Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
File:                     YJ6nq6_FLH_6IKemquSuLSYlIHY.mft (raw, json)
Hash identifier:          fitPZDQln0fj5dPu9oHxXDW/3jN4MACpTvagregvEKM=
Subject key identifier:   17:73:56:30:0F:32:98:D5:1F:6B:C8:8C:0D:5D:87:36:CF:F9:90:CF
Authority key identifier: 60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
Certificate issuer:       /CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Certificate serial:       019E1EA37777362BC5BD77985DD4BC559F21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
Manifest number:          0375
Signing time:             Wed 13 May 2026 00:01:29 +0000
Manifest this update:     Wed 13 May 2026 00:01:29 +0000
Manifest next update:     Thu 14 May 2026 00:01:29 +0000
Files and hashes:         1: IPEVX9NburliCOkL_8My8KZEvxc.roa (hash: vKtzd4qXyz9EWKAKarv5HXYhJ7hA2jvu9rmJAemDTXw=)
                          2: YJ6nq6_FLH_6IKemquSuLSYlIHY.crl (hash: O3HUFdnSM1W5yMmqDaf8a24yb5xeEHElleTvpvcvElw=)
                          3: g3UM-mxo9surPyGX-ua-Jw8Hwy0.roa (hash: rLTMTj/qJ9X8Z52HM7aUZCnlG5iT1wzURKa+BIyHlNY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:77:77:36:2b:c5:bd:77:98:5d:d4:bc:55:9f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
        Validity
            Not Before: May 13 00:01:29 2026 GMT
            Not After : May 14 00:01:29 2026 GMT
        Subject: CN=177356300f3298d51f6bc88c0d5d8736cff990cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c7:0e:8d:41:d5:52:e5:21:40:eb:4e:e4:c4:
                    b9:5e:c5:5b:13:64:aa:91:dc:af:a0:41:3c:c9:08:
                    83:85:c7:9e:f9:6e:4b:d9:5e:bb:d1:dd:1e:54:7a:
                    58:40:f0:5f:55:ba:79:92:0e:ff:e3:89:ab:23:97:
                    0f:96:fe:da:13:2f:2c:a8:20:6c:64:b8:4b:d9:35:
                    a9:af:58:0b:c2:0f:48:7c:3f:c3:c2:20:b2:79:16:
                    68:17:d1:be:1f:18:11:7f:f5:ac:e5:82:8e:5a:f5:
                    33:1b:e1:c8:bb:44:65:55:49:20:f1:13:a8:b0:c9:
                    9e:0b:ca:3b:80:8a:a2:b5:da:91:51:3a:35:8b:63:
                    0f:51:4d:59:8a:e9:c1:db:f0:69:c6:c6:c9:57:bc:
                    a3:8f:2c:d2:f2:d5:ba:8c:d5:0a:a9:fa:4a:0e:3d:
                    31:05:9d:bc:d9:30:cd:f2:df:f4:5c:93:aa:de:dd:
                    b8:84:23:6e:32:aa:ff:a3:e4:80:6b:03:2c:a8:6b:
                    e1:bb:b4:ec:42:2c:5f:8e:da:4b:b4:7c:4a:ae:03:
                    ef:a6:d1:68:28:5d:3e:8c:db:97:06:39:66:de:7c:
                    74:74:2e:57:58:55:11:a4:90:49:f2:13:e5:51:3c:
                    bf:72:b6:0c:b8:67:b9:1c:57:46:d4:2c:db:9b:7b:
                    65:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:73:56:30:0F:32:98:D5:1F:6B:C8:8C:0D:5D:87:36:CF:F9:90:CF
            X509v3 Authority Key Identifier:
                keyid:60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:f5:ea:f4:09:d8:c6:c4:5c:82:81:e7:4e:c3:9d:17:e3:9f:
         d8:d4:08:7f:1c:ae:ff:ce:65:ad:c9:01:b4:29:17:14:88:d7:
         78:7e:92:11:33:ff:cd:f7:63:9f:c5:10:d2:34:a6:ab:3b:03:
         6c:ad:87:3c:32:c1:66:4f:5f:64:6a:8d:bc:18:5f:71:a8:b0:
         de:c2:a1:ab:d4:43:dc:55:14:ce:52:f9:58:67:c5:90:a7:02:
         af:40:21:20:fe:e7:c7:39:54:b8:97:e2:13:8a:95:91:5d:bb:
         b6:a8:d0:5e:e9:7c:28:7c:89:e7:27:c8:c0:0f:89:74:be:cb:
         c7:a3:65:7d:2d:69:e0:51:f0:34:5d:fd:fb:48:b6:f0:82:3f:
         fa:ca:9f:32:cc:fd:05:36:9c:36:d8:7a:28:34:91:e1:ba:99:
         a2:e9:2a:2e:f2:e5:cc:b4:fc:74:78:c7:de:d8:6b:3e:a5:1a:
         32:5b:3d:a7:7d:f2:0e:fa:45:51:c3:74:70:ab:ae:f6:d6:70:
         87:48:83:93:1d:bb:0a:b9:95:fe:5e:8d:59:9e:06:0d:35:e3:
         98:38:1c:94:44:9e:1d:98:e5:a2:41:6f:2e:aa:2c:d5:ca:fd:
         d4:9a:a5:76:72:4d:10:af:2f:1f:a1:ee:21:3b:77:70:0a:b8:
         14:9f:d6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:09:40 2026 by rpki-client