Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
File:                     yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft (raw, json)
Hash identifier:          o9lGpDWjWMPfB8FYyWN4mYEPJZQ/32RoViDTahIr8iU=
Subject key identifier:   26:8C:11:61:99:48:31:A6:57:5C:3B:BF:54:18:DE:2B:85:DF:E8:19
Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
Certificate issuer:       /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Certificate serial:       019F95126E088831E6BA8B50CC16D32BB7F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
Manifest number:          0818
Signing time:             Fri 24 Jul 2026 17:00:40 +0000
Manifest this update:     Fri 24 Jul 2026 17:00:40 +0000
Manifest next update:     Sat 25 Jul 2026 17:00:40 +0000
Files and hashes:         1: HrcUui0miVrUYtzzMrX-U9gOlCo.roa (hash: UAsUsT7UI6Qc5HNmPWo/d7Tyc/aSJ+uqpouXt12HmG0=)
                          2: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl (hash: 0b2yzt70MZfx+/F7/SSOAdlIFAFsTY0LK6a0I4jDjxs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:6e:08:88:31:e6:ba:8b:50:cc:16:d3:2b:b7:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
        Validity
            Not Before: Jul 24 17:00:40 2026 GMT
            Not After : Jul 25 17:00:40 2026 GMT
        Subject: CN=268c1161994831a6575c3bbf5418de2b85dfe819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ae:f6:55:03:78:b1:d1:13:d0:57:dd:6e:b7:
                    8c:ac:55:53:15:8e:e7:85:f0:6a:76:0e:55:f9:99:
                    39:40:5a:b3:45:e6:a5:5f:01:df:fa:33:c8:ce:dc:
                    12:cd:09:dc:69:ed:50:88:f4:a3:9d:de:15:ee:ad:
                    35:d9:d1:9f:6e:27:68:e6:86:3c:a1:08:bd:93:b0:
                    48:fc:77:3c:c5:b3:72:cc:29:bc:e6:e2:40:62:97:
                    d7:6b:18:f6:bc:4a:16:25:aa:d1:5b:ce:fd:17:fa:
                    5c:cb:d4:5f:39:7c:d8:61:0b:7a:4b:28:b3:a0:0e:
                    47:d9:fe:7a:1a:33:f7:fb:68:63:9c:2a:fb:75:1f:
                    b5:43:5e:e9:1d:5f:8e:f1:33:dd:d1:43:0b:c3:b3:
                    84:41:91:b5:fd:2d:e6:11:7d:a9:8c:e6:3b:28:78:
                    1a:92:e9:ec:e0:84:16:3e:e1:e0:0d:92:73:00:2d:
                    c0:2e:fb:ff:b5:4c:1f:02:1f:2d:fb:06:bb:7d:0f:
                    71:8e:0d:5e:6e:f8:6b:1a:f8:6b:e3:2d:a3:11:db:
                    56:04:6c:33:f9:4f:1a:01:18:59:af:d1:1e:06:08:
                    39:33:49:1d:6f:16:89:bc:fd:3a:14:2d:a0:b0:62:
                    59:12:bd:38:79:34:03:f1:7d:23:74:8b:2c:59:d0:
                    4d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8C:11:61:99:48:31:A6:57:5C:3B:BF:54:18:DE:2B:85:DF:E8:19
            X509v3 Authority Key Identifier:
                keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:b7:80:56:6b:e2:0b:9a:63:05:0a:b7:66:2a:ec:53:1a:93:
         26:51:24:04:52:3e:73:34:b9:eb:aa:e2:f5:80:a0:98:dc:9e:
         3c:03:01:82:04:4b:c9:28:8f:eb:5e:e8:53:be:c0:97:75:cb:
         45:74:40:06:29:dc:b9:7f:37:0e:e6:46:34:ae:33:32:c2:7d:
         fc:b7:26:e7:5c:da:45:f8:7e:0d:d0:21:fa:19:d3:8b:4e:3f:
         b6:60:68:d9:68:a7:21:aa:7e:d4:f7:8d:0d:aa:40:ea:ff:f8:
         26:45:ad:26:98:d4:20:5a:39:83:47:4b:6e:c3:75:33:de:79:
         bd:53:aa:38:1e:05:a1:2b:38:ff:bd:60:85:0b:b6:ca:97:80:
         c5:7d:c0:4a:fb:f6:db:08:10:8b:18:76:af:a5:0c:0a:39:93:
         d5:71:1b:bd:8e:53:1d:a8:8d:5f:7e:80:94:f6:a7:73:eb:8e:
         9b:08:c4:13:92:33:2b:71:49:43:77:30:c5:3b:13:4c:60:f3:
         5a:4c:18:00:57:0a:ab:0a:2b:d2:fd:1c:7d:4d:c2:ea:f5:31:
         d8:1a:f6:f3:8d:84:02:0d:70:6e:5b:60:e3:7e:bd:e3:6d:cd:
         1f:80:10:b7:7f:94:45:17:20:6a:03:3a:ca:83:90:76:06:21:
         36:28:a7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:04:19 2026 by rpki-client