Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
File:                     yYra-x8x-YiapHNXkrbj20aTG7k.mft (raw, json)
Hash identifier:          FUsieem/1kEtygmSbobXlA2odaq8oOJkAkPNouUc9u4=
Subject key identifier:   94:B3:A2:21:26:5C:2A:5D:6C:FB:BE:6F:D7:F2:6E:09:0A:2F:76:A5
Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
Certificate issuer:       /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Certificate serial:       019E90CA9A31BD7597379FB65CCC74C67BDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
Manifest number:          044C
Signing time:             Thu 04 Jun 2026 04:00:57 +0000
Manifest this update:     Thu 04 Jun 2026 04:00:57 +0000
Manifest next update:     Fri 05 Jun 2026 04:00:57 +0000
Files and hashes:         1: IIq-xe4pmbRC1mfUfGo67qCK0IM.roa (hash: XA0vZ02Oqn6urExP7O2u8Wij3b8jlF+3XNVGIv13wXQ=)
                          2: djmrHEf6AOnUXH6D3j-dskP0Zmg.roa (hash: U3bCf9w7k40+ELLZB1Hdgqa19bOjzOjKMfxiZiMzy5I=)
                          3: gnLcldm5nEk7VUfZ3ZCZ9CuTP_s.roa (hash: 9M0Ppv6WalIMgDZY/MAuUrb6XlVw4bEOTKI1qKmwlD4=)
                          4: vKRw2HUypzI_fLwgDuDJAjGJY-Q.roa (hash: kUjanpYMsskZ8DJFrlHn+4ejpbBtE2N86bbPjfXmLEs=)
                          5: yYra-x8x-YiapHNXkrbj20aTG7k.crl (hash: dh5794PzfG4aqQ53XKLn+MHeM0X5UsyrnSz5rkI4egg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 04:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:90:ca:9a:31:bd:75:97:37:9f:b6:5c:cc:74:c6:7b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
        Validity
            Not Before: Jun  4 04:00:57 2026 GMT
            Not After : Jun  5 04:00:57 2026 GMT
        Subject: CN=94b3a221265c2a5d6cfbbe6fd7f26e090a2f76a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:19:bf:26:c0:27:50:0e:c8:f8:46:a2:0b:
                    f7:23:b3:e3:79:1b:87:e6:b0:cf:ad:45:49:b2:55:
                    c8:7c:ac:d9:17:f8:08:46:c7:d1:e1:20:f8:b6:9a:
                    45:34:46:c2:19:f1:b5:fa:7c:b3:17:ad:df:77:04:
                    2f:c8:2d:54:5e:0d:3c:3a:4b:71:40:28:62:fc:26:
                    df:a4:05:0d:3f:6c:f5:5a:d3:91:c1:4d:16:d6:3a:
                    d6:c4:b6:c7:e0:04:bf:37:09:d0:5c:c4:ab:69:44:
                    92:e4:d1:c0:f0:cb:6d:07:23:1e:4f:95:54:e3:80:
                    4f:93:b9:5c:f2:28:2a:c3:81:c9:31:84:08:b0:13:
                    12:05:50:b2:2b:8d:d5:77:45:bd:cf:54:d4:fb:40:
                    54:fa:38:44:4e:5b:eb:cb:e5:15:92:79:79:26:c6:
                    d8:38:d3:3a:f3:34:1e:87:ac:03:c5:8b:c8:57:b7:
                    99:67:48:f9:f7:07:a9:1b:06:8c:93:28:b9:12:51:
                    de:18:f3:ea:f2:8e:50:c0:48:13:f6:a3:f2:53:0f:
                    16:d5:7b:a4:0c:6d:f0:1f:14:7f:a3:f7:5f:d9:9b:
                    a9:db:33:cd:8f:f4:3a:4a:90:8c:94:a8:fb:36:a6:
                    73:15:1b:bc:03:34:57:85:d8:b5:54:99:d6:b3:55:
                    a2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B3:A2:21:26:5C:2A:5D:6C:FB:BE:6F:D7:F2:6E:09:0A:2F:76:A5
            X509v3 Authority Key Identifier:
                keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:fa:4f:90:da:ef:38:fb:2c:70:c3:d5:20:b0:67:43:27:85:
         ae:99:e1:b7:27:31:33:b3:0a:7e:f6:70:6f:c9:14:3c:e8:c4:
         60:1b:a0:d2:37:87:9e:b9:28:b4:ed:1e:c1:46:04:4b:b1:4f:
         b9:c7:b4:a5:da:3d:11:2f:3c:89:bf:d1:83:f1:d8:e1:28:27:
         a3:94:2d:57:ae:f7:00:19:98:20:f6:a5:87:e7:bf:f3:15:f6:
         62:be:ca:22:80:fb:1c:c1:a8:2c:a2:da:75:9e:ea:02:3d:be:
         b0:cb:ee:0a:16:27:b6:7d:06:6a:2f:3c:31:1f:7a:6e:66:cd:
         cf:0d:41:8a:fb:d9:ac:3e:75:d3:63:98:e0:e0:a7:c7:b0:e7:
         49:9f:a2:b7:0e:c6:28:b2:b1:72:0c:a6:e9:dd:16:bc:69:15:
         07:6b:10:a0:d2:24:55:2e:b1:f6:8e:67:0e:5f:01:12:aa:b3:
         ac:f6:3f:69:55:a1:17:7d:03:c9:a8:b9:42:a4:56:f0:50:a7:
         42:c7:18:61:31:dc:6b:e3:cc:cb:b2:0a:06:01:f4:ca:e7:fb:
         94:83:a2:6e:5a:34:d9:df:db:db:b3:33:24:d0:82:3f:57:06:
         b6:db:46:e7:f9:75:92:9a:2a:ab:1b:0a:28:2d:80:61:6b:02:
         71:1d:f8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:04:23 2026 by rpki-client