Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
File:                     YWFHDTm-S6LdXfj6R7FjlieOZwo.mft (raw, json)
Hash identifier:          Y0ytShQPrTAGCHN5QJuYDfhQULLmAX7957oF7KOetRU=
Subject key identifier:   93:E7:9D:9B:B0:17:BB:7F:D2:BD:8C:37:77:3A:6C:A1:FC:6E:C7:90
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Certificate issuer:       /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial:       019E1CB52CC24B281F4258C3C18F09E9FDA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
Manifest number:          14BD
Signing time:             Tue 12 May 2026 15:01:35 +0000
Manifest this update:     Tue 12 May 2026 15:01:35 +0000
Manifest next update:     Wed 13 May 2026 15:01:35 +0000
Files and hashes:         1: A2edUifbSShzdJ1Gis-SqBKDNH4.roa (hash: Vy37s5YBxFgEPmxrlCq+GM34iA4Ip0Oc6gKZuBhegNc=)
                          2: BCl7MB3_y2oxXQzotATLHKx4ipA.roa (hash: cuzPfN/+DidXUdzwKXKugyiHRnAz67hGoOQ7sgfzzcQ=)
                          3: BPuWk6CfIovuR0hN4ab9_Vg8fpM.roa (hash: Io/zg3oPjnrBQRK8TUjjHMBbPc/oa9KH3Wg0gDqsd6M=)
                          4: LYaVyURA1Hqer0FhBdoqEAlltug.roa (hash: NWGVsZzZidWUl0MNChqOvov8kyqJB0zTJQ1HSXjGZw4=)
                          5: MFBUVUGoLTFb6mMUZK00McW_7z0.roa (hash: F53ezXG/M5tdcqiYCNPbO7yVUwgcKU5OMRV7nr04e3o=)
                          6: YWFHDTm-S6LdXfj6R7FjlieOZwo.crl (hash: R3B1fn0LwQtTPmTbCzZBADL0yHquCkGcjFQytPND0KQ=)
                          7: cRoy5bgDIbo0tHnv4tgtYkF3qjY.roa (hash: 1shpahuyjixHWI6Z3X/oGSNmNs/VZ/2i+HhPZ5UneNQ=)
                          8: qaLHn37xtjw3qy4avBKJZx30pG8.roa (hash: 37z1vS8oU1I2E/gSNbcyl0yQyKdvAVXffCULUq/vHIU=)
                          9: vjs4SJ2sBkeFTzkFFUzhQ69w0XU.roa (hash: POgZ6BcdFl2VWn+PBlY2p8Kf1YWJoO7uTq5oeM+i2KI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b5:2c:c2:4b:28:1f:42:58:c3:c1:8f:09:e9:fd:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
        Validity
            Not Before: May 12 15:01:35 2026 GMT
            Not After : May 13 15:01:35 2026 GMT
        Subject: CN=93e79d9bb017bb7fd2bd8c37773a6ca1fc6ec790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d5:33:3c:0a:8b:8e:79:83:03:a3:96:cb:81:
                    61:21:66:87:63:17:72:1a:e0:2c:6e:4c:bf:40:2e:
                    79:74:49:86:03:37:9b:f1:7d:91:85:cd:7e:87:a5:
                    58:6a:99:ed:84:7e:3f:f0:8f:44:18:84:ae:1d:2a:
                    96:31:bd:94:1d:da:16:86:d6:e2:14:db:b2:4d:b6:
                    25:63:13:39:10:6e:d9:a2:02:72:d6:5c:51:1f:d6:
                    4f:6b:59:c3:82:75:da:70:c1:45:32:11:03:09:e5:
                    63:7d:71:70:1a:1e:d8:03:03:1a:b2:48:e1:5c:e8:
                    13:26:13:bd:ed:2a:7d:c8:97:33:0b:49:aa:a7:40:
                    21:8e:54:51:5d:79:6d:75:54:98:d9:20:d3:1e:97:
                    02:1f:b8:8d:9e:11:70:7b:ea:f7:56:22:8d:35:f4:
                    15:38:f7:79:6f:42:5f:03:03:10:a2:39:12:75:f6:
                    f1:c3:0c:54:58:b7:56:a1:79:1a:d2:2f:2e:ff:64:
                    7a:5f:71:5e:81:e0:a4:53:77:bb:bc:f7:f1:6a:47:
                    52:cb:c9:25:3d:c3:c4:50:4d:54:59:3a:b4:32:ef:
                    ac:4b:67:9a:9f:f7:e3:a6:a6:f5:ae:d5:a4:df:08:
                    bb:3d:d8:4c:3c:9f:7c:ff:db:be:7b:05:10:7a:22:
                    25:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E7:9D:9B:B0:17:BB:7F:D2:BD:8C:37:77:3A:6C:A1:FC:6E:C7:90
            X509v3 Authority Key Identifier:
                keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ca:ae:07:9e:7e:27:39:b7:ad:e7:6c:36:d3:a2:69:3b:b4:
         f3:8b:60:00:e8:44:f7:c7:7f:55:39:f5:61:ab:8e:c5:8b:0f:
         09:f7:41:36:13:89:b2:c0:05:52:d1:d8:92:1e:6f:e0:87:2b:
         53:fb:d5:a7:4c:46:84:87:80:45:2b:87:eb:7f:c1:ce:b1:e6:
         e6:e7:28:f4:99:1d:65:38:bf:14:da:d1:a3:c1:33:7a:b2:50:
         a7:f9:b4:74:3f:40:d7:76:70:53:19:68:27:e1:b8:36:d9:7d:
         50:72:20:29:85:bd:66:1a:3c:3a:78:e6:64:ee:89:ac:6a:1d:
         bc:ab:bb:2b:88:90:f4:ab:2f:7b:df:22:25:4d:39:6f:ba:ab:
         aa:07:e6:c3:4f:e5:80:ab:80:dc:6f:84:ec:62:6f:c6:1e:97:
         6f:d4:1b:e3:26:49:c8:4b:bc:a5:ef:9e:db:5c:1f:7b:94:3f:
         d2:99:f9:db:ba:85:53:42:f6:19:2d:95:69:9d:0f:91:71:af:
         ef:c1:2d:d0:35:38:38:35:bd:ff:c9:95:bf:fd:db:c0:15:a0:
         e1:09:97:94:6f:6f:2d:21:98:b7:d4:bb:ae:1c:4e:d3:ba:98:
         db:38:db:c6:fe:72:1b:82:44:7e:25:60:87:90:e9:32:37:14:
         4f:14:79:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctSzCSygfQljDwY8J6f2pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNjE0NzBkMzliZTRiYTJkZDVkZjhmYTQ3YjE2Mzk2Mjc4
ZTY3MGEwHhcNMjYwNTEyMTUwMTM1WhcNMjYwNTEzMTUwMTM1WjAzMTEwLwYDVQQD
Eyg5M2U3OWQ5YmIwMTdiYjdmZDJiZDhjMzc3NzNhNmNhMWZjNmVjNzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNUzPAqLjnmDA6OWy4FhIWaHYxdy
GuAsbky/QC55dEmGAzeb8X2Rhc1+h6VYapnthH4/8I9EGISuHSqWMb2UHdoWhtbi
FNuyTbYlYxM5EG7ZogJy1lxRH9ZPa1nDgnXacMFFMhEDCeVjfXFwGh7YAwMaskjh
XOgTJhO97Sp9yJczC0mqp0AhjlRRXXltdVSY2SDTHpcCH7iNnhFwe+r3ViKNNfQV
OPd5b0JfAwMQojkSdfbxwwxUWLdWoXka0i8u/2R6X3FegeCkU3e7vPfxakdSy8kl
PcPEUE1UWTq0Mu+sS2ean/fjpqb1rtWk3wi7PdhMPJ98/9u+ewUQeiIlmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPnnZuwF7t/0r2MN3c6bKH8bseQMB8GA1UdIwQY
MBaAFGFhRw05vkui3V34+kexY5YnjmcKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lNTE4NTYtZTUyZS00YjI0LThjOTkt
YzI0MGJmYzljYmMxLzEvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9lNTE4NTYtZTUyZS00YjI0LThjOTktYzI0MGJmYzljYmMx
LzEvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8quB55+
Jzm3redsNtOiaTu084tgAOhE98d/VTn1YauOxYsPCfdBNhOJssAFUtHYkh5v4Icr
U/vVp0xGhIeARSuH63/BzrHm5uco9JkdZTi/FNrRo8EzerJQp/m0dD9A13ZwUxlo
J+G4Ntl9UHIgKYW9Zho8OnjmZO6JrGodvKu7K4iQ9Ksve98iJU05b7qrqgfmw0/l
gKuA3G+E7GJvxh6Xb9Qb4yZJyEu8pe+e21wfe5Q/0pn527qFU0L2GS2VaZ0PkXGv
78Et0DU4ODW9/8mVv/3bwBWg4QmXlG9vLSGYt9S7rhxO07qY2zjbxv5yG4JEfiVg
h5DpMjcUTxR5Kw==
-----END CERTIFICATE-----
Generated at Wed May 13 01:08:50 2026 by rpki-client