Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
File:                     yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft (raw, json)
Hash identifier:          qDQIpS0RxHP8EGo/10h7IxviqOgHoFQ31d/xAMjs9M0=
Subject key identifier:   9F:49:72:12:84:F1:45:16:42:98:FB:0E:7E:8A:27:D1:BA:47:02:2C
Authority key identifier: C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
Certificate issuer:       /CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Certificate serial:       019E1FED2BC866404E241793AE32B3D74D1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
Manifest number:          029C
Signing time:             Wed 13 May 2026 06:01:37 +0000
Manifest this update:     Wed 13 May 2026 06:01:37 +0000
Manifest next update:     Thu 14 May 2026 06:01:37 +0000
Files and hashes:         1: Pk6dmv-1h5zWIXu5Oty1Pp_3yV4.roa (hash: /ND/9TFeaNgP6XF6YHep3PGuc7vk/LLfQoeSDsS92Uk=)
                          2: yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl (hash: XLJOo45i8XKvV22S1jP4naVmDRhAmgQQ/mI/y7bHxK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ed:2b:c8:66:40:4e:24:17:93:ae:32:b3:d7:4d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
        Validity
            Not Before: May 13 06:01:37 2026 GMT
            Not After : May 14 06:01:37 2026 GMT
        Subject: CN=9f49721284f145164298fb0e7e8a27d1ba47022c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:47:77:1f:33:c6:ac:05:63:8e:0b:a3:c2:42:
                    18:c0:d0:7a:dc:e3:36:44:12:ea:e3:80:d9:4e:96:
                    e0:6c:95:68:d5:8a:e8:44:6c:43:cb:98:fb:75:a3:
                    cd:26:0f:5d:9e:c0:4e:b4:6d:15:0c:76:ef:f1:bb:
                    4b:4f:ae:cd:70:8c:55:a7:68:2d:05:de:5b:b3:ab:
                    cd:89:ed:ff:ce:fd:2d:c3:34:98:74:4b:5c:b7:e9:
                    30:5f:fe:9c:40:77:18:cf:c2:ab:71:2a:0a:45:88:
                    34:eb:a6:a5:04:b4:84:50:a8:7b:9a:65:f3:01:ff:
                    67:2d:06:af:53:fb:2f:45:30:47:fa:78:74:c3:67:
                    ac:39:01:3a:dc:2d:14:b7:e8:50:6c:40:82:7d:9e:
                    48:d8:2e:df:f4:15:64:9a:b7:4f:82:c6:04:16:f5:
                    9b:8d:78:d1:f1:3f:82:43:59:02:c7:dd:7a:45:30:
                    de:c0:e4:50:4c:1f:e8:2a:29:da:12:03:ac:b4:37:
                    19:28:9d:41:0b:64:a9:9e:d7:b6:ce:8e:5c:a2:9c:
                    30:f3:af:b1:56:92:20:b5:3b:b7:2a:37:3e:79:10:
                    c7:ae:1b:b5:3e:60:f5:7d:16:71:70:34:d7:51:22:
                    aa:99:6b:1e:2d:d3:e4:1d:ec:90:0f:55:40:ca:32:
                    b6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:49:72:12:84:F1:45:16:42:98:FB:0E:7E:8A:27:D1:BA:47:02:2C
            X509v3 Authority Key Identifier:
                keyid:C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:d8:b4:10:a3:d7:22:cb:ca:b0:7f:89:60:8c:41:65:71:51:
         ff:46:dd:38:c7:6e:72:88:70:1d:e2:6f:4e:c5:ff:f0:b1:cf:
         61:18:90:77:9f:bc:b8:72:67:27:51:79:d1:aa:33:e7:62:ef:
         43:61:20:c9:b1:e7:34:39:b0:e6:3a:41:f4:e7:b0:8e:3b:df:
         a9:8a:7a:55:c9:05:ca:0d:ca:1d:7b:03:66:91:57:9c:a8:ee:
         1d:e2:71:f7:d2:4a:88:2e:4b:b6:95:3b:36:d3:16:72:3e:b5:
         03:87:76:8a:44:2a:9b:1e:fc:d1:b2:b9:d3:f7:3b:75:09:79:
         30:bc:ec:11:24:d1:f8:ef:e4:88:38:8a:30:63:c3:df:41:be:
         3a:9d:61:c7:ae:6f:f5:01:6c:f0:22:33:42:fe:08:d2:06:16:
         a8:1d:a4:05:52:92:2d:ba:16:94:a4:49:88:50:b7:74:f5:b7:
         b2:42:e8:13:7b:d4:ab:41:a7:53:df:14:90:a4:e2:3a:16:a3:
         a0:b7:6b:55:ae:77:0d:5d:82:49:58:12:3f:24:ac:89:58:0e:
         ef:0b:10:97:d2:f6:37:d2:a1:27:68:04:2c:97:f6:e7:b6:54:
         49:99:f0:be:1a:13:9a:93:2a:23:57:4b:dd:e5:0b:50:a2:39:
         9d:f7:b4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:00:40 2026 by rpki-client