Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
File:                     YbU0Q3UDZogVrdk80X0K0-GxqHc.mft (raw, json)
Hash identifier:          MzNMgfSjX+6ebvacaC2QZRhCh/6qfwfJb6EH9dbC/ZU=
Subject key identifier:   BC:16:06:A4:35:12:B7:ED:0C:DC:82:2B:3F:30:F9:CD:9A:C6:ED:0B
Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
Certificate issuer:       /CN=61b534437503668815add93cd17d0ad3e1b1a877
Certificate serial:       019EA9778BD4738EA88D9961D32775B3AE6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
Manifest number:          1963
Signing time:             Mon 08 Jun 2026 23:00:44 +0000
Manifest this update:     Mon 08 Jun 2026 23:00:44 +0000
Manifest next update:     Tue 09 Jun 2026 23:00:44 +0000
Files and hashes:         1: 2v3v91RFQjN6l9mWptJO680RMkc.roa (hash: JpKAIgf5dUOG27b3V6ypmirRGf/czS7D9Bc0AguM208=)
                          2: 7eIzHvINnFqHZBOWvru0J6FjDb8.roa (hash: Dv2FZyAGPdsQN62gOmL7jMpfdjwxeMKFTL1oAf/BKfc=)
                          3: 8l0-rbUJJ5yl_F5t1WGOySUsQOI.roa (hash: 065Qj+kRYJW5mj1KN/1Un/hhPcBtSTaJS6BwFg5mPWw=)
                          4: QTFye-32ZtubZYZVN0cCrwUzz_s.roa (hash: Ou06XDdFUhQ2dykgxmyAA0EVBWVZBiN7PQ/FvfPl2a0=)
                          5: UsJrUy2UuzGGDnQa-en_vet84IU.roa (hash: anygphX/NHAj2pg72RtTsBDk/dlZBM2mWyxRgOxxXzo=)
                          6: YbU0Q3UDZogVrdk80X0K0-GxqHc.crl (hash: 5N62kyqPZ7iTtsq0d6ZCtD14JhJqnnfCVediqjPjJ+w=)
                          7: o2wMPqpUwKK3k92hqD5HvK3oiiI.roa (hash: 0YGmH3GBpSNDcIwjVr7t8Bv7qy4ZPt0Vk2HKaZcbgtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Jun 2026 19:19:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:a9:77:8b:d4:73:8e:a8:8d:99:61:d3:27:75:b3:ae:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877
        Validity
            Not Before: Jun  8 23:00:44 2026 GMT
            Not After : Jun  9 23:00:44 2026 GMT
        Subject: CN=bc1606a43512b7ed0cdc822b3f30f9cd9ac6ed0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3e:62:89:a3:4e:eb:55:35:98:03:fe:83:ea:
                    b7:79:24:7b:1f:fc:4f:87:d4:86:da:e3:d8:2c:2b:
                    81:8b:87:87:b2:8b:84:b3:67:67:d1:6a:42:fa:32:
                    43:6a:69:1d:5e:fd:fb:a0:d3:10:fd:2e:f4:61:04:
                    5d:52:60:96:b7:d1:cc:24:66:4f:32:a5:f0:26:be:
                    e9:50:e2:dc:67:55:00:87:ce:05:a0:a3:3e:6c:8f:
                    8b:86:98:9f:a6:a1:41:d7:e3:f6:7d:8c:be:62:32:
                    a5:67:ce:b8:04:31:b8:49:b5:0e:26:1d:0a:85:08:
                    de:60:26:52:c5:9b:3b:a5:a4:0e:4b:a6:b5:04:30:
                    be:b1:af:50:92:63:8e:fb:d3:d2:69:6a:00:8e:87:
                    39:f0:35:03:c2:e6:17:9e:19:1d:3e:7f:08:43:6e:
                    7c:3d:3a:09:72:c5:0b:1a:b0:24:c1:0d:b0:42:91:
                    8a:d4:f9:11:10:b7:ca:06:9d:f6:25:69:3b:4b:db:
                    b7:90:73:16:aa:55:04:ce:60:ed:a6:fe:9c:3a:96:
                    e6:40:86:11:5b:e1:c2:6a:ad:3a:b9:17:00:b6:68:
                    a8:15:c4:83:8c:8d:83:19:75:e3:0b:aa:a7:dc:4e:
                    e6:f8:8b:24:7e:f6:3b:42:df:73:e9:df:bc:70:63:
                    08:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:16:06:A4:35:12:B7:ED:0C:DC:82:2B:3F:30:F9:CD:9A:C6:ED:0B
            X509v3 Authority Key Identifier:
                keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:aa:51:60:5e:43:6c:8c:64:c0:d1:e2:ad:ed:ac:a4:88:95:
         55:ce:a6:de:e4:19:d1:6c:9d:92:94:9c:43:ba:1e:f5:ff:01:
         e1:80:31:54:b3:55:0f:70:b0:03:c3:cc:2f:ea:0c:d2:77:aa:
         a0:77:a3:06:e7:2d:03:03:c8:21:f5:6d:ec:d1:66:04:3c:78:
         85:67:9a:5a:4b:76:d3:e7:bc:12:49:0a:b0:42:d8:ba:1c:1d:
         23:02:99:cf:b5:e2:31:29:3a:bd:8a:c7:90:9f:99:6e:ff:f6:
         5c:4f:9e:ec:ab:a2:b8:9b:c9:17:21:25:5d:50:43:28:d9:74:
         cb:2c:43:f8:c8:f3:35:9e:08:e9:70:d0:31:03:dc:71:b8:03:
         31:51:94:7c:07:7d:c2:02:cd:62:b8:18:3e:10:93:c3:d6:50:
         45:7d:31:4f:3f:07:0d:a7:00:35:af:8a:a1:9b:c6:89:e6:65:
         e6:6a:41:6f:2d:aa:0a:6f:ab:96:59:c6:08:fa:5e:21:7b:cc:
         ad:f6:04:b8:d1:6c:31:e1:9a:33:c8:7e:0c:c3:90:0e:4f:9c:
         85:4b:0d:5c:30:8c:52:92:c3:80:2a:dc:4a:96:83:22:27:50:
         6b:ef:5f:2f:ce:91:95:c0:23:f7:92:1e:0c:36:fe:5d:7e:f3:
         db:07:04:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 04:51:54 2026 by rpki-client