Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
File:                     YTIzl9blKd_wbHzxTRdg1ucGqm8.mft (raw, json)
Hash identifier:          0Elz5PF5rc77AW94xnTg6fI598JFMUwKLu8NFe+q/eY=
Subject key identifier:   8C:77:9B:72:8F:69:6E:D2:A3:A8:A4:2F:27:80:23:DA:7D:4F:E2:C8
Authority key identifier: 61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
Certificate issuer:       /CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Certificate serial:       01A0F6E97B2DA5CFC840983FC86E625BBE6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
Manifest number:          073E
Signing time:             Thu 01 Oct 2026 10:01:31 +0000
Manifest this update:     Thu 01 Oct 2026 10:01:31 +0000
Manifest next update:     Fri 02 Oct 2026 10:01:31 +0000
Files and hashes:         1: TVT4_OBKA-2I4FrIkhh2iW24oPw.roa (hash: U1OVtJgMOPc/4XYbv8bLSVgA0GMg+CX+suR8Va/RqoY=)
                          2: YTIzl9blKd_wbHzxTRdg1ucGqm8.crl (hash: vgehGx1s/3DhEsRD502W4E+zT+9tRDViAFycjN1Bwks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 10:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f6:e9:7b:2d:a5:cf:c8:40:98:3f:c8:6e:62:5b:be:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
        Validity
            Not Before: Oct  1 10:01:31 2026 GMT
            Not After : Oct  2 10:01:31 2026 GMT
        Subject: CN=8c779b728f696ed2a3a8a42f278023da7d4fe2c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6e:94:bf:9d:fa:c1:d0:95:81:1c:2e:12:d0:
                    ae:26:c8:40:59:b4:bc:d6:57:5d:26:d5:51:e1:ed:
                    20:27:77:d8:6b:fb:0d:ca:b5:d9:59:0f:08:9a:4a:
                    18:4e:9f:f3:09:57:b0:e3:24:d6:8b:3e:f5:21:a6:
                    ae:69:bc:3e:1b:0d:70:93:54:c9:88:e2:fb:47:cb:
                    6b:fe:ff:2d:08:85:c3:ff:06:7f:98:0c:dd:5f:23:
                    f8:f6:d4:59:7a:db:76:13:1c:bf:0c:62:b4:29:72:
                    8f:27:3a:bf:b1:4e:48:a8:8d:59:76:e3:96:7a:93:
                    6a:94:cb:4b:c1:a9:40:e1:6d:43:83:7a:4d:a9:85:
                    4f:88:05:5c:15:5c:13:52:a1:ce:1f:b0:4a:91:96:
                    28:58:03:ec:50:83:ac:34:fa:2f:11:4c:ea:2e:ba:
                    3b:bd:d1:5e:a4:40:0c:3b:d5:c4:2f:fc:cc:9a:4b:
                    98:69:9d:46:de:6a:7d:c2:d3:b8:67:2c:e6:3e:eb:
                    64:ab:ce:b6:fd:91:d8:ee:02:c2:35:ca:8c:f9:c8:
                    43:f6:e5:8e:f0:6c:e5:a4:98:15:cc:1a:3f:f3:46:
                    9b:d5:dd:08:cb:e6:68:61:9a:68:82:5e:e1:55:f6:
                    85:8b:57:7a:9e:d4:9e:5b:3d:1e:f2:e4:98:a7:20:
                    76:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:77:9B:72:8F:69:6E:D2:A3:A8:A4:2F:27:80:23:DA:7D:4F:E2:C8
            X509v3 Authority Key Identifier:
                keyid:61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c0:04:32:15:90:0a:e3:f8:94:05:c3:3f:35:75:45:0a:48:
         e7:c6:65:e9:e5:69:f2:e8:df:65:dd:1a:0d:19:43:13:60:14:
         37:f1:eb:b9:69:3e:78:d9:56:65:fe:c2:48:0c:f1:f6:4e:18:
         c8:0e:13:8e:e7:cd:bc:77:2d:ae:b5:80:8d:52:5a:95:9c:a9:
         0b:47:b5:33:5c:f3:af:74:98:07:41:2a:0c:dd:42:22:63:00:
         7f:ee:6e:1f:75:4b:69:50:90:37:dd:88:4b:22:bd:3f:96:45:
         51:65:b8:1d:65:90:52:29:60:21:7f:59:bf:11:f0:bf:04:41:
         3c:f7:f0:d4:1f:cb:fb:54:a2:23:3c:28:92:44:87:40:ec:3c:
         84:2c:46:61:34:e4:c9:56:21:f0:dc:9e:4d:79:28:fd:ec:4f:
         4a:c7:04:1a:7a:61:16:3a:66:5d:1b:a1:5e:dc:6f:43:4c:96:
         ac:7c:99:b5:1c:e5:39:9e:00:32:df:c6:c6:e3:d0:5e:c8:1f:
         1e:ba:6c:a7:af:3b:0a:4e:ad:0a:dc:28:1e:79:c2:98:92:a7:
         be:06:f1:19:2f:ce:c7:21:9c:34:5f:f7:c9:03:a9:27:ce:7d:
         0a:ae:0c:ed:e1:00:46:4f:d3:a8:e1:66:e4:31:59:f0:40:0f:
         91:e3:43:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 21:01:41 2026 by rpki-client