Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
File:                     yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft (raw, json)
Hash identifier:          1XFemoJ7pGLC5gfBEwuVBy+/dXUyE2vjkrdP7WD6SFQ=
Subject key identifier:   CE:D8:C6:2C:70:80:06:5D:28:68:AE:29:3F:78:39:60:B3:A8:05:70
Authority key identifier: CB:2A:49:FB:A1:49:E1:A1:B1:31:39:BD:01:60:1C:86:CD:29:58:A5
Certificate issuer:       /CN=cb2a49fba149e1a1b13139bd01601c86cd2958a5
Certificate serial:       019EB98F8B9DDEAA955C036AFFF6A0780F24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
Manifest number:          1957
Signing time:             Fri 12 Jun 2026 02:00:52 +0000
Manifest this update:     Fri 12 Jun 2026 02:00:52 +0000
Manifest next update:     Sat 13 Jun 2026 02:00:52 +0000
Files and hashes:         1: 7o6kpttFmNc2Q_Fb7CY0cMCx0Bw.roa (hash: ERfj8NBPhWtC0lRKzuI7aqZB4Hd5ZjiGJHFCXPuiqqo=)
                          2: yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl (hash: ZUDd+ey4pRqwB2J/CRvmBbdmiTmczZymRBqRRI6SKWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:8b:9d:de:aa:95:5c:03:6a:ff:f6:a0:78:0f:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb2a49fba149e1a1b13139bd01601c86cd2958a5
        Validity
            Not Before: Jun 12 02:00:52 2026 GMT
            Not After : Jun 13 02:00:52 2026 GMT
        Subject: CN=ced8c62c7080065d2868ae293f783960b3a80570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ae:ef:70:8a:2e:b6:9e:b9:69:c7:10:5e:d3:
                    b0:22:28:be:f3:ed:ee:57:f8:41:9b:19:ee:ba:1d:
                    48:5d:bf:4c:7c:f3:62:cf:22:75:02:29:89:58:17:
                    f4:a5:0f:ef:40:54:60:4f:cc:d4:8e:c3:25:26:75:
                    b0:02:93:a6:fe:c7:43:3c:69:eb:c2:9a:f5:9e:54:
                    a7:7b:ad:2e:39:19:af:c2:46:f1:23:72:8a:2d:07:
                    94:d2:ad:01:71:85:00:c2:ba:e9:29:b9:5b:68:c4:
                    55:d7:2d:0f:2c:d0:aa:ba:dd:2c:b7:eb:3c:f0:d6:
                    c5:96:a5:54:02:f6:99:e7:11:89:68:21:5b:f1:ac:
                    4a:b7:36:f1:8c:d3:92:c1:6b:e8:08:f9:11:6f:77:
                    24:0e:04:32:28:94:98:22:79:76:3e:47:a3:e4:2a:
                    44:67:cd:56:77:e3:85:eb:02:58:99:8e:ec:ac:9e:
                    60:92:6c:0d:53:49:a1:16:1e:26:c3:84:5c:36:22:
                    5a:13:25:a1:f6:2a:93:fc:53:1c:26:45:e9:46:d2:
                    2b:f1:46:c3:97:70:93:86:5a:78:24:c8:42:23:81:
                    44:19:9d:63:b9:18:1b:66:89:a8:8d:13:50:ef:81:
                    bb:1a:c0:e3:f1:e8:fe:57:3f:a0:f7:81:91:f0:e6:
                    2b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D8:C6:2C:70:80:06:5D:28:68:AE:29:3F:78:39:60:B3:A8:05:70
            X509v3 Authority Key Identifier:
                keyid:CB:2A:49:FB:A1:49:E1:A1:B1:31:39:BD:01:60:1C:86:CD:29:58:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f9:b7:12:e1:49:1b:f8:38:38:9b:24:ea:67:69:e7:36:78:
         cf:1e:aa:01:e5:a3:2c:9a:21:fb:93:56:e7:3d:64:55:60:7b:
         f8:53:3b:6d:ee:fd:3c:a1:a9:4b:de:73:a0:fc:56:09:31:d1:
         f4:74:4c:a6:d5:88:bc:c2:cb:21:c7:46:51:23:c7:0c:4f:bc:
         0d:54:34:f8:82:c8:61:40:8f:1c:e6:d2:ad:37:35:6a:dd:09:
         f3:fc:64:ce:a5:ce:dd:00:1f:67:6f:88:a5:e2:9c:c3:23:8b:
         df:54:c7:f7:cc:2a:ad:4c:d8:fd:03:83:15:26:e8:bb:d6:c7:
         f0:6b:5d:33:92:84:d0:82:45:1f:93:9a:90:ad:a1:68:aa:ac:
         ff:cb:97:df:05:ae:1d:aa:a1:c4:d3:69:49:4f:90:35:c7:20:
         25:30:f9:c7:b8:9d:14:a7:85:41:91:15:88:07:72:60:bd:4c:
         05:9b:62:ea:fe:95:41:d6:63:67:fe:87:23:1a:bd:2f:fe:31:
         7a:f5:16:7a:3a:0c:77:07:d2:3b:7a:ec:76:57:3a:9c:e2:cb:
         0d:24:d3:46:d5:74:ba:e1:37:9b:1a:c5:d1:92:2b:6b:32:7c:
         ec:38:1e:42:e6:4e:80:63:f7:97:fb:18:2a:03:4b:30:bd:3d:
         33:e6:67:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:53:48 2026 by rpki-client