Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
File:                     YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft (raw, json)
Hash identifier:          RMw8OhwhNeeuM+SeYm52wIfphTXZ9AkEZVEvWxYSJfU=
Subject key identifier:   05:35:5A:5D:FF:AF:D2:DA:50:F0:E7:F2:98:42:D9:E0:6F:92:87:87
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Certificate issuer:       /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial:       019EB921CC7DD19CCF6A3360C77CB7DC65BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
Manifest number:          09BD
Signing time:             Fri 12 Jun 2026 00:01:00 +0000
Manifest this update:     Fri 12 Jun 2026 00:01:00 +0000
Manifest next update:     Sat 13 Jun 2026 00:01:00 +0000
Files and hashes:         1: 1-oc31O5yGfJm_mzZWVg8lkL2Wxc.roa (hash: Zj2r9ATg5ynR2EMFecfZew5Um/8F+DW2YUnerFrqrJY=)
                          2: YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl (hash: 29rzBVjaK8+LuO5x44TOa0U5R8yONuw3a74Astj6qbQ=)
                          3: _3UUxWfdIKjZ94RP_R__5_MA69o.roa (hash: xEub+d4iGHet4J1D7KwTY4kCPRXkdFvIc+V+yAPzmjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:21:cc:7d:d1:9c:cf:6a:33:60:c7:7c:b7:dc:65:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
        Validity
            Not Before: Jun 12 00:01:00 2026 GMT
            Not After : Jun 13 00:01:00 2026 GMT
        Subject: CN=05355a5dffafd2da50f0e7f29842d9e06f928787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0b:c0:f8:99:07:92:ff:bc:63:83:b9:d5:c6:
                    c3:76:7d:90:af:e9:c5:30:08:09:6b:9e:98:44:c4:
                    26:71:e2:c7:53:dc:82:ba:1b:53:9a:f5:38:41:cc:
                    50:89:86:6c:99:21:88:f5:4f:59:86:4a:cf:73:18:
                    c7:2d:50:38:4d:eb:d5:85:25:f1:19:08:e9:8b:2d:
                    cf:bf:94:11:78:1f:1e:c3:dc:5a:b5:4c:9d:eb:df:
                    fc:4b:df:76:5a:f5:07:ee:69:8a:eb:00:81:f4:61:
                    c8:18:f8:47:8e:13:67:a6:8e:7e:08:97:75:c8:07:
                    38:a1:b7:0f:2b:83:9e:c1:41:6a:d3:2d:64:a7:2b:
                    62:7b:50:2f:fa:d2:0f:64:a4:93:54:b3:bf:ef:3b:
                    82:35:58:a8:b6:5b:b7:d2:97:b8:d7:e4:56:86:3d:
                    5a:ea:4e:fe:f4:c4:f4:d6:c6:4d:82:2d:9b:f1:3f:
                    71:f0:ef:37:b7:4c:3d:91:27:4b:52:73:78:7f:f4:
                    1d:dc:6b:9e:a0:a6:50:e2:cc:a7:ea:50:67:2a:8b:
                    ac:55:60:b6:29:a6:f0:de:9a:be:6d:d7:63:ea:25:
                    52:a0:bc:99:1f:a4:05:ae:36:1b:3a:65:35:35:08:
                    c4:5e:ec:e8:33:00:fc:e4:4e:ec:ee:be:7d:4b:50:
                    55:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:35:5A:5D:FF:AF:D2:DA:50:F0:E7:F2:98:42:D9:E0:6F:92:87:87
            X509v3 Authority Key Identifier:
                keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:67:74:8b:cc:92:c1:97:d7:23:63:b7:2c:e3:e5:32:4f:d6:
         eb:70:ca:11:03:5b:01:10:c2:07:c3:06:66:50:a8:c7:83:e7:
         a9:be:99:ae:66:68:6b:a9:e8:16:74:7e:e9:b4:6c:cf:e0:20:
         ad:d3:0e:4a:62:d2:af:9d:f1:1a:c1:a2:8d:1a:86:60:9e:0c:
         c5:42:36:81:fc:d8:98:0f:d8:c8:1a:1e:15:7e:bf:23:32:d8:
         01:4c:2f:b0:fe:1e:3e:1b:01:54:9d:6a:08:45:d4:8c:a8:1f:
         8b:38:22:6d:6b:25:d7:27:5f:7a:b1:26:88:9e:3d:b0:56:a4:
         39:5d:2b:11:4b:b4:17:0c:15:83:dd:1b:ee:cd:2f:03:dc:40:
         b6:b0:3c:42:5a:8b:f8:a1:08:55:22:bc:a8:ed:38:1b:b4:f2:
         9c:98:71:59:88:ae:4b:26:56:fc:cb:c3:78:96:6d:88:18:0b:
         ec:7b:4e:94:7d:2f:20:2c:ce:74:52:d8:55:c8:ea:c4:cd:3f:
         73:12:43:f6:d2:f7:09:18:d2:ed:e4:17:05:38:92:38:d9:72:
         37:37:52:28:a6:5b:87:d9:6a:1e:43:0d:9b:35:36:49:81:f9:
         4e:83:37:4b:e6:10:0c:d8:7a:0c:fb:be:2b:41:af:78:53:c8:
         d5:f2:df:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65Icx90ZzPajNgx3y33GW8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMDgyZDZkM2ExZGM1MDE3OTU3Mzc1MzdjYTc0ZDI3YTgw
MjY1YTIwHhcNMjYwNjEyMDAwMTAwWhcNMjYwNjEzMDAwMTAwWjAzMTEwLwYDVQQD
EygwNTM1NWE1ZGZmYWZkMmRhNTBmMGU3ZjI5ODQyZDllMDZmOTI4Nzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgvA+JkHkv+8Y4O51cbDdn2Qr+nF
MAgJa56YRMQmceLHU9yCuhtTmvU4QcxQiYZsmSGI9U9ZhkrPcxjHLVA4TevVhSXx
GQjpiy3Pv5QReB8ew9xatUyd69/8S992WvUH7mmK6wCB9GHIGPhHjhNnpo5+CJd1
yAc4obcPK4OewUFq0y1kpytie1Av+tIPZKSTVLO/7zuCNViotlu30pe41+RWhj1a
6k7+9MT01sZNgi2b8T9x8O83t0w9kSdLUnN4f/Qd3GueoKZQ4syn6lBnKousVWC2
Kabw3pq+bddj6iVSoLyZH6QFrjYbOmU1NQjEXuzoMwD85E7s7r59S1BV6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAU1Wl3/r9LaUPDn8phC2eBvkoeHMB8GA1UdIwQY
MBaAFGMILW06HcUBeVc3U3ynTSeoAmWiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85N2UxZTItNTY3Zi00MTRlLTliMDMt
YzE4YWQzNmE3YjMwLzEvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85N2UxZTItNTY3Zi00MTRlLTliMDMtYzE4YWQzNmE3YjMw
LzEvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEWd0i8yS
wZfXI2O3LOPlMk/W63DKEQNbARDCB8MGZlCox4Pnqb6ZrmZoa6noFnR+6bRsz+Ag
rdMOSmLSr53xGsGijRqGYJ4MxUI2gfzYmA/YyBoeFX6/IzLYAUwvsP4ePhsBVJ1q
CEXUjKgfizgibWsl1ydferEmiJ49sFakOV0rEUu0FwwVg90b7s0vA9xAtrA8QlqL
+KEIVSK8qO04G7TynJhxWYiuSyZW/MvDeJZtiBgL7HtOlH0vICzOdFLYVcjqxM0/
cxJD9tL3CRjS7eQXBTiSONlyNzdSKKZbh9lqHkMNmzU2SYH5ToM3S+YQDNh6DPu+
K0GveFPI1fLfDg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 03:38:51 2026 by rpki-client