Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File:                     YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier:          ybinhjlbK+mWVuI6CNsDmsVkFyBcyT0n955Tt3O0XfU=
Subject key identifier:   59:BB:FF:50:56:97:ED:49:23:48:BF:4E:54:E5:7C:8B:78:93:77:7D
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer:       /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial:       019EB845EF7A25836365B595806EBA2B0E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number:          1681
Signing time:             Thu 11 Jun 2026 20:00:51 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:51 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:51 +0000
Files and hashes:         1: C3nc48r2b2USpSkgOVzgsEQF2h0.roa (hash: kvFI72ZsGMqBnEvEAYRTWIp6gxPL8rac8rSJwcsVy0w=)
                          2: XaIcpqpb27hhGRIZ8h_xuzKRev4.roa (hash: pQLbKPAj3ndWd5qjjlikkIwvz29S32Fkmehgv5Ouuf0=)
                          3: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: MwdiDD5t1oEYypYgUQ1mC4BJWerAJXdsoN7k6mSuXug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:ef:7a:25:83:63:65:b5:95:80:6e:ba:2b:0e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
        Validity
            Not Before: Jun 11 20:00:51 2026 GMT
            Not After : Jun 12 20:00:51 2026 GMT
        Subject: CN=59bbff505697ed492348bf4e54e57c8b7893777d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b6:5e:65:b8:41:d2:7c:02:46:fa:45:48:db:
                    6e:76:f4:37:d8:92:a4:96:e9:d5:b3:41:6d:8c:bf:
                    5d:85:c3:27:3a:c3:45:3d:f1:b3:02:20:46:7e:f7:
                    29:af:ad:7a:ba:e5:72:d8:83:20:a4:82:91:de:2b:
                    09:45:9b:79:b2:2a:5d:91:69:85:a3:3b:6c:55:07:
                    5f:8a:58:ff:f7:34:24:03:88:25:59:5e:fe:38:88:
                    5d:f3:c2:a8:bb:26:c7:5f:02:91:73:df:32:7f:3c:
                    60:b2:70:86:10:c6:05:d7:2a:95:28:3a:6c:09:5e:
                    e8:7f:cb:78:a9:1b:93:c5:78:0a:90:0b:d8:72:47:
                    84:a1:c5:4b:8c:c0:c0:55:93:ff:4e:a2:df:94:d0:
                    43:35:b6:2e:81:80:f0:4b:5f:c3:6e:29:64:85:d9:
                    5d:43:43:7a:dd:6e:60:46:c4:71:c0:83:f5:7a:1e:
                    e8:e2:eb:7c:4f:37:df:48:9f:25:7c:0f:e2:21:0f:
                    98:89:f5:cb:a2:70:b4:94:d2:ee:96:23:07:0a:df:
                    78:f4:bd:27:fe:f1:34:d9:bc:72:3f:30:4e:dd:ae:
                    56:98:55:de:0e:68:a9:a8:04:80:56:63:97:cf:d6:
                    7f:68:6a:1f:82:1d:a5:94:51:b1:6e:ec:0c:e9:3a:
                    3b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BB:FF:50:56:97:ED:49:23:48:BF:4E:54:E5:7C:8B:78:93:77:7D
            X509v3 Authority Key Identifier:
                keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:d3:5a:08:07:31:d1:49:a3:72:39:c7:8b:da:55:ef:2f:e1:
         ea:e0:d8:50:f3:fe:f1:88:e8:b8:54:60:69:3e:72:bd:6f:60:
         54:55:1c:67:2a:0b:07:62:9f:7c:88:c9:0e:d3:74:5b:c6:e9:
         ed:3d:2b:4e:5c:33:fd:27:a0:2a:6c:a3:36:7d:a4:9d:75:42:
         89:1c:00:70:59:c6:99:dc:ff:99:8b:4d:ae:06:02:8e:f5:3c:
         a5:8a:51:7c:40:4a:46:a4:1d:ca:8d:f3:77:e4:8d:40:9f:cf:
         8a:b1:e7:92:e2:79:89:37:83:a4:9d:ea:3f:d4:eb:1f:20:6e:
         28:50:5d:04:40:27:9e:01:ad:2b:e0:4e:2d:29:8b:a0:ab:e6:
         4e:d8:94:ac:73:e3:49:39:e7:cc:c7:f0:85:2a:a1:bf:d7:ee:
         a1:b6:6b:94:dd:8e:e2:9b:99:79:0f:66:a1:cc:f1:f7:36:ba:
         fe:db:8b:07:4d:33:14:2b:74:52:49:1a:62:c4:b2:35:34:2a:
         19:17:d2:60:63:de:f9:2e:9b:2e:84:8d:70:d8:c3:55:d7:44:
         8d:00:2a:1f:32:b2:0c:13:a6:ab:73:6b:90:00:d4:2f:aa:22:
         6f:91:68:72:09:5a:be:db:a9:04:57:d3:82:92:7c:f7:6f:59:
         d2:ce:84:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:17 2026 by rpki-client