Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
File:                     YxGp1MECUvv3O3Fl81rMHc6fCpM.mft (raw, json)
Hash identifier:          xsTMdRIuGPVmGdJt1laFiziltY/c+aEpdbyRiy2Jf1U=
Subject key identifier:   AA:5E:98:62:8E:C7:5A:56:67:78:0B:62:96:02:B2:61:7C:73:19:AD
Authority key identifier: 63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
Certificate issuer:       /CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Certificate serial:       01A0CD47C89CD87A29815718DFC4C45F9F61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
Manifest number:          1A6A
Signing time:             Wed 23 Sep 2026 08:00:28 +0000
Manifest this update:     Wed 23 Sep 2026 08:00:28 +0000
Manifest next update:     Thu 24 Sep 2026 08:00:28 +0000
Files and hashes:         1: JNAnR3OpCBmqbjcaQCFbgyf64p8.roa (hash: j0YiHlaOdUim9VJP58wic2ZTEsjQbXoSPaCpDLTojSY=)
                          2: YxGp1MECUvv3O3Fl81rMHc6fCpM.crl (hash: Hf1TaG4KPDJGEg4ftdD9Kf7mEJI6XeVoNH3CxRVQMCc=)
                          3: n7pDY_8zMb4XywLOR-Gyk8ZEh6Q.roa (hash: CUzjuBkLmCl6WtXKZbLolmS3oXPaSaat/iqu2Jp6Roo=)
                          4: pQCwNtxQfevwjzTWQlPSrcKIyzM.asa (hash: fnJXuE/dTgBqB91HrhvHN15z3pJqyxsX+3auncc4g/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:47:c8:9c:d8:7a:29:81:57:18:df:c4:c4:5f:9f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
        Validity
            Not Before: Sep 23 08:00:28 2026 GMT
            Not After : Sep 24 08:00:28 2026 GMT
        Subject: CN=aa5e98628ec75a5667780b629602b2617c7319ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:30:09:02:4f:dc:81:dc:c6:39:de:b7:8a:
                    8b:56:e3:66:b5:1b:05:2f:2f:6d:7c:61:c1:07:07:
                    4b:f5:82:24:69:eb:c8:4b:c4:f2:c5:e8:7d:d8:40:
                    06:e0:90:46:63:3a:d0:29:ea:a2:15:c8:83:43:97:
                    ea:bb:7f:a8:34:a0:75:9a:a8:8b:f4:a0:d4:37:23:
                    e3:48:af:2d:87:f7:da:b3:88:6c:9f:e4:14:33:24:
                    d3:2f:d5:55:bb:5c:f9:22:54:0e:5e:bb:e6:46:dd:
                    be:a0:02:c7:b7:f3:e1:59:fa:6a:89:d0:f8:87:4a:
                    f9:b2:2c:7f:12:d8:a6:e6:20:56:8a:e3:8e:35:87:
                    eb:14:60:93:0b:d4:a6:3f:3f:84:2c:59:03:8f:59:
                    e8:da:25:c7:6a:7b:6d:9d:f1:bf:2b:4c:9b:2f:6b:
                    f3:74:55:7f:b4:a0:ac:79:95:62:e5:ea:a0:3d:b0:
                    5f:e2:65:ef:d1:31:b1:93:0a:c7:e8:96:6c:98:d0:
                    29:7d:7f:9d:04:6c:80:37:ce:96:fe:8d:24:c6:1a:
                    bb:45:d2:4b:a0:f9:c2:3f:ff:1f:c9:a5:a5:68:c4:
                    69:e4:90:e1:56:fb:d2:e6:fa:35:ed:66:22:5e:ad:
                    93:06:ab:e7:97:c7:4c:6f:9d:dd:0d:36:df:30:53:
                    11:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5E:98:62:8E:C7:5A:56:67:78:0B:62:96:02:B2:61:7C:73:19:AD
            X509v3 Authority Key Identifier:
                keyid:63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:8f:3e:36:0d:a3:da:fe:54:e6:71:a8:bb:4c:b9:60:95:20:
         49:4f:4d:37:f3:fd:d5:ad:e7:0f:d8:d9:fc:32:9f:a4:09:5f:
         51:f7:83:11:7d:ed:13:15:99:b5:5a:e1:ea:4c:71:69:6d:a4:
         66:a6:27:fd:67:34:5f:1f:59:b7:5c:f8:64:7f:fd:79:dd:7c:
         72:ae:28:1c:38:14:3e:77:1a:b6:35:2e:23:9d:ac:34:f3:09:
         92:1d:23:49:40:8c:74:ac:33:2f:86:45:d9:5a:f1:31:d8:d8:
         13:f2:da:2b:fa:ff:a5:19:45:f5:46:f1:ba:7f:ef:8b:42:ed:
         5e:02:eb:64:8f:06:d4:68:5b:a4:92:e3:96:14:26:92:d6:34:
         83:2e:33:70:00:0f:98:11:fc:b2:b6:10:ea:6a:90:2b:da:a5:
         a7:b8:ca:b5:be:53:b1:23:d5:da:e4:c8:3b:85:6d:3d:a7:9e:
         a5:05:2e:b3:bb:14:b1:be:0e:50:91:b5:0b:97:35:35:eb:9a:
         8e:e6:2a:3c:9d:b1:c4:5a:46:6f:93:04:9d:2c:5a:69:cf:74:
         32:46:68:f2:1a:da:93:0b:6b:cd:5b:9c:ee:c6:1c:91:87:8c:
         59:da:d0:18:a0:64:f0:58:67:f1:6c:3e:b2:9a:cb:b2:69:60:
         7a:bd:1c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:17:45 2026 by rpki-client