Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File:                     yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier:          2biNBVoiVT36hajWJ5vHKZQ0UWesRw3wUZEq3pNsAUk=
Subject key identifier:   49:36:54:64:C3:C2:70:C0:C6:09:F4:F7:F5:6A:F1:80:AB:61:46:51
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer:       /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial:       019E57B6882457AF60C2B3BC16459CF42B49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number:          11D2
Signing time:             Sun 24 May 2026 02:00:40 +0000
Manifest this update:     Sun 24 May 2026 02:00:40 +0000
Manifest next update:     Mon 25 May 2026 02:00:40 +0000
Files and hashes:         1: 0Lwj5i1c4Zxo9S7reLT043tZQto.roa (hash: YQ43Pzm8kIwiUn3utvGc8HdrkEgRWVgYKvbGV3IgZ04=)
                          2: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: GwgF0eGCW2Qn8O7Ka/d7TatOved3mxvt3iaEQtyb3V8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 May 2026 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:57:b6:88:24:57:af:60:c2:b3:bc:16:45:9c:f4:2b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
        Validity
            Not Before: May 24 02:00:40 2026 GMT
            Not After : May 25 02:00:40 2026 GMT
        Subject: CN=49365464c3c270c0c609f4f7f56af180ab614651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f9:8b:e9:65:4d:e0:92:37:19:60:8d:97:8e:
                    37:4a:a7:77:a6:5e:a2:06:58:a3:90:ee:43:03:e8:
                    a9:0d:45:a0:b5:f9:e8:e5:93:78:e1:d4:8f:08:d3:
                    35:f5:01:c9:7c:00:9a:37:32:7f:a2:f0:4a:a3:66:
                    0c:39:90:48:d2:0d:40:28:a9:eb:2c:bb:31:8b:ad:
                    62:fe:8c:06:ab:30:ec:7d:0e:ae:ec:4c:1a:eb:cb:
                    db:82:e2:e0:f5:96:33:f0:6b:07:84:0d:c6:50:1d:
                    65:6b:9b:cc:4c:33:36:c4:e3:97:85:24:59:f8:39:
                    89:41:90:5a:39:54:07:a3:1d:a6:3e:6c:fd:b6:ad:
                    c6:74:75:16:5e:03:46:b8:68:7c:f3:b9:da:01:1b:
                    71:50:c0:d1:e5:75:ae:3e:7f:c9:36:81:a8:d6:a0:
                    cd:c3:bd:5c:7d:fe:02:05:d6:2b:27:64:24:10:0f:
                    69:4e:fe:b4:1f:b8:a2:a1:75:2b:b7:4c:92:6c:a4:
                    dd:b5:d4:11:19:c1:a0:16:44:a2:1a:78:f7:ef:26:
                    f1:84:ce:02:a2:07:ae:92:e9:eb:9d:46:fd:9b:cf:
                    46:a2:61:48:f1:2d:b0:3e:83:42:56:12:f8:0f:fc:
                    bf:2b:39:c9:e4:f8:94:1c:46:e8:3b:cd:5f:32:19:
                    fd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:36:54:64:C3:C2:70:C0:C6:09:F4:F7:F5:6A:F1:80:AB:61:46:51
            X509v3 Authority Key Identifier:
                keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:31:00:ba:98:a7:c7:36:9a:c3:8b:61:c0:80:f5:2d:36:fc:
         39:4c:d1:25:ac:cd:66:2a:4b:f3:32:a7:27:ed:32:ef:fb:17:
         a7:78:b7:b2:c2:6a:63:19:f5:13:11:1a:a2:f5:ca:54:44:f9:
         93:b9:84:51:6c:7a:61:e1:0f:d9:f0:c4:6a:1a:15:9a:bd:dd:
         9c:f4:b1:86:4f:12:b5:45:0b:58:9c:4c:d7:96:10:99:bb:b9:
         60:a3:77:7d:5e:0b:cf:5a:de:1f:e5:40:dc:38:d4:c4:c9:66:
         8e:b5:a3:d5:60:0f:a5:e3:fa:af:10:a1:97:a6:d2:09:4e:33:
         be:72:03:2c:81:77:53:cf:4c:f0:c5:03:97:00:f6:61:df:c3:
         88:c4:d8:9e:ac:8a:2c:ef:f3:2f:5b:74:49:4a:83:fc:f6:0d:
         10:54:c7:2c:83:87:42:9f:34:40:8d:a4:ab:c1:68:99:44:5f:
         ba:26:8f:25:92:60:d9:90:15:7c:b0:0c:4c:a3:ba:41:93:e4:
         2b:c6:a8:61:fc:f5:ac:c0:99:5e:f1:7e:2e:2f:e4:59:08:0a:
         68:d7:ea:ae:a6:2f:86:1c:98:c1:e6:fc:7e:2f:e9:6e:60:f9:
         dd:1b:c5:8f:2d:f6:8e:e9:a0:85:39:de:fc:c5:1f:d8:40:6b:
         c3:f2:ec:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 04:37:19 2026 by rpki-client