Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
File:                     0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft (raw, json)
Hash identifier:          1CvfParLg4mJlaHKDi7s4xBCsug2k/oPE47zdgwmeBk=
Subject key identifier:   40:17:E7:D8:E9:94:68:90:85:8F:AD:78:9C:67:BE:40:EC:02:CE:6B
Authority key identifier: D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54
Certificate issuer:       /CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054
Certificate serial:       019D265FCD714B3DABC480865C39C7E58A35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
Manifest number:          096C
Signing time:             Wed 25 Mar 2026 19:01:45 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:45 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:45 +0000
Files and hashes:         1: 0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl (hash: J0N48QAFu4nYaqnGRwernq7+KfEZLmPVOxYCpxL19bM=)
                          2: 8l0bbv2uUBlilBWZ-F4pKnrQmO0.roa (hash: yr3qgoPKK+MW0Wmz/o5fGlppgkLAJukaAckqwL8mZRo=)
                          3: DvcjVJOkMRapOd1S3buwBoLNCuM.roa (hash: PhgxUgpvf/qnyzn1ZNECv/I05gKGU5HogGKChSYsZr8=)
                          4: ZzV_VDVzaIqtDpwjtJwMSnjk_9Y.roa (hash: WaOF2f40LMOuM1ZWX/pUBZ5cJF1/e+UASVUsf1IegLw=)
                          5: xY3oO-WMZjEDTENfTRiDC2FkHKs.roa (hash: wPsvyOO1iyC8jxQyomTONofcW3odk+2KnelEPbJzeYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:cd:71:4b:3d:ab:c4:80:86:5c:39:c7:e5:8a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054
        Validity
            Not Before: Mar 25 19:01:45 2026 GMT
            Not After : Mar 26 19:01:45 2026 GMT
        Subject: CN=4017e7d8e9946890858fad789c67be40ec02ce6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:89:31:81:8a:82:ac:85:a7:01:92:84:4f:fe:
                    97:03:a5:fa:5c:af:1d:d6:4e:5c:1f:37:26:02:8f:
                    81:da:73:66:29:fa:8a:e0:18:26:da:d1:f0:53:e0:
                    d6:20:68:37:28:96:e4:99:65:93:08:9b:d8:a3:1b:
                    75:fd:57:f0:d6:08:b5:f8:0a:7d:34:db:f9:3e:bf:
                    9e:7c:f4:d8:44:0b:aa:2d:79:39:7f:7e:33:63:ea:
                    b0:77:40:0d:cd:10:ed:92:78:11:74:43:70:2f:23:
                    63:cb:85:26:94:11:52:f0:40:95:e8:fc:75:40:45:
                    c9:51:fc:50:8e:39:07:c5:b4:6e:32:dd:07:e7:fc:
                    55:8e:2c:c6:67:c5:50:b3:8e:4d:0b:ee:98:76:c0:
                    7e:87:8e:e5:5b:4b:84:31:5c:5a:4b:ad:99:91:fa:
                    1b:06:f2:e7:5b:59:eb:69:e2:85:a0:8b:cf:ed:a7:
                    d3:ef:24:eb:8f:ce:6b:b1:a9:de:6c:9b:f9:38:70:
                    34:f6:ab:a0:db:0e:93:df:5e:ed:f0:8b:c0:ab:80:
                    75:e2:f2:7d:33:f5:46:66:25:45:cf:6e:8b:43:2c:
                    f6:d2:db:cb:19:2b:3c:54:3b:76:33:9a:23:98:3d:
                    dc:e4:3b:9b:6f:66:e7:25:23:d5:7c:51:6d:77:43:
                    9f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:17:E7:D8:E9:94:68:90:85:8F:AD:78:9C:67:BE:40:EC:02:CE:6B
            X509v3 Authority Key Identifier:
                keyid:D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ca:36:06:f9:b5:7e:67:a0:60:89:63:14:fb:2e:2d:dc:55:
         e8:18:b9:e9:ad:01:45:c3:75:92:94:9b:f4:54:ac:2b:fa:62:
         e7:0d:62:41:8f:a9:86:0e:ac:38:6b:9c:6e:b5:6d:cb:02:e3:
         f5:37:27:97:cb:0f:29:d1:f8:5c:f2:f6:0e:56:46:14:d0:8d:
         d8:bc:27:c4:85:e4:03:ff:99:f1:03:53:74:6b:27:61:b0:6f:
         fd:7e:93:31:f6:2c:99:4c:c9:3c:c7:11:42:7d:00:20:2b:bf:
         15:5f:14:f8:da:b3:21:43:a5:1f:82:a4:5c:4b:dc:01:c1:55:
         4d:6e:f6:5e:76:83:8e:fb:27:55:e1:15:ae:f5:01:9b:a0:14:
         ad:9d:00:8e:0e:31:1e:97:ce:11:66:c5:8f:f4:8a:b5:8b:e4:
         99:99:3c:f3:83:79:51:46:98:1f:83:9a:ee:a7:fc:88:de:87:
         15:fa:76:fd:d2:15:b6:da:cf:11:55:77:84:23:9e:63:b6:d6:
         17:df:7a:6c:2e:53:a3:93:8b:92:82:e5:37:26:e8:5f:11:c3:
         88:92:1a:af:b0:e4:1a:68:1e:22:f3:16:13:df:dc:3a:7e:7f:
         fd:6d:e5:bc:4f:68:17:33:cb:e8:d2:16:c0:e2:37:f0:9d:0a:
         ef:f2:62:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX81xSz2rxICGXDnH5Yo1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZjYwYjE3NmQ5NWZkOGQzZDBiZDY1YzVkMTJjODM5NDFm
N2YwNTQwHhcNMjYwMzI1MTkwMTQ1WhcNMjYwMzI2MTkwMTQ1WjAzMTEwLwYDVQQD
Eyg0MDE3ZTdkOGU5OTQ2ODkwODU4ZmFkNzg5YzY3YmU0MGVjMDJjZTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIkxgYqCrIWnAZKET/6XA6X6XK8d
1k5cHzcmAo+B2nNmKfqK4Bgm2tHwU+DWIGg3KJbkmWWTCJvYoxt1/Vfw1gi1+Ap9
NNv5Pr+efPTYRAuqLXk5f34zY+qwd0ANzRDtkngRdENwLyNjy4UmlBFS8ECV6Px1
QEXJUfxQjjkHxbRuMt0H5/xVjizGZ8VQs45NC+6YdsB+h47lW0uEMVxaS62Zkfob
BvLnW1nraeKFoIvP7afT7yTrj85rsanebJv5OHA09qug2w6T317t8IvAq4B14vJ9
M/VGZiVFz26LQyz20tvLGSs8VDt2M5ojmD3c5Dubb2bnJSPVfFFtd0OfCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAX59jplGiQhY+teJxnvkDsAs5rMB8GA1UdIwQY
MBaAFNP2Cxdtlf2NPQvWXF0SyDlB9/BUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMF9ZTEYyMlZfWTA5QzlaY1hSTElPVUgzOEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iYzVmZDctM2U2My00OTQ1LWFmYjct
MTE3NWU1YTA3YTU1LzEvMF9ZTEYyMlZfWTA5QzlaY1hSTElPVUgzOEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9iYzVmZDctM2U2My00OTQ1LWFmYjctMTE3NWU1YTA3YTU1
LzEvMF9ZTEYyMlZfWTA5QzlaY1hSTElPVUgzOEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmco2Bvm1
fmegYIljFPsuLdxV6Bi56a0BRcN1kpSb9FSsK/pi5w1iQY+phg6sOGucbrVtywLj
9Tcnl8sPKdH4XPL2DlZGFNCN2LwnxIXkA/+Z8QNTdGsnYbBv/X6TMfYsmUzJPMcR
Qn0AICu/FV8U+NqzIUOlH4KkXEvcAcFVTW72XnaDjvsnVeEVrvUBm6AUrZ0Ajg4x
HpfOEWbFj/SKtYvkmZk884N5UUaYH4Oa7qf8iN6HFfp2/dIVttrPEVV3hCOeY7bW
F996bC5To5OLkoLlNyboXxHDiJIar7DkGmgeIvMWE9/cOn5//W3lvE9oFzPL6NIW
wOI38J0K7/Ji6g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:17 2026 by rpki-client