Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
File:                     yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft (raw, json)
Hash identifier:          v3L7vKz7DfFs01WsSISOZWp+l8MYFCTC0/WTLgp7BNw=
Subject key identifier:   09:6D:45:CB:68:B4:A0:0B:B0:17:68:17:98:17:43:4A:1E:AB:ED:E6
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Certificate issuer:       /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial:       019F1A55CF3F885092940E8635A9038C459A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
Manifest number:          16E5
Signing time:             Tue 30 Jun 2026 21:00:58 +0000
Manifest this update:     Tue 30 Jun 2026 21:00:58 +0000
Manifest next update:     Wed 01 Jul 2026 21:00:58 +0000
Files and hashes:         1: 1xZm-Pr5b-qFCpIwZikYlu9ZEe0.roa (hash: 0QA48yd7mZICyUD51OT5TDfFE0FEjiyUGHhy9Tse6eg=)
                          2: 2Rt9Gwr4sjkr8DA_k8J0_h0v0S4.roa (hash: tqZC3K8qhKl5fCuSFTCvvWh/uoUIwg2YeD8aanIXDKI=)
                          3: G6JvpqCYvPpC7VM1ZZPSfJgdNhc.roa (hash: D1iE+lUItdHWGUL+J972PCDTzMoGyX6bUifXJiUpjwY=)
                          4: lUtDTycr7tmHl8som-NIOGSL4hQ.roa (hash: bob91L00C+zBJmnNvfIjHOpV1SfQVQs/iVPuHdwEzf0=)
                          5: tWOuO39d71f5m4fAGnZWNgBEmoQ.roa (hash: 9CQk4BPxr4B6xZlS3j9hWqhPr4OQvnm1ZyCmYYoOxCM=)
                          6: yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl (hash: FS3gau9lomTLxBZ+GNhwfo/at4QXNAbz/a99OPXMS5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:55:cf:3f:88:50:92:94:0e:86:35:a9:03:8c:45:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
        Validity
            Not Before: Jun 30 21:00:58 2026 GMT
            Not After : Jul  1 21:00:58 2026 GMT
        Subject: CN=096d45cb68b4a00bb01768179817434a1eabede6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a4:2a:65:c4:53:2b:08:f6:7f:bd:37:7c:35:
                    90:2f:87:5c:de:76:94:7f:79:fe:43:0e:08:a9:c4:
                    57:ca:92:c3:f7:8b:c8:5b:b7:88:8d:d0:06:b4:65:
                    c0:ca:48:64:ba:ef:9e:c4:1f:e2:1b:ea:b5:61:5f:
                    2d:b0:8b:18:80:69:37:7e:ab:9d:9b:a1:20:73:7a:
                    a9:d1:f8:81:a5:68:c4:03:f0:16:65:ac:64:26:6b:
                    b0:1c:3a:54:8b:a2:59:e0:d2:3e:36:c0:6b:d9:3e:
                    e5:85:9f:a0:70:68:60:28:33:a4:c3:c5:ab:3a:95:
                    a3:a5:45:cc:a3:1a:cb:35:65:de:bf:9d:a4:50:cd:
                    66:69:f7:ec:bd:e1:c2:19:4f:db:bc:0e:6c:e9:85:
                    19:73:9b:29:38:78:82:68:54:c9:87:22:c7:a5:97:
                    49:90:c8:c3:f5:b5:a5:5e:b6:0c:a8:85:a9:b8:31:
                    7c:37:d6:d7:c0:b6:39:8e:b5:f7:80:dd:bd:41:95:
                    c0:b5:77:22:10:48:26:21:fe:b3:c2:3e:45:91:b4:
                    90:4c:79:e9:ad:fa:fd:1e:b7:86:30:4c:a5:fd:e3:
                    8c:b5:7e:c2:d2:73:08:9b:59:b9:b0:66:e6:c1:61:
                    da:b0:f7:bf:9b:b2:be:8f:3b:56:73:2a:36:ca:a2:
                    2d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6D:45:CB:68:B4:A0:0B:B0:17:68:17:98:17:43:4A:1E:AB:ED:E6
            X509v3 Authority Key Identifier:
                keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e2:9e:34:30:38:ab:cd:db:cc:89:1e:e3:14:33:cb:86:17:
         3a:10:8d:6d:8d:78:3f:fc:ef:b8:dc:c3:97:62:55:af:b8:31:
         89:a9:ce:39:2b:54:c2:cd:fb:56:8e:63:ba:39:48:0a:c0:80:
         a2:e5:41:26:50:e6:7d:28:ba:bf:1a:6b:db:37:6a:7a:2a:a7:
         22:d6:d3:10:a4:7c:cb:ad:d6:89:9f:e5:a6:fe:88:a3:d3:71:
         05:62:69:be:3a:08:52:e9:42:2e:7b:87:11:f0:6b:e4:f3:de:
         a7:35:4d:ea:23:32:8b:7a:90:df:d4:61:ed:a9:25:71:b3:2a:
         db:b0:a4:9e:01:fd:d1:46:d0:cc:d9:df:35:75:0e:04:ce:f5:
         04:65:21:19:f9:fe:53:9e:cb:78:f2:35:4d:57:17:de:e4:74:
         ac:ce:06:09:ab:e2:03:74:90:21:5e:3c:ed:2a:99:af:9d:0f:
         96:14:7d:41:0e:ec:3b:cf:a3:62:7e:4b:05:b8:94:da:45:06:
         c5:2a:ef:a9:f9:f3:13:01:c6:3d:d3:43:e5:f1:e3:eb:d1:a2:
         79:b4:0e:dd:f2:c4:6c:31:97:ca:60:cc:78:87:58:30:bb:ed:
         28:ce:90:8b:6c:4d:1f:42:0a:a4:2b:a7:ae:6a:c1:c7:08:18:
         7a:1c:e9:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8aVc8/iFCSlA6GNakDjEWaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDVlMzcxNzhkODUyNGM3MjY2MGExZDc5NjE2NTk5OWU1
ODY2MjIwHhcNMjYwNjMwMjEwMDU4WhcNMjYwNzAxMjEwMDU4WjAzMTEwLwYDVQQD
EygwOTZkNDVjYjY4YjRhMDBiYjAxNzY4MTc5ODE3NDM0YTFlYWJlZGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6QqZcRTKwj2f703fDWQL4dc3naU
f3n+Qw4IqcRXypLD94vIW7eIjdAGtGXAykhkuu+exB/iG+q1YV8tsIsYgGk3fqud
m6Egc3qp0fiBpWjEA/AWZaxkJmuwHDpUi6JZ4NI+NsBr2T7lhZ+gcGhgKDOkw8Wr
OpWjpUXMoxrLNWXev52kUM1maffsveHCGU/bvA5s6YUZc5spOHiCaFTJhyLHpZdJ
kMjD9bWlXrYMqIWpuDF8N9bXwLY5jrX3gN29QZXAtXciEEgmIf6zwj5FkbSQTHnp
rfr9HreGMEyl/eOMtX7C0nMIm1m5sGbmwWHasPe/m7K+jztWcyo2yqIt/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAltRctotKALsBdoF5gXQ0oeq+3mMB8GA1UdIwQY
MBaAFMjV43F42FJMcmYKHXlhZZmeWGYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODIt
OWUwYWVkMmZiOGVjLzEveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODItOWUwYWVkMmZiOGVj
LzEveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+KeNDA4
q83bzIke4xQzy4YXOhCNbY14P/zvuNzDl2JVr7gxianOOStUws37Vo5jujlICsCA
ouVBJlDmfSi6vxpr2zdqeiqnItbTEKR8y63WiZ/lpv6Io9NxBWJpvjoIUulCLnuH
EfBr5PPepzVN6iMyi3qQ39Rh7aklcbMq27CkngH90UbQzNnfNXUOBM71BGUhGfn+
U57LePI1TVcX3uR0rM4GCaviA3SQIV487SqZr50PlhR9QQ7sO8+jYn5LBbiU2kUG
xSrvqfnzEwHGPdND5fHj69GiebQO3fLEbDGXymDMeIdYMLvtKM6Qi2xNH0IKpCun
rmrBxwgYehzpNQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 23:36:39 2026 by rpki-client