Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
File:                     YzCxTOdPYKjqSrtuqmDuRHD0On8.mft (raw, json)
Hash identifier:          lZckLzx+D/dClKfYHEZLOrbjNLrDy/Cj4BJ7fZ5eCos=
Subject key identifier:   3F:2C:76:B6:96:67:04:90:3F:05:79:A8:71:8C:EF:BE:83:FF:48:C6
Authority key identifier: 63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F
Certificate issuer:       /CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f
Certificate serial:       019E2091EC3C4ADDA6BC2E7D6A403E14DF83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
Manifest number:          0268
Signing time:             Wed 13 May 2026 09:01:34 +0000
Manifest this update:     Wed 13 May 2026 09:01:34 +0000
Manifest next update:     Thu 14 May 2026 09:01:34 +0000
Files and hashes:         1: 30S6gV2oh78DXtrqvndtvSPPKd4.roa (hash: OcTAJVeDjRXR19iBC0Wj5Tjt34V2Iwuh2sKP2/1+Fgg=)
                          2: YzCxTOdPYKjqSrtuqmDuRHD0On8.crl (hash: /I/bY3D+282l/tEyXdZMmpn+sz6opJWsUKFknU56dvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:ec:3c:4a:dd:a6:bc:2e:7d:6a:40:3e:14:df:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f
        Validity
            Not Before: May 13 09:01:34 2026 GMT
            Not After : May 14 09:01:34 2026 GMT
        Subject: CN=3f2c76b6966704903f0579a8718cefbe83ff48c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:50:08:50:8f:cc:aa:8b:99:d4:f0:79:bc:4b:
                    cb:03:e0:b4:d6:97:06:a4:f0:82:4a:ca:b5:3f:ff:
                    20:1d:f8:84:20:23:cf:28:b1:9c:bd:b6:8c:7f:76:
                    49:13:b9:0b:dc:0c:c0:4d:08:ff:78:2d:72:13:93:
                    8b:73:41:e3:16:a4:db:44:45:0d:c8:d5:fa:3a:3d:
                    b9:91:04:63:57:9c:d9:aa:aa:d0:a7:42:1a:f7:ea:
                    fc:6c:8a:c0:32:61:e6:b3:a3:80:a0:9c:35:66:93:
                    06:69:58:fc:ed:ee:f4:59:eb:f1:ec:80:02:e8:1d:
                    8b:82:2f:15:32:44:be:50:39:69:cc:ec:15:93:bc:
                    d1:34:e5:28:1d:43:74:0f:2e:31:82:b6:de:81:f8:
                    ac:6d:77:ef:4c:b4:cf:78:72:b4:25:03:0e:ea:18:
                    5d:07:07:c0:f3:ad:09:c4:a6:39:80:2b:05:61:7d:
                    52:0e:8d:36:0a:73:74:84:38:fc:aa:f2:33:91:c4:
                    00:09:36:f0:6a:aa:4c:35:22:ef:83:35:06:37:de:
                    9a:90:7c:ec:60:26:9c:41:82:4a:59:4c:f5:b2:94:
                    33:23:ae:1d:c3:ab:6e:bb:90:d8:0d:a7:be:d5:46:
                    cb:2e:e6:29:d1:d6:26:f9:85:ee:4c:21:62:39:dd:
                    5e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2C:76:B6:96:67:04:90:3F:05:79:A8:71:8C:EF:BE:83:FF:48:C6
            X509v3 Authority Key Identifier:
                keyid:63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:39:21:2d:83:e0:91:c7:99:e5:de:d6:8c:0e:2c:d1:8f:b7:
         a7:f4:c5:70:f8:a7:00:cc:f0:1c:5a:98:91:b5:a4:1b:13:eb:
         1f:7d:21:78:c7:d1:7b:75:11:6e:f9:a1:85:e2:5b:39:56:7e:
         f7:0f:78:bd:98:40:a9:f4:a0:c1:5e:40:b1:2a:b5:1c:0a:65:
         1f:59:25:2c:6a:33:76:47:6f:4c:ea:47:b6:6b:fc:f3:86:ea:
         7f:04:0a:3e:66:f6:a0:9a:35:bd:f2:54:7f:ab:58:f2:e4:91:
         10:5f:83:ce:e7:95:39:5a:5e:88:9d:68:08:04:3b:a2:02:99:
         41:10:58:bc:7f:75:71:74:f5:c2:4e:3c:2c:e4:5f:11:65:9c:
         7c:18:30:45:47:54:95:27:49:a3:c3:b4:38:99:81:a6:c7:dd:
         f2:69:c6:e5:31:b6:ce:58:30:eb:2e:c6:af:b2:b5:09:ba:b5:
         b3:1a:a9:58:94:e3:6f:10:12:3d:e3:8c:d2:2f:bc:0c:e1:fd:
         6a:0c:ab:6a:3d:5c:29:70:2c:99:cf:7e:c9:82:22:bc:be:8a:
         43:f2:06:cf:72:e6:cc:f9:3d:f7:aa:9a:38:99:b2:96:88:4f:
         e0:b6:02:ad:e5:29:b7:56:ea:7c:e5:b7:50:93:f8:e8:3d:41:
         87:1d:13:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:45 2026 by rpki-client