Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
File:                     YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft (raw, json)
Hash identifier:          qLW5TpcyK0TOurTpGj1mytJzJW46ziSR4sg08aL+SU8=
Subject key identifier:   7D:4D:27:81:B9:26:EC:50:05:DC:49:A4:C0:48:77:72:0A:93:DF:7C
Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
Certificate issuer:       /CN=601331eccd96d02c1035734cd00a390e8311d942
Certificate serial:       019F93246796C4F965CC21A300CBEE7ED558
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
Manifest number:          180F
Signing time:             Fri 24 Jul 2026 08:01:04 +0000
Manifest this update:     Fri 24 Jul 2026 08:01:04 +0000
Manifest next update:     Sat 25 Jul 2026 08:01:04 +0000
Files and hashes:         1: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl (hash: idrB1LhECFxFEoPQgueKJIRTDbW05WgWjSl1WYo8B7g=)
                          2: tCO87qgLeHdiJcQ1IV_bd46Jvho.roa (hash: 2SSHDUuNwyIUrIbmZYF0QjOFxPKwxanOkPswUq79oUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:24:67:96:c4:f9:65:cc:21:a3:00:cb:ee:7e:d5:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942
        Validity
            Not Before: Jul 24 08:01:04 2026 GMT
            Not After : Jul 25 08:01:04 2026 GMT
        Subject: CN=7d4d2781b926ec5005dc49a4c04877720a93df7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d1:0c:6e:b7:5c:ea:e3:f7:9f:6c:4f:1d:96:
                    12:72:e0:c0:92:99:dd:a3:a4:89:82:76:49:6d:30:
                    4f:33:c5:3e:af:e3:10:11:df:37:44:e4:2b:ea:12:
                    b9:73:5c:f7:ab:b1:ac:e0:36:47:77:1c:56:05:f4:
                    a9:f5:9d:e6:3b:f5:4f:8c:bc:4e:87:3e:13:d1:c7:
                    75:76:2d:f8:a5:c4:f4:a5:cc:c0:24:a6:6c:62:1e:
                    93:ec:d4:88:77:b4:d9:5f:fb:13:38:70:b1:0a:eb:
                    7b:c2:db:1b:ba:fd:29:44:b4:f9:43:36:4a:51:28:
                    c8:f6:60:8d:f8:de:7f:0c:47:64:d1:a6:35:a3:10:
                    a8:f2:05:aa:83:aa:20:c0:92:6c:dd:59:44:4b:93:
                    5c:76:71:44:63:24:d1:81:26:7f:91:ee:c6:77:f4:
                    7a:4a:28:99:a8:c7:34:b7:4d:97:bb:2c:47:64:65:
                    92:74:da:5a:95:11:92:e2:42:ca:ce:c5:20:ff:b3:
                    b8:9a:f0:44:e8:78:36:79:dc:89:1f:1a:e2:f5:69:
                    64:11:c5:ee:81:36:86:c1:39:d4:dc:1f:82:8c:c6:
                    30:da:41:a4:02:d3:a0:96:7a:30:15:99:53:ff:06:
                    b3:cf:17:d1:98:18:8f:43:5a:90:7b:28:47:69:f8:
                    c6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4D:27:81:B9:26:EC:50:05:DC:49:A4:C0:48:77:72:0A:93:DF:7C
            X509v3 Authority Key Identifier:
                keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:7e:19:de:4b:c5:04:78:01:9a:a2:ee:1c:d6:ea:1f:fe:d2:
         78:43:9e:bb:cd:96:26:8a:4f:76:d3:68:54:47:38:32:e7:5f:
         17:d7:14:01:72:56:cc:d6:5c:34:99:e2:4f:3b:5b:0a:48:e6:
         30:6f:a1:3b:46:d5:95:63:1f:b0:48:cd:7b:a8:41:07:4d:b0:
         c6:9d:19:26:46:d8:cd:e8:f3:40:58:84:22:b9:e8:0e:94:eb:
         c0:bc:e5:c0:82:f3:ab:2e:b1:df:3f:5b:26:60:bb:e4:3c:1d:
         64:fa:a2:de:63:34:b7:0c:b7:c5:72:4a:7d:c3:f2:df:ae:74:
         d0:f8:7d:3b:8e:55:68:54:c5:d6:14:5e:46:7d:e0:0e:8e:d5:
         1d:6b:22:0f:05:7a:49:06:e7:eb:c5:bc:8e:da:f3:ed:f7:be:
         c2:bf:d1:3b:62:e6:34:9d:16:cb:4b:b7:89:b0:44:6f:1e:13:
         f5:2d:3a:aa:37:59:e8:3b:3d:8c:26:f8:95:16:d9:f7:d5:08:
         8e:03:88:f9:e0:a0:5e:1b:e6:36:d3:5e:5d:33:d3:4f:84:33:
         ff:2e:47:ce:e0:6c:ac:03:6f:c7:5f:dc:de:26:46:aa:58:6f:
         ef:1d:3e:6b:7a:38:78:bb:9a:6d:94:1b:d7:37:0b:87:16:de:
         8a:22:6b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:01:54 2026 by rpki-client