Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
File:                     y-PaNYKiKDDsTmdUfnX6O52iCyM.mft (raw, json)
Hash identifier:          MkbrFjQYtR1gnzDHfMqcYWJrt4GupT98U/dcYm1yTcs=
Subject key identifier:   C1:C1:48:79:8E:42:EE:B5:3A:3B:C6:BF:6B:FE:99:B6:68:2F:5D:1B
Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
Certificate issuer:       /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Certificate serial:       019E9AA9A4AEE7CAD169218DD869B1BD6279
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
Manifest number:          0B58
Signing time:             Sat 06 Jun 2026 02:01:09 +0000
Manifest this update:     Sat 06 Jun 2026 02:01:09 +0000
Manifest next update:     Sun 07 Jun 2026 02:01:09 +0000
Files and hashes:         1: Ptns1aj1-mp6wXpfkNSnzIUQg2M.roa (hash: YJhTXg15y7lXDt6el4G9uRQ6GoxJANZucXloZAXI/Mc=)
                          2: SyLOIp0kgjoWQcew30ARcomgpA8.roa (hash: tw+paFoNwVB8IkQny5dTEcgX/0463MTe3dsdhAVbLtI=)
                          3: mGTXHUzlo8jZOHFUmBeN6FRI7Bk.roa (hash: 2bfzL2d7ZwGUW9cvd/ehAd7HuPDH/Eytzu1KccPbTks=)
                          4: y-PaNYKiKDDsTmdUfnX6O52iCyM.crl (hash: ONX04Hx63/pj7bcQkyfgcWn/XVviAfCO0cXkv8BZ9SU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9a:a9:a4:ae:e7:ca:d1:69:21:8d:d8:69:b1:bd:62:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
        Validity
            Not Before: Jun  6 02:01:09 2026 GMT
            Not After : Jun  7 02:01:09 2026 GMT
        Subject: CN=c1c148798e42eeb53a3bc6bf6bfe99b6682f5d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:80:2a:49:3d:dd:8f:f4:2f:3e:02:18:95:b8:
                    ca:22:e6:83:36:fa:83:87:11:5b:ed:39:d7:2f:f4:
                    79:aa:fc:fd:79:01:a5:bd:64:1b:de:f4:15:d8:db:
                    23:af:f9:88:22:e8:30:e6:41:f4:90:4d:a0:fe:76:
                    9b:fe:b6:17:7f:96:ea:91:4f:bd:27:0d:60:43:72:
                    75:a4:0d:9e:f1:fa:47:09:ab:3c:28:8f:60:44:fd:
                    02:1d:ad:96:58:0f:27:f0:46:85:66:61:88:24:db:
                    b0:c1:ad:95:bc:a6:be:e2:4f:cb:99:c8:81:f7:1b:
                    48:c8:83:83:08:9f:1b:25:27:2d:0c:b0:f3:fa:5d:
                    6f:3b:1b:a6:d4:2a:69:5d:11:a7:bc:0a:19:b1:19:
                    8a:2e:ec:4c:b1:89:d6:cb:9b:a8:d5:8c:d4:65:8e:
                    b6:df:f3:af:af:13:c0:ed:52:a6:3e:4c:c1:6a:f0:
                    98:de:7b:21:5d:70:79:a8:27:d4:ac:73:c0:7a:1a:
                    83:c8:3a:8b:44:ba:eb:e5:de:cb:ef:4e:ee:2c:5c:
                    5b:93:13:bb:c7:e4:6f:69:d2:7f:c9:c2:3c:e1:69:
                    ee:91:0d:21:8e:5c:d4:cb:c6:f8:0b:a8:8d:f4:c6:
                    dc:84:27:47:bb:a6:86:fc:c4:5d:4e:4d:64:72:2c:
                    88:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C1:48:79:8E:42:EE:B5:3A:3B:C6:BF:6B:FE:99:B6:68:2F:5D:1B
            X509v3 Authority Key Identifier:
                keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ed:eb:03:43:fb:0a:95:ee:b2:d8:7c:f9:ba:7e:40:e9:01:
         d0:20:d0:02:62:1a:73:42:7c:a0:6d:91:ab:52:32:46:69:f7:
         db:f6:08:e4:d7:70:3e:d9:39:12:fd:3f:42:d7:06:43:e1:58:
         10:6f:6f:7e:02:31:a7:46:26:65:cf:b4:a3:31:34:af:19:68:
         db:ef:36:fb:e8:4d:2a:74:42:0a:f1:8f:4f:e7:f8:fe:cf:90:
         bc:f2:b1:2c:7b:73:5c:c5:ce:b4:c9:d9:92:30:5c:41:c6:33:
         92:9b:1a:12:76:d0:d1:e0:84:37:ec:75:0d:59:79:c4:31:8c:
         ca:8b:1e:3d:53:87:74:35:ab:c8:1e:fe:02:8c:33:e3:21:b6:
         e4:51:10:6d:5e:42:c5:cd:5a:3f:6e:c5:fe:b2:55:8b:72:1b:
         c3:51:d6:2a:b9:7d:b8:86:4e:b8:8a:62:c3:53:d8:21:f6:73:
         49:48:2f:f0:04:03:5c:a6:8d:d7:62:2e:97:58:0d:08:da:73:
         de:03:94:02:9f:70:c2:a0:d2:4a:33:8b:f1:ad:46:16:f2:86:
         a5:c0:5c:47:6b:47:41:fd:75:17:57:12:ed:c5:30:0d:95:83:
         36:45:e8:0d:f2:19:e6:79:96:3d:15:9b:2e:52:fe:bc:34:c9:
         97:47:b1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:26:42 2026 by rpki-client