:c6:fe:5f:3d:84:e2:a1:6f:5f:fa:24:
         54:59:53:f8:bc:d0:6b:88:f8:a8:fa:a4:6a:91:b0:a0:8c:8c:
         d1:8f:f6:4f:69:44:fc:6d:e1:2e:ea:53:db:dc:94:f9:f7:5e:
         9e:39:54:9a:7d:19:ba:06:21:19:9e:91:e8:c7:1d:44:9b:ee:
         c5:a0:07:3c:03:8f:12:d2:a5:7a:2d:dc:f5:54:a5:31:00:d2:
         c5:80:bf:13:e7:13:24:2b:0f:85:a4:a7:84:5e:06:50:ca:9e:
         02:ea:48:0e:dc:e2:f3:29:d5:b6:26:e9:2e:b8:bb:78:52:45:
         48:b4:42:1d:0b:71:b0:e2:dc:05:7e:ac:8c:49:61:3b:0c:82:
         42:f8:77:6c:3a:d9:bc:c0:de:e8:4d:00:e8:2d:d1:5e:0d:86:
         cc:64:c3:42:ea:25:36:fc:52:75:aa:a4:15:38:d4:fd:f7:09:
         56:14:40:23:86:2e:22:0c:4e:27:d0:9e:3b:50:3e:c6:83:46:
         04:d1:a0:ba:25:8f:96:7e:71:f6:98:00:a4:d8:93:ec:65:f4:
         84:d7:b9:fc:0c:de:97:9e:5b:7c:6b:4f:a0:2e:e5:d9:a4:1f:
         67:cd:8c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:44:35 2026 by rpki-client