Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
File:                     yteUrGAc4lBbZfl1p9UWovAKWzE.mft (raw, json)
Hash identifier:          rD/1lDMicp5Ls+Mc+UXOT0Fg6+FMVS9FH206GkBNXIQ=
Subject key identifier:   4A:5A:AF:5A:E4:13:65:18:14:A8:25:45:E9:1A:34:8C:9A:E5:D3:8B
Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Certificate issuer:       /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Certificate serial:       019E995F36D23EB3EC33205432730744A9F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
Manifest number:          1950
Signing time:             Fri 05 Jun 2026 20:00:14 +0000
Manifest this update:     Fri 05 Jun 2026 20:00:14 +0000
Manifest next update:     Sat 06 Jun 2026 20:00:14 +0000
Files and hashes:         1: HqGTGlJNCwD8iNo3O2yITxmeCwc.roa (hash: lYCD20DI0iQge3ODQugwP5cP7vicqwIE+12AsMdZEFg=)
                          2: PZTHXJOe6Rub2_B35Qp_XWm1nCI.roa (hash: ECesKQ6eT4CAViBPjtKG3epmntO2VSEJzUCQqkLEU1U=)
                          3: aFAces1pfL2Gf7A82Ua9HdY5M_8.roa (hash: ihoy12eYWp6w4F3+SZfOyRsI/MGwgD7ZEiY1ooLQCpo=)
                          4: aPG3EYw2VofOCEzLOdUvwSZioag.roa (hash: Wotu54IXEWdJ5q1KogRg82/7w2mseyamEfZGS9yMPLs=)
                          5: sR1oPQtW-Makp0q2GEwGGGWP6-4.roa (hash: 42QylWBVPcRn+sQtIzfk5m8WJP9tWYlxV8MBA5fdb50=)
                          6: uNpGJTkDf9vfyQ-rWsMHOZPhKY4.roa (hash: DmupEvIL4K/NQQ7P0WNq04y0+5V0bCdj/6N1toh/r7g=)
                          7: yoOlkunfyIDQIpu8hSJPuV67N8k.roa (hash: 3vGjw6ITVAmFgqvDm6vNVM3T1UQ++9p2OwqdlJ0wKCw=)
                          8: yteUrGAc4lBbZfl1p9UWovAKWzE.crl (hash: ajmSk/xD++UKi+7fdSHhTyx2KKp9MX4IO1ISsa9o+Yk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 17:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:99:5f:36:d2:3e:b3:ec:33:20:54:32:73:07:44:a9:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
        Validity
            Not Before: Jun  5 20:00:14 2026 GMT
            Not After : Jun  6 20:00:14 2026 GMT
        Subject: CN=4a5aaf5ae413651814a82545e91a348c9ae5d38b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5d:b7:e8:56:85:40:94:fe:be:8a:f2:0e:e7:
                    87:fc:2b:18:b4:57:86:c4:e6:18:aa:aa:7c:af:be:
                    84:a3:cc:7d:86:98:a4:78:a5:06:26:53:84:2b:1f:
                    cf:fb:45:88:b5:33:57:bb:c7:05:23:30:b9:36:86:
                    18:68:d4:54:61:bd:6c:91:fd:3e:d7:84:21:93:9d:
                    74:da:ab:88:79:30:a1:9f:9a:40:5c:18:65:ae:04:
                    0b:23:d2:64:d3:dd:b0:95:6c:82:7c:5d:e8:8b:9a:
                    db:43:23:a6:86:5d:fb:a2:2f:85:83:24:87:fc:42:
                    4b:e0:3e:76:63:c6:8a:6c:b1:9b:8b:f6:7f:46:b0:
                    ca:26:53:14:6f:b3:95:71:4a:77:dc:0b:e0:32:b6:
                    13:0d:e2:16:7a:c5:b4:05:61:0e:b0:4f:dd:c9:e6:
                    37:9c:57:9f:5d:6e:f2:6d:6f:c4:3f:23:2d:22:54:
                    3f:4a:4d:e7:db:f4:87:f4:f1:a5:ac:2c:4d:85:2e:
                    b6:9b:ea:98:cc:fd:5a:bd:fa:57:05:eb:1c:6e:2b:
                    d4:c9:bb:07:b3:c0:53:cb:b3:88:29:52:fa:ce:10:
                    60:05:0e:4f:30:76:f9:90:64:05:9f:e1:52:43:42:
                    65:be:e4:02:1b:b7:87:15:72:9d:0e:38:47:69:41:
                    a8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5A:AF:5A:E4:13:65:18:14:A8:25:45:E9:1A:34:8C:9A:E5:D3:8B
            X509v3 Authority Key Identifier:
                keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:cf:69:a0:83:72:6b:48:fb:ee:41:e0:61:20:35:32:b2:37:
         31:2d:81:5b:b0:ad:73:e5:1d:a1:c7:70:f6:44:14:b8:9d:1d:
         49:33:6f:6f:a9:cc:af:cd:19:1b:8f:b8:39:75:d4:a3:91:2a:
         00:f9:cb:52:d9:57:99:13:8c:d0:3d:39:37:e0:67:4e:cf:71:
         65:bb:7d:d0:c8:3f:f3:38:79:25:9b:f2:b2:c9:5b:12:35:64:
         98:6d:d8:bb:16:c1:f9:b9:91:8f:d7:af:dc:c8:a4:ac:f9:92:
         a3:99:6e:27:4a:b8:9d:2d:29:ff:30:ab:66:10:37:e0:37:af:
         4f:d3:48:c9:46:17:7a:15:88:29:61:72:40:1a:1b:93:76:92:
         57:ca:2f:5f:5f:5f:14:12:35:19:16:6d:0b:81:4f:23:56:14:
         38:06:2c:8b:ac:61:fe:09:b9:9f:6a:0c:b2:0b:e0:3f:4a:2d:
         93:4e:4a:e0:ff:92:8d:12:b5:61:1b:c9:b8:1e:b2:1c:67:b9:
         72:e9:61:3d:68:74:9f:80:0d:32:4c:97:77:21:b1:4f:11:3b:
         ef:c1:8a:43:3d:22:de:a9:88:2d:fe:75:dd:db:43:7f:c6:eb:
         26:85:2c:a1:63:6e:fe:0e:c0:be:eb:36:c8:7c:fd:18:aa:70:
         52:9c:df:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 01:08:58 2026 by rpki-client