Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
File:                     ylmb3Bz8eujML7oV_NgMoRc3hGc.mft (raw, json)
Hash identifier:          qvyj44FaIsKVDD37EwHMzRHNv4RRZBi5qBA7qclMZM4=
Subject key identifier:   15:00:01:AF:93:D3:B8:08:AD:B3:1F:E8:26:ED:E2:D1:F2:0B:98:E0
Authority key identifier: CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67
Certificate issuer:       /CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
Certificate serial:       019F111C1DA7914F74A1D66B11532F799BB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
Manifest number:          059C
Signing time:             Mon 29 Jun 2026 02:01:22 +0000
Manifest this update:     Mon 29 Jun 2026 02:01:22 +0000
Manifest next update:     Tue 30 Jun 2026 02:01:22 +0000
Files and hashes:         1: hLDJZ-V17lQ1uYy4Yb_7EyNt5EY.roa (hash: 0stvy4uT+ZzDa9Ceq2lwui9WwwpxCgyyC5wsX5cUjjE=)
                          2: ylmb3Bz8eujML7oV_NgMoRc3hGc.crl (hash: Y1FmIzqFa9wjCtUyDBZ6PHEvlwRrIDJWpVi7D5UvhgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:1c:1d:a7:91:4f:74:a1:d6:6b:11:53:2f:79:9b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
        Validity
            Not Before: Jun 29 02:01:22 2026 GMT
            Not After : Jun 30 02:01:22 2026 GMT
        Subject: CN=150001af93d3b808adb31fe826ede2d1f20b98e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:05:68:a3:97:48:ac:2e:5f:c9:43:bd:9f:7e:
                    63:6f:7e:f0:5e:15:56:3f:fd:b8:e8:1c:1a:65:26:
                    cd:4d:c6:dc:9e:d2:bf:16:5b:8e:f6:55:fd:b5:eb:
                    05:94:af:ba:84:5f:d7:52:f2:4b:e3:c3:21:ff:b1:
                    cc:a6:3c:9d:22:b4:73:1c:a1:fd:12:f4:8f:4d:f4:
                    49:5f:15:c3:0e:7c:bb:65:62:cd:d9:31:74:0a:1a:
                    f7:a5:54:57:3c:ba:37:cc:e8:f9:33:a9:c6:cc:06:
                    91:f4:d4:51:aa:f1:2c:5c:31:b8:25:b2:20:6d:f8:
                    85:a0:1c:76:ae:86:ea:d1:9a:5d:b3:70:f1:e9:d7:
                    4c:f9:82:2f:c4:a7:54:d5:29:91:52:a7:c4:d2:aa:
                    33:03:39:b0:99:46:27:60:91:19:b2:b1:be:f9:d8:
                    f8:7d:31:95:d4:20:c0:d0:33:85:15:51:df:cf:68:
                    1d:25:99:ad:a3:31:9a:4c:61:c0:30:39:29:90:08:
                    bf:d8:c2:27:c8:2e:80:b3:fa:b8:9e:ef:67:25:90:
                    6a:08:bf:89:ce:1a:9a:aa:fd:6d:c6:5d:b2:dc:43:
                    11:84:d0:d4:e8:a4:c3:bb:a0:56:3d:06:be:e0:7c:
                    57:54:f4:38:00:4d:e5:c8:c0:1a:ee:fd:92:bb:81:
                    c3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:00:01:AF:93:D3:B8:08:AD:B3:1F:E8:26:ED:E2:D1:F2:0B:98:E0
            X509v3 Authority Key Identifier:
                keyid:CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d2:5e:27:28:18:8a:73:cc:d0:de:d1:b5:ad:f1:06:e9:e4:
         f1:86:74:57:5d:01:ab:11:76:41:bf:5a:52:0a:ea:84:d6:2c:
         16:e3:a3:a9:47:f8:2b:6b:57:51:5c:c3:a3:59:02:39:74:ca:
         0d:c0:24:a3:02:76:6d:75:ad:c3:bc:40:c7:d0:83:53:2d:eb:
         10:d6:c7:01:c8:31:2c:94:7d:c9:b9:4a:da:0c:96:c5:50:f3:
         dc:ff:3f:43:fe:9c:5e:e5:50:d3:5d:f0:1d:3e:f0:82:06:ac:
         7f:1c:94:27:18:d9:dd:b2:7f:37:26:87:05:ae:f5:de:23:4e:
         d1:23:d5:00:7f:40:2a:72:e6:75:c8:f2:86:81:1d:5f:65:f2:
         da:cf:08:53:d9:ab:d0:04:8a:9b:42:c8:2a:13:9f:cd:87:2d:
         c6:3f:06:3a:54:b0:c7:b4:12:e0:4b:4b:29:a5:78:b7:e7:06:
         ec:d9:38:39:7d:23:5e:db:80:b2:a1:49:4a:89:47:f3:15:7a:
         9f:cb:f2:e3:88:ec:75:ef:6a:cc:dc:4f:e3:ee:14:95:7d:69:
         14:12:ce:33:72:71:ff:8d:56:43:96:b5:4f:7b:47:22:c8:ed:
         02:b2:00:6a:78:bd:fe:fb:d1:05:8b:6a:67:cd:a7:03:df:c1:
         f0:d0:46:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:24 2026 by rpki-client