Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
File:                     yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json)
Hash identifier:          pZis0BQrUzZ8UlZUxnJJBkBW1KUjisoygTMvG7XZ5eI=
Subject key identifier:   74:78:43:35:C7:72:3E:54:EF:0D:AA:77:F3:1C:AA:B6:70:81:24:A3
Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
Certificate issuer:       /CN=c8184a4505b0576058fd333059bff153ae6ead5b
Certificate serial:       019EB9FCF877DE6EA454E5659ACD5D89E0AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
Manifest number:          108C
Signing time:             Fri 12 Jun 2026 04:00:24 +0000
Manifest this update:     Fri 12 Jun 2026 04:00:24 +0000
Manifest next update:     Sat 13 Jun 2026 04:00:24 +0000
Files and hashes:         1: WZPWcS6HaU2HzVdr7DRxZ-pjOJE.roa (hash: F58q4gWz10PJi3pePWbZTjvTAbHmgaZfqkLlGVghmM0=)
                          2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: kyurc/gmosv/mtCXUmXnDXXHQEhG5yI5/+2BXuSvtSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:fc:f8:77:de:6e:a4:54:e5:65:9a:cd:5d:89:e0:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b
        Validity
            Not Before: Jun 12 04:00:24 2026 GMT
            Not After : Jun 13 04:00:24 2026 GMT
        Subject: CN=74784335c7723e54ef0daa77f31caab6708124a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:67:ed:86:25:bb:3a:58:93:aa:7a:e7:c7:3e:
                    86:ad:e5:bf:d6:97:7a:54:12:72:63:2e:ff:9f:18:
                    c4:4e:ac:09:01:6e:87:5a:a4:83:c0:7f:05:db:bf:
                    fe:8c:80:3b:97:28:de:b8:f5:f2:b1:2a:89:71:65:
                    38:fa:d9:21:59:a7:47:a3:2f:f2:f9:69:e3:46:98:
                    50:52:16:ed:96:51:7b:73:c3:c2:9c:34:91:57:60:
                    f6:69:f4:42:84:1a:d8:16:9f:0f:d3:47:76:39:bb:
                    ca:e6:5c:85:c4:40:2a:25:c6:46:1f:a2:e1:c9:89:
                    4f:a5:7c:de:d8:84:66:1b:ea:33:56:b0:69:83:3b:
                    2f:37:b5:18:a5:eb:a9:be:24:04:0c:b3:af:98:52:
                    4b:2c:90:8b:4b:85:13:df:94:1f:24:84:73:b8:92:
                    49:ce:2c:cd:aa:b7:bf:b4:05:4b:e9:da:83:97:18:
                    82:b2:0e:e9:89:81:81:82:70:49:25:ab:12:7e:23:
                    3f:d4:f5:b5:89:42:a7:ca:f3:a6:60:a1:0e:64:2a:
                    3c:1f:1e:fa:ad:18:4a:d7:c3:f6:5d:7f:e3:97:85:
                    c6:05:1b:b7:12:d0:a7:f5:12:32:87:7b:7b:10:fa:
                    92:84:f0:70:0e:70:29:30:39:a5:27:76:d9:4f:06:
                    5b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:78:43:35:C7:72:3E:54:EF:0D:AA:77:F3:1C:AA:B6:70:81:24:A3
            X509v3 Authority Key Identifier:
                keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ea:21:a7:be:c3:3b:19:83:09:25:dd:c2:c4:f0:18:ec:d3:
         ab:59:a7:a5:00:40:91:f4:2d:e7:a9:23:15:8b:ec:e2:4a:91:
         ec:32:8c:ac:3c:d9:be:16:37:62:6a:28:91:4f:7d:f7:0f:3c:
         22:a0:32:4e:82:68:da:17:f6:f9:c2:d3:32:22:74:ae:be:b6:
         8c:48:79:6a:97:8c:a7:6e:e9:a3:8e:31:b3:1e:f1:d5:b1:06:
         b9:55:54:c2:d6:04:43:f7:9a:06:50:1c:dc:78:a4:88:c6:7c:
         ec:58:1a:6d:88:99:21:c8:95:69:64:48:91:77:6d:ee:54:11:
         3f:23:81:88:00:70:e4:ad:20:b4:fd:1a:fc:28:c6:90:d5:7e:
         ea:6d:69:71:82:53:56:16:e5:23:7e:c6:3a:0c:2e:f5:ac:3c:
         7e:77:a1:10:69:1c:e5:d7:7f:a8:21:8c:fb:37:5e:20:4a:b6:
         a4:cf:31:06:0e:5f:f6:2a:38:8b:74:ab:cd:d6:e4:6b:67:b1:
         0e:5c:de:f9:db:2b:b7:ef:b7:34:a8:86:07:50:39:40:c3:6e:
         f6:e4:32:25:69:72:08:39:68:d0:fb:0f:5f:26:46:65:e5:f7:
         5c:8e:91:b9:d2:56:ec:33:e3:79:df:39:64:10:ca:6e:2a:07:
         78:3c:d5:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65/Ph33m6kVOVlms1dieCvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MTg0YTQ1MDViMDU3NjA1OGZkMzMzMDU5YmZmMTUzYWU2
ZWFkNWIwHhcNMjYwNjEyMDQwMDI0WhcNMjYwNjEzMDQwMDI0WjAzMTEwLwYDVQQD
Eyg3NDc4NDMzNWM3NzIzZTU0ZWYwZGFhNzdmMzFjYWFiNjcwODEyNGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGfthiW7OliTqnrnxz6GreW/1pd6
VBJyYy7/nxjETqwJAW6HWqSDwH8F27/+jIA7lyjeuPXysSqJcWU4+tkhWadHoy/y
+WnjRphQUhbtllF7c8PCnDSRV2D2afRChBrYFp8P00d2ObvK5lyFxEAqJcZGH6Lh
yYlPpXze2IRmG+ozVrBpgzsvN7UYpeupviQEDLOvmFJLLJCLS4UT35QfJIRzuJJJ
zizNqre/tAVL6dqDlxiCsg7piYGBgnBJJasSfiM/1PW1iUKnyvOmYKEOZCo8Hx76
rRhK18P2XX/jl4XGBRu3EtCn9RIyh3t7EPqShPBwDnApMDmlJ3bZTwZb8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHR4QzXHcj5U7w2qd/McqrZwgSSjMB8GA1UdIwQY
MBaAFMgYSkUFsFdgWP0zMFm/8VOubq1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lYWRhZDMtY2VkOS00MWZhLThlNWYt
NWZiZjMzYWNkODNlLzEveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9lYWRhZDMtY2VkOS00MWZhLThlNWYtNWZiZjMzYWNkODNl
LzEveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdOohp77D
OxmDCSXdwsTwGOzTq1mnpQBAkfQt56kjFYvs4kqR7DKMrDzZvhY3YmookU999w88
IqAyToJo2hf2+cLTMiJ0rr62jEh5apeMp27po44xsx7x1bEGuVVUwtYEQ/eaBlAc
3HikiMZ87FgabYiZIciVaWRIkXdt7lQRPyOBiABw5K0gtP0a/CjGkNV+6m1pcYJT
VhblI37GOgwu9aw8fnehEGkc5dd/qCGM+zdeIEq2pM8xBg5f9io4i3Srzdbka2ex
Dlze+dsrt++3NKiGB1A5QMNu9uQyJWlyCDlo0PsPXyZGZeX3XI6RudJW7DPjed85
ZBDKbioHeDzVpw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:52:28 2026 by rpki-client