Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
File:                     yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft (raw, json)
Hash identifier:          rPRBZEZyN+WxhToO87XfwUgIZax+5zW/IP7NObHnHKA=
Subject key identifier:   03:8B:4C:1F:2C:C9:D7:3A:AF:2F:01:96:53:EF:12:A3:A4:4F:8A:E8
Authority key identifier: CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
Certificate issuer:       /CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Certificate serial:       019E1EA3027DBA49C6E5A873CE5A02F66E34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
Manifest number:          0622
Signing time:             Wed 13 May 2026 00:00:59 +0000
Manifest this update:     Wed 13 May 2026 00:00:59 +0000
Manifest next update:     Thu 14 May 2026 00:00:59 +0000
Files and hashes:         1: vli7nBMVVsmnP9pgh14ogSpMo5o.roa (hash: vG8+FAZpGpoQ8aVKGYzKfazZEnPs10bdq4+yw4mlzf4=)
                          2: yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl (hash: QR4Q2xemvSaHU2AWgcdJ0MCGffQPp3ysumqdwCoIZ3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:02:7d:ba:49:c6:e5:a8:73:ce:5a:02:f6:6e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
        Validity
            Not Before: May 13 00:00:59 2026 GMT
            Not After : May 14 00:00:59 2026 GMT
        Subject: CN=038b4c1f2cc9d73aaf2f019653ef12a3a44f8ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ba:d2:f7:7d:00:7a:8d:7f:20:40:a3:34:ca:
                    ca:31:65:75:50:0f:65:cb:20:11:57:df:91:91:90:
                    43:36:92:bb:b7:b1:68:a5:aa:2a:64:bf:f8:6c:02:
                    c4:d8:32:18:0d:58:a4:fc:f1:e5:3c:d4:c8:e6:07:
                    fa:2f:b8:3d:d5:2a:7b:c8:81:bb:ad:c1:af:24:5c:
                    d5:20:e1:2e:98:64:8f:e7:5f:98:62:bd:ec:b0:b6:
                    62:b7:1b:87:b9:1e:af:62:fd:d6:3d:9c:4e:47:40:
                    f3:4f:73:32:75:11:b4:fa:a2:e5:61:6f:15:94:68:
                    c8:5e:e3:58:19:68:63:41:02:07:51:1d:6b:d3:12:
                    fe:94:2a:a5:d4:d5:2c:5f:b3:c6:b6:e6:6a:a2:62:
                    e2:42:31:63:54:ad:4f:bc:d7:02:cd:1e:9e:00:ac:
                    6c:c9:5a:2a:61:c1:e3:94:d6:ee:fe:71:81:8b:70:
                    8c:43:a7:e4:df:3c:8c:1a:69:f8:85:6c:48:8d:59:
                    d7:ee:0c:90:26:34:03:26:15:48:e5:0f:e1:37:f0:
                    eb:ea:74:f1:38:80:d2:6a:f9:2f:73:4d:e0:40:2b:
                    23:b7:02:23:c7:d1:cd:64:ce:bd:f0:32:23:66:f4:
                    e9:37:14:f5:e0:8d:48:13:68:9b:6a:85:83:49:c2:
                    d1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8B:4C:1F:2C:C9:D7:3A:AF:2F:01:96:53:EF:12:A3:A4:4F:8A:E8
            X509v3 Authority Key Identifier:
                keyid:CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:e6:a9:04:d6:04:cf:bc:80:b6:de:7d:ce:dc:88:c9:52:e8:
         b2:41:e5:2a:2a:b1:51:6a:1d:e6:57:a3:ca:8c:bf:dd:93:f0:
         24:1f:83:6e:f2:d0:41:a6:0a:26:fc:7a:1e:dd:65:04:e3:42:
         76:e2:f4:76:b2:0a:f1:4b:05:98:13:fb:40:b3:d4:e0:3b:3f:
         f1:df:40:23:93:8f:17:3b:86:29:48:37:11:c1:4c:63:0e:22:
         c8:20:05:7a:14:d3:0b:08:2b:3f:21:7f:06:76:4f:43:52:ea:
         94:c4:56:33:cc:4b:0a:ca:3d:0a:a0:70:b2:05:e1:8b:75:8e:
         d2:be:fa:2d:e2:8e:ca:11:1c:9e:ac:3a:82:2d:b8:b0:4f:f3:
         c1:6d:ea:94:75:fc:b5:41:a4:9e:ab:08:54:89:94:80:04:30:
         03:8e:67:08:07:ca:55:ec:8a:3b:97:0e:33:a2:9a:dc:43:44:
         60:4f:3c:03:48:19:26:55:eb:dc:e6:dc:d9:a2:d2:b2:7f:20:
         fb:60:f1:0c:5d:bd:83:05:0c:30:38:3a:8e:89:8c:86:a1:76:
         76:06:b9:70:20:9e:e2:47:d8:14:c1:3c:a6:f8:01:2d:a4:a2:
         a3:bf:b4:de:33:2b:d8:f7:f5:c1:cb:2f:5a:39:86:24:3f:ef:
         9e:ea:22:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eowJ9uknG5ahzzloC9m40MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYjExZjQ5M2IzMWE1YTJjMWYyM2NlMGUzMDA0NjQ3YTMy
NDI1NzYwHhcNMjYwNTEzMDAwMDU5WhcNMjYwNTE0MDAwMDU5WjAzMTEwLwYDVQQD
EygwMzhiNGMxZjJjYzlkNzNhYWYyZjAxOTY1M2VmMTJhM2E0NGY4YWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7rS930Aeo1/IECjNMrKMWV1UA9l
yyARV9+RkZBDNpK7t7FopaoqZL/4bALE2DIYDVik/PHlPNTI5gf6L7g91Sp7yIG7
rcGvJFzVIOEumGSP51+YYr3ssLZitxuHuR6vYv3WPZxOR0DzT3MydRG0+qLlYW8V
lGjIXuNYGWhjQQIHUR1r0xL+lCql1NUsX7PGtuZqomLiQjFjVK1PvNcCzR6eAKxs
yVoqYcHjlNbu/nGBi3CMQ6fk3zyMGmn4hWxIjVnX7gyQJjQDJhVI5Q/hN/Dr6nTx
OIDSavkvc03gQCsjtwIjx9HNZM698DIjZvTpNxT14I1IE2ibaoWDScLRgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOLTB8sydc6ry8BllPvEqOkT4roMB8GA1UdIwQY
MBaAFMqxH0k7MaWiwfI84OMARkejJCV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXJFZlNUc3hwYUxCOGp6ZzR3QkdSNk1rSlhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83NGQyZWEtNmU2MC00MGFmLWE1NmEt
MTUxZjZlZDE3NjkxLzEveXJFZlNUc3hwYUxCOGp6ZzR3QkdSNk1rSlhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83NGQyZWEtNmU2MC00MGFmLWE1NmEtMTUxZjZlZDE3Njkx
LzEveXJFZlNUc3hwYUxCOGp6ZzR3QkdSNk1rSlhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAheapBNYE
z7yAtt59ztyIyVLoskHlKiqxUWod5lejyoy/3ZPwJB+DbvLQQaYKJvx6Ht1lBONC
duL0drIK8UsFmBP7QLPU4Ds/8d9AI5OPFzuGKUg3EcFMYw4iyCAFehTTCwgrPyF/
BnZPQ1LqlMRWM8xLCso9CqBwsgXhi3WO0r76LeKOyhEcnqw6gi24sE/zwW3qlHX8
tUGknqsIVImUgAQwA45nCAfKVeyKO5cOM6Ka3ENEYE88A0gZJlXr3Obc2aLSsn8g
+2DxDF29gwUMMDg6jomMhqF2dga5cCCe4kfYFME8pvgBLaSio7+03jMr2Pf1wcsv
WjmGJD/vnuoi5g==
-----END CERTIFICATE-----
Generated at Wed May 13 08:18:53 2026 by rpki-client