Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
File:                     Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft (raw, json)
Hash identifier:          hxkzfGMUUnUSL1x9pXY+lQBYRz3qkPXBDdPp/wTF4wM=
Subject key identifier:   E5:CE:E3:2B:E0:32:9B:B5:D5:33:82:ED:EE:52:70:7F:42:0D:A8:54
Authority key identifier: 63:3B:68:95:FE:49:93:39:7B:66:23:2B:B0:A2:D3:E3:C6:25:CC:1B
Certificate issuer:       /CN=633b6895fe4993397b66232bb0a2d3e3c625cc1b
Certificate serial:       019EB80F56271B839BFDCDCF302A615AE6D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
Manifest number:          1371
Signing time:             Thu 11 Jun 2026 19:01:13 +0000
Manifest this update:     Thu 11 Jun 2026 19:01:13 +0000
Manifest next update:     Fri 12 Jun 2026 19:01:13 +0000
Files and hashes:         1: YS4KfdF48rW5SEIpeCeYxOP-Du0.roa (hash: FKGkIDKaHogWgazEiZbFbdSEfBT5S7dX/PkphiCX2e8=)
                          2: Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl (hash: 3ahrACrwUEMcSRiv92bg5IkdMMWRwSvXIR3TJoaMMhM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 19:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0f:56:27:1b:83:9b:fd:cd:cf:30:2a:61:5a:e6:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633b6895fe4993397b66232bb0a2d3e3c625cc1b
        Validity
            Not Before: Jun 11 19:01:13 2026 GMT
            Not After : Jun 12 19:01:13 2026 GMT
        Subject: CN=e5cee32be0329bb5d53382edee52707f420da854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9e:75:bc:cc:11:67:05:e8:24:66:0e:23:8c:
                    7b:99:b0:ae:1f:e0:fb:06:ee:27:e6:01:a8:98:7a:
                    76:67:42:08:d8:c6:0e:cb:f8:df:ce:1e:ef:32:27:
                    cb:ff:f1:fa:bb:ce:27:92:7c:2c:fa:d4:8c:d6:21:
                    cc:c9:ff:ab:14:97:3a:03:77:f7:6a:7f:3d:54:d6:
                    eb:b3:2b:ad:9e:a2:73:e6:ed:02:1b:20:e2:39:fe:
                    2b:ca:8f:58:19:46:b7:b8:f9:f2:e1:2e:c0:74:39:
                    0c:6f:6e:ec:73:c1:e1:c0:6c:bd:6d:83:8a:38:99:
                    0f:fb:00:a4:f2:d0:3e:4c:41:b4:57:c6:29:4a:84:
                    9a:d5:8d:f2:09:d5:c4:20:ec:e8:6f:c5:49:bf:7f:
                    98:11:a6:53:a2:cb:af:f2:ac:71:d9:e1:fb:0a:5b:
                    47:64:d4:e6:fc:6f:35:5b:a9:13:c5:9b:8e:0d:5c:
                    4c:4e:37:f5:d2:02:bc:d7:1b:7b:3b:8f:60:c6:1a:
                    0d:24:17:70:3a:a8:03:9d:bd:82:03:4c:ae:8a:5e:
                    f7:a5:c5:56:68:b9:04:00:bf:60:da:9c:34:e5:b6:
                    db:c3:d5:f2:1f:98:a6:66:e9:56:f0:21:d8:c7:4e:
                    1e:a6:5e:28:3f:ff:f6:ab:cc:37:84:55:d4:62:55:
                    16:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CE:E3:2B:E0:32:9B:B5:D5:33:82:ED:EE:52:70:7F:42:0D:A8:54
            X509v3 Authority Key Identifier:
                keyid:63:3B:68:95:FE:49:93:39:7B:66:23:2B:B0:A2:D3:E3:C6:25:CC:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:25:7d:9f:85:d3:7c:77:70:07:4c:41:7d:cd:d9:29:02:0f:
         23:2d:1c:bd:60:7d:d1:56:51:bd:c6:a9:a3:20:35:3e:18:14:
         87:fc:ba:91:30:23:6e:00:19:a5:31:3f:ac:a7:be:c8:ff:67:
         0d:3f:cb:98:00:a1:24:42:f5:06:df:52:8a:c4:bb:fb:ce:01:
         f3:2c:a2:4b:3f:70:62:72:66:32:a8:4a:aa:4c:c2:73:8f:5c:
         36:78:a2:56:53:38:7f:85:f4:f1:cb:28:ed:aa:ef:f2:97:13:
         24:8c:9c:d0:55:8d:36:b9:3e:af:a6:23:31:9f:57:90:d5:f2:
         b0:3d:14:a3:d2:06:4b:04:8e:6c:ad:33:15:f9:96:91:ca:61:
         80:6f:8a:94:58:2e:db:b5:83:67:5a:d1:f3:29:3e:09:ba:b2:
         f0:2c:a9:7d:e3:dc:39:cd:d9:1d:a3:1e:4c:0a:35:99:40:c9:
         7e:04:28:e3:fe:d9:5a:4f:7b:f1:e9:73:95:ae:7a:b5:e0:9c:
         25:0b:68:4f:7f:c5:db:88:b1:37:bd:fc:65:95:bb:45:05:05:
         23:f6:98:71:72:65:96:86:24:eb:7d:66:1a:cf:11:a5:89:b0:
         24:75:b2:17:8a:3a:64:6c:0b:7b:c3:22:81:67:7c:7b:30:bc:
         69:a3:e5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:05:02 2026 by rpki-client