Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
File:                     yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft (raw, json)
Hash identifier:          KYUli8+5TcifdwJAeet+G7mK/UxZS0V4hpdM7ysr+OQ=
Subject key identifier:   62:6B:77:FA:B0:8A:77:B9:9F:08:4D:CB:6D:B4:EF:39:1E:0F:3C:DA
Authority key identifier: CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
Certificate issuer:       /CN=cb36180ab4542d6eee66d9f99030df71236ce264
Certificate serial:       019F27DAB8E6B70F71D95120224095508653
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
Manifest number:          17D7
Signing time:             Fri 03 Jul 2026 12:01:13 +0000
Manifest this update:     Fri 03 Jul 2026 12:01:13 +0000
Manifest next update:     Sat 04 Jul 2026 12:01:13 +0000
Files and hashes:         1: HNYjnMa8XonNqZQ0AY5BlHwMzX8.roa (hash: 93bbzx6/nbiayVdplAT1nOdB7pkJO7+NMwUpbbLpb2Y=)
                          2: yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl (hash: lA3n1IYvjjOu3EITFQEkC0qDl6Z4nrUxbeR3grJo3Rk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 12:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:27:da:b8:e6:b7:0f:71:d9:51:20:22:40:95:50:86:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb36180ab4542d6eee66d9f99030df71236ce264
        Validity
            Not Before: Jul  3 12:01:13 2026 GMT
            Not After : Jul  4 12:01:13 2026 GMT
        Subject: CN=626b77fab08a77b99f084dcb6db4ef391e0f3cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:37:03:b4:2c:45:b0:e3:63:55:4b:38:87:c5:
                    31:e4:60:3d:57:e5:c3:f2:4e:77:d4:87:8c:57:ce:
                    f0:da:21:4e:ab:50:fa:54:4c:f1:09:05:93:12:e3:
                    e3:9d:a0:be:9d:9a:eb:ed:2a:0e:41:0d:ed:3d:d6:
                    1e:4c:11:04:60:f5:eb:84:4d:b4:ec:ce:55:bf:32:
                    64:08:f8:c9:5f:00:04:c0:e8:a3:0e:ba:5d:3b:af:
                    77:20:08:e9:5c:12:25:6e:3f:f1:d0:7b:24:d5:ba:
                    ec:79:50:21:c9:ba:02:fc:39:f3:eb:a9:0d:b4:70:
                    94:61:b5:2b:3d:c0:9a:1f:95:c7:31:81:7b:6b:ee:
                    e5:9d:1c:52:95:0b:c5:5d:40:b2:79:17:0d:f7:8a:
                    4b:3c:e6:58:76:29:ed:1f:91:12:eb:7c:9a:14:ff:
                    f4:02:68:16:bb:84:c2:1d:81:2a:29:16:48:da:bd:
                    75:89:b8:67:16:9a:a2:9e:01:eb:7a:aa:d9:a4:02:
                    7b:96:69:bc:fa:4c:8d:d3:5f:37:4d:23:f4:06:39:
                    7e:53:05:2d:ba:22:58:4b:83:00:70:f4:6b:aa:f0:
                    2b:99:ba:d7:ba:ab:61:ff:25:0b:5f:d1:48:ec:0b:
                    60:7e:e0:41:cb:06:8f:62:21:76:71:75:c2:bd:e8:
                    f3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6B:77:FA:B0:8A:77:B9:9F:08:4D:CB:6D:B4:EF:39:1E:0F:3C:DA
            X509v3 Authority Key Identifier:
                keyid:CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:db:61:33:9f:dd:0c:1c:dd:0b:af:8c:1e:b7:f6:0c:ff:dd:
         42:fd:f9:bd:4a:77:1f:bc:9b:05:59:64:8d:fb:b6:d8:31:ab:
         e4:f2:fd:bf:c9:e1:c8:2d:01:18:aa:63:79:f6:31:9c:83:8d:
         12:8f:b8:53:ae:ac:40:07:e3:91:83:d2:5a:44:7a:66:9b:69:
         d2:5d:38:1d:00:83:43:27:6e:e0:e9:50:81:fa:3d:c0:e0:10:
         fe:2d:53:eb:81:c8:cc:c9:fb:05:69:8b:90:b3:66:ae:3b:ca:
         9b:a7:1d:ec:73:d9:66:22:47:e9:da:93:8a:bc:2a:9a:ff:7f:
         1a:3e:b6:89:f0:d2:12:ca:e2:7b:9e:2e:60:be:ce:e7:41:ca:
         54:32:5e:bf:36:80:af:ad:79:9b:e4:a2:c1:77:65:5d:29:ca:
         7f:a6:8c:84:80:d2:79:b6:98:2c:7e:be:d8:4c:64:b9:21:5d:
         ef:16:bb:b5:98:89:dc:c6:f2:25:10:22:1f:80:f4:1a:9f:d2:
         81:58:bb:1d:8c:ef:9c:a3:cf:69:d3:b3:fc:34:68:bb:6f:f8:
         21:49:41:eb:59:54:71:5c:67:eb:75:5a:64:4e:52:6f:80:ae:
         4e:d9:80:6e:32:74:7d:1d:7e:91:89:c8:ff:85:6c:63:9e:fc:
         1b:26:ac:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8n2rjmtw9x2VEgIkCVUIZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzYxODBhYjQ1NDJkNmVlZTY2ZDlmOTkwMzBkZjcxMjM2
Y2UyNjQwHhcNMjYwNzAzMTIwMTEzWhcNMjYwNzA0MTIwMTEzWjAzMTEwLwYDVQQD
Eyg2MjZiNzdmYWIwOGE3N2I5OWYwODRkY2I2ZGI0ZWYzOTFlMGYzY2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzcDtCxFsONjVUs4h8Ux5GA9V+XD
8k531IeMV87w2iFOq1D6VEzxCQWTEuPjnaC+nZrr7SoOQQ3tPdYeTBEEYPXrhE20
7M5VvzJkCPjJXwAEwOijDrpdO693IAjpXBIlbj/x0Hsk1brseVAhyboC/Dnz66kN
tHCUYbUrPcCaH5XHMYF7a+7lnRxSlQvFXUCyeRcN94pLPOZYdintH5ES63yaFP/0
AmgWu4TCHYEqKRZI2r11ibhnFpqingHreqrZpAJ7lmm8+kyN0183TSP0Bjl+UwUt
uiJYS4MAcPRrqvArmbrXuqth/yULX9FI7AtgfuBBywaPYiF2cXXCvejzewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJrd/qwine5nwhNy2207zkeDzzaMB8GA1UdIwQY
MBaAFMs2GAq0VC1u7mbZ+ZAw33EjbOJkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpZWUNyUlVMVzd1WnRuNWtERGZjU05zNG1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wNzk3ZDQtOGIyYy00MGFjLTljYWIt
NjY3ZGIxZGMxYjg2LzEveXpZWUNyUlVMVzd1WnRuNWtERGZjU05zNG1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8wNzk3ZDQtOGIyYy00MGFjLTljYWItNjY3ZGIxZGMxYjg2
LzEveXpZWUNyUlVMVzd1WnRuNWtERGZjU05zNG1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9thM5/d
DBzdC6+MHrf2DP/dQv35vUp3H7ybBVlkjfu22DGr5PL9v8nhyC0BGKpjefYxnION
Eo+4U66sQAfjkYPSWkR6Zptp0l04HQCDQydu4OlQgfo9wOAQ/i1T64HIzMn7BWmL
kLNmrjvKm6cd7HPZZiJH6dqTirwqmv9/Gj62ifDSEsrie54uYL7O50HKVDJevzaA
r615m+SiwXdlXSnKf6aMhIDSebaYLH6+2ExkuSFd7xa7tZiJ3MbyJRAiH4D0Gp/S
gVi7HYzvnKPPadOz/DRou2/4IUlB61lUcVxn63VaZE5Sb4CuTtmAbjJ0fR1+kYnI
/4VsY578GyasxQ==
-----END CERTIFICATE-----
Generated at Fri Jul 3 21:46:39 2026 by rpki-client