Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
File:                     YihBc2HBxAaumnJX2qn7BiB4LTU.mft (raw, json)
Hash identifier:          Ld5Tzkq6w9Gt/McU6TdjF2IsjW+BC76kiSjHRgq94EM=
Subject key identifier:   CD:E8:34:58:9E:04:D7:55:D0:C2:D4:80:BE:10:75:F5:FE:50:27:C3
Authority key identifier: 62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
Certificate issuer:       /CN=6228417361c1c406ae9a7257daa9fb0620782d35
Certificate serial:       019E9CCEEE90AF85FB9FFE0A21658043026B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
Manifest number:          11ED
Signing time:             Sat 06 Jun 2026 12:01:07 +0000
Manifest this update:     Sat 06 Jun 2026 12:01:07 +0000
Manifest next update:     Sun 07 Jun 2026 12:01:07 +0000
Files and hashes:         1: 0821mhhu_dqdcqQbxajhPPTXDuU.roa (hash: ooSLPjcpcEvK3V7j97ECx3S8mqo+5KuosVxep9334Qg=)
                          2: YihBc2HBxAaumnJX2qn7BiB4LTU.crl (hash: YvZ2lN4Z1COqWxEY5GTYZOXsRlj3ZIWE5bkqhy3mXn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9c:ce:ee:90:af:85:fb:9f:fe:0a:21:65:80:43:02:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6228417361c1c406ae9a7257daa9fb0620782d35
        Validity
            Not Before: Jun  6 12:01:07 2026 GMT
            Not After : Jun  7 12:01:07 2026 GMT
        Subject: CN=cde834589e04d755d0c2d480be1075f5fe5027c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:88:a6:10:c7:50:06:92:1d:21:31:4e:3a:1c:
                    a3:a2:30:1f:8f:88:e2:bd:bb:e3:8f:3f:c9:a6:fa:
                    5e:f2:af:53:14:fd:ef:5a:29:a1:ed:f3:f9:83:a6:
                    d4:a1:db:04:82:8e:31:64:ed:e1:90:b1:75:5d:f2:
                    72:d7:39:67:1a:b9:aa:58:65:15:9a:b0:53:d6:07:
                    c7:10:63:b9:0e:87:a7:94:4f:dc:f0:61:64:d0:9e:
                    43:ee:46:85:80:5c:67:82:bc:13:11:a4:e2:98:7e:
                    50:f8:49:fa:60:f0:1c:8b:77:fa:1c:bc:51:38:49:
                    82:8e:90:b9:3f:bb:f5:0f:ff:25:9d:e2:62:bf:91:
                    56:93:e3:a2:9e:58:53:3d:61:11:37:c3:09:03:56:
                    d9:69:6a:d8:43:c1:2a:d1:39:04:35:8b:b7:c8:2a:
                    14:a8:47:ca:e3:bf:91:0b:2c:26:7e:9e:ed:ee:17:
                    03:f1:0b:8e:e2:a4:7c:bf:ab:8e:69:a9:e0:c6:4a:
                    a3:71:fb:4e:4e:2d:ca:0c:b7:c4:16:88:40:fd:a9:
                    81:3e:39:b7:38:49:2e:ed:2a:b1:d1:51:9a:63:84:
                    b3:f1:d5:2d:b3:cc:00:40:b8:a8:f5:90:84:62:f6:
                    48:ae:df:c9:11:1a:06:ae:36:ed:11:ed:16:9a:07:
                    57:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E8:34:58:9E:04:D7:55:D0:C2:D4:80:BE:10:75:F5:FE:50:27:C3
            X509v3 Authority Key Identifier:
                keyid:62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:e1:a0:5c:60:7f:41:39:35:a3:46:6d:fa:8a:b5:a4:09:2b:
         23:67:2e:a9:33:32:0c:db:3c:18:05:7d:ca:55:0e:81:fd:80:
         e7:ad:03:ac:d9:03:43:78:ec:f7:1f:43:04:3f:9e:79:8d:e0:
         a9:43:37:48:a9:d6:63:de:00:7c:ab:cd:43:24:b5:21:15:66:
         0e:ef:ae:5d:94:4a:7b:8a:bb:37:bc:be:d6:e7:e2:38:60:13:
         b8:61:98:32:df:79:bc:bf:8b:ab:aa:6b:19:5c:ec:bb:02:5e:
         82:df:78:c5:b1:06:8b:ad:07:78:b7:52:9e:62:a7:f3:44:67:
         28:d7:a6:fd:30:dc:01:71:a2:bc:5a:82:8a:14:04:8d:36:f2:
         60:13:5d:b6:75:8f:c5:fa:80:1c:de:a8:bc:59:e9:5f:5d:a5:
         91:c5:87:d8:48:5c:d2:28:da:29:39:82:21:c4:c9:f1:97:d6:
         c6:d9:67:50:43:29:5f:95:61:7c:d0:ca:c7:b7:53:82:01:65:
         99:3c:bd:0d:b8:56:b9:6d:43:de:17:91:76:e4:75:f9:2f:0e:
         19:c6:28:e4:7c:73:e5:b6:51:b6:f5:85:91:e4:ca:c1:dd:9a:
         19:83:11:e8:9e:e9:6b:ea:95:e1:24:bb:4f:f4:18:cd:38:f1:
         8c:43:57:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:20:50 2026 by rpki-client