Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
File:                     0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft (raw, json)
Hash identifier:          bjKyKpuPMF79QAhdtlHAHvMOYIBUPy+IIpF2ndtZ9AE=
Subject key identifier:   F0:B0:BC:97:44:D8:35:4B:6A:F6:9D:01:38:55:CF:39:5A:D1:D8:35
Authority key identifier: D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54
Certificate issuer:       /CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054
Certificate serial:       019E1D90D4E45A23A7920C1A7D0F32678FCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
Manifest number:          09EC
Signing time:             Tue 12 May 2026 19:01:31 +0000
Manifest this update:     Tue 12 May 2026 19:01:31 +0000
Manifest next update:     Wed 13 May 2026 19:01:31 +0000
Files and hashes:         1: 0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl (hash: ylTa/b0lVa+wlnmM9N1flxIM9hPsEwR12MdSO/lEKCk=)
                          2: 8l0bbv2uUBlilBWZ-F4pKnrQmO0.roa (hash: yr3qgoPKK+MW0Wmz/o5fGlppgkLAJukaAckqwL8mZRo=)
                          3: DvcjVJOkMRapOd1S3buwBoLNCuM.roa (hash: PhgxUgpvf/qnyzn1ZNECv/I05gKGU5HogGKChSYsZr8=)
                          4: ZzV_VDVzaIqtDpwjtJwMSnjk_9Y.roa (hash: WaOF2f40LMOuM1ZWX/pUBZ5cJF1/e+UASVUsf1IegLw=)
                          5: xY3oO-WMZjEDTENfTRiDC2FkHKs.roa (hash: wPsvyOO1iyC8jxQyomTONofcW3odk+2KnelEPbJzeYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:d4:e4:5a:23:a7:92:0c:1a:7d:0f:32:67:8f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054
        Validity
            Not Before: May 12 19:01:31 2026 GMT
            Not After : May 13 19:01:31 2026 GMT
        Subject: CN=f0b0bc9744d8354b6af69d013855cf395ad1d835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e9:60:72:95:ae:e2:c3:4a:b3:a4:59:e2:a2:
                    39:36:74:f2:50:4f:65:c1:ed:33:6a:16:25:fd:22:
                    6c:3f:01:0a:25:0c:a7:33:64:d8:ad:12:27:bc:6b:
                    45:36:73:cf:b6:34:5c:03:69:91:07:dd:c8:bf:b4:
                    b5:32:58:cb:65:6c:c7:0e:eb:83:ba:d2:59:22:b4:
                    3b:2f:f6:86:94:3a:3f:c7:7e:f0:76:d7:e2:8d:53:
                    10:86:70:6b:b4:4c:a4:8c:eb:b3:1a:41:e0:96:5e:
                    bd:6c:18:e9:b0:a8:34:ee:1e:a8:46:db:d8:a1:2f:
                    20:b9:d8:bd:77:86:5b:35:69:1e:8c:57:7d:57:85:
                    9e:4b:f4:50:07:f0:5f:f9:b5:ee:19:33:bc:3e:98:
                    6c:49:02:4f:c4:ee:42:94:59:ea:61:84:62:95:69:
                    fe:42:1e:d1:c9:94:60:e6:fb:5d:ab:7a:ac:3e:85:
                    81:d3:42:9d:94:6f:89:9b:e5:03:5a:e4:e0:fd:f0:
                    7d:e4:e4:4b:60:87:2b:3a:74:1e:8f:ff:16:5b:33:
                    93:5a:21:4b:ad:14:3b:80:1c:1b:14:20:7b:fe:0e:
                    a3:14:20:ad:4d:df:ed:47:0f:d9:ee:06:de:a4:e7:
                    55:47:42:2b:12:35:1a:0a:ce:5d:b3:20:80:e9:c0:
                    78:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B0:BC:97:44:D8:35:4B:6A:F6:9D:01:38:55:CF:39:5A:D1:D8:35
            X509v3 Authority Key Identifier:
                keyid:D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:a2:d8:7a:2e:fe:bc:04:6e:af:5b:98:32:2b:54:bc:2b:6a:
         7c:07:24:6b:f6:f7:f2:40:f9:50:66:43:63:3a:6c:5c:33:ed:
         0e:af:7b:18:b2:a5:eb:29:b5:9a:a5:26:74:e2:07:36:88:3e:
         d7:0e:20:f6:a0:11:fd:88:6c:ab:e9:84:f0:68:04:25:35:a0:
         40:e0:a7:b1:f3:e0:4b:69:74:cf:cd:54:1b:45:a4:4c:fe:8c:
         a5:91:cc:73:ed:3e:16:70:40:e8:d2:62:96:c3:a2:da:e4:4b:
         76:7e:0c:be:5d:a4:7a:5a:ed:85:d3:89:f3:44:c9:13:68:6c:
         ed:30:0d:9c:07:1b:f1:0a:8e:77:a2:58:4e:be:1c:5d:bd:6f:
         27:90:99:ea:ff:22:4f:b5:67:fe:02:ef:5d:f3:71:28:59:01:
         49:e8:fc:30:ae:1b:32:12:05:dd:9b:3b:af:e8:fe:d0:23:c4:
         a8:e5:b4:e9:b3:bd:7d:1b:c2:99:2d:38:17:2f:41:2b:bd:33:
         71:0e:57:6a:f8:52:f6:30:b1:25:1a:6b:0b:c5:b5:0a:4d:8f:
         33:cb:5e:f9:fc:d6:8a:36:31:99:eb:18:b8:0c:70:58:1a:b7:
         09:f3:8c:de:7a:4f:be:17:83:e9:0f:fe:2c:74:07:eb:7f:49:
         db:90:ac:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:59:10 2026 by rpki-client