Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
File:                     YuJWVsULslT1gHfRuWbkdLFjR68.mft (raw, json)
Hash identifier:          hU28cvyt6svEJTthVGSNRHfJFJsgfmEiF6QAApwH47k=
Subject key identifier:   F2:96:41:D8:8A:6D:CA:39:DA:99:8F:3A:5A:8C:8D:1B:46:35:F3:C0
Authority key identifier: 62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
Certificate issuer:       /CN=62e25656c50bb254f58077d1b966e474b16347af
Certificate serial:       019E1EA31542842B6B34343F9207122035BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
Manifest number:          1906
Signing time:             Wed 13 May 2026 00:01:04 +0000
Manifest this update:     Wed 13 May 2026 00:01:04 +0000
Manifest next update:     Thu 14 May 2026 00:01:04 +0000
Files and hashes:         1: WDz5bqq9s7Sot6DZTyns7ujP_G0.roa (hash: jp6a/AgGzZ0JdGjudIFSMOs/t8/efE23HGLQbGbVGxE=)
                          2: YuJWVsULslT1gHfRuWbkdLFjR68.crl (hash: r3q64t7UDX/IGoJHLFvt5UrGrQKBsEWG6k5k1/WtNy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:15:42:84:2b:6b:34:34:3f:92:07:12:20:35:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62e25656c50bb254f58077d1b966e474b16347af
        Validity
            Not Before: May 13 00:01:04 2026 GMT
            Not After : May 14 00:01:04 2026 GMT
        Subject: CN=f29641d88a6dca39da998f3a5a8c8d1b4635f3c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:aa:04:b5:9c:27:6e:fc:26:36:ca:5e:53:1e:
                    2d:ff:cf:7a:11:b9:2a:f4:f0:e5:3f:4c:9f:29:d7:
                    9a:da:ca:77:23:4c:ad:d4:95:dd:7d:a0:0e:c7:fd:
                    88:60:ae:17:8d:26:18:78:40:78:ff:23:b0:54:46:
                    2d:97:02:56:a9:e9:3e:99:eb:57:64:e5:86:25:43:
                    06:3b:c7:3b:97:1b:b1:90:34:16:70:93:b8:4c:66:
                    1b:8c:a3:b8:a1:14:e2:17:7c:7e:82:5a:f3:a0:c1:
                    f7:d5:f6:47:3a:14:25:ab:83:63:99:fa:4e:1a:27:
                    51:95:4f:8e:59:33:31:bf:79:05:9b:d0:3e:c8:d4:
                    e9:88:6a:a5:81:6d:38:a4:8f:56:11:71:6d:ae:27:
                    ab:ec:20:14:f4:ca:03:a7:05:a8:0f:8d:82:d5:31:
                    cd:64:d1:a8:5c:4a:bd:c6:b3:40:0a:cc:f4:9b:b6:
                    5e:b5:50:74:be:20:f2:8b:cf:42:83:df:20:90:f1:
                    0e:30:30:ca:bf:96:be:19:09:33:4e:09:97:00:b9:
                    c2:c6:cc:40:10:3b:d0:b4:89:3a:0b:28:a9:da:09:
                    1f:ee:24:b3:f6:57:05:c3:b1:2c:a4:36:3f:e7:37:
                    8a:f4:6e:d6:c6:64:39:14:5c:ac:92:d1:53:ee:2f:
                    3c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:96:41:D8:8A:6D:CA:39:DA:99:8F:3A:5A:8C:8D:1B:46:35:F3:C0
            X509v3 Authority Key Identifier:
                keyid:62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d8:ed:ca:a6:e1:78:94:f5:b8:da:cb:c1:fe:8e:5c:a1:21:
         a8:69:31:da:cd:d4:62:27:03:46:42:c4:b6:52:55:44:c4:c2:
         d9:17:a7:0e:18:67:40:ed:66:04:b3:32:5c:31:ef:ca:6d:d3:
         aa:ac:96:3d:fb:f5:48:17:2e:2c:c0:22:77:d5:e8:12:dd:49:
         60:f5:9f:6d:2e:9f:07:70:20:64:44:a1:1d:d6:03:b8:da:76:
         71:78:39:c6:b9:31:5c:81:2f:60:47:4d:2a:c9:b6:d0:0d:d6:
         bc:8e:cc:10:f1:11:9a:ea:f1:61:93:f5:9d:60:36:dd:15:56:
         ad:15:cd:50:8a:fe:af:53:f8:88:9f:27:41:92:ba:3a:06:9c:
         d5:62:9a:ad:e1:54:7e:28:01:17:68:fd:43:2c:2f:fe:aa:65:
         30:4e:5f:50:a1:35:e7:3c:6d:00:24:4e:64:4a:9d:4c:2e:66:
         e5:45:d6:9d:a0:ac:54:01:bb:60:72:3d:95:0a:08:75:6d:6f:
         d7:73:f5:62:4b:79:c9:9e:ee:7a:8d:5c:ee:db:cc:b5:5b:57:
         da:f8:5f:e0:ec:48:3c:45:08:21:95:9d:57:60:5e:f3:ba:56:
         9b:6a:51:ab:6e:3c:e0:af:3a:30:b1:ce:6d:4e:f9:f4:72:3d:
         c3:66:f8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:03 2026 by rpki-client