Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
File:                     Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft (raw, json)
Hash identifier:          iYwhzrIL6+UuBQnazbO1Wl1rSB+xfDc8ulIWmvqA5dY=
Subject key identifier:   77:B0:B3:80:91:E2:87:71:3B:7E:FA:AA:09:85:E4:60:14:14:72:55
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Certificate issuer:       /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial:       019D26CD17F4AE7B669B445B37222618122C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
Manifest number:          0A3F
Signing time:             Wed 25 Mar 2026 21:01:08 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:08 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:08 +0000
Files and hashes:         1: 8iuryml04fmZQZih2yKLkb78hW8.roa (hash: dl916czGPtggSTrDPjUVhqgnNmY5i/HKL0IVfwG6bUw=)
                          2: AJEm0tpZ80PX3AOqTJlJZLLFZRo.roa (hash: 9niTFrHFWmF03337Z/JCr6D2zR0zYQdhet735YBvLGg=)
                          3: RMGZ-vy_dDQuHhZGPwdY1SDw3MA.roa (hash: J2ooeCLUwgG08rs8ThsvjcTV38rsjc50babTQPWvqzo=)
                          4: VYPTeU3GTpRqMWirs-4J0ak-y0Y.roa (hash: Q0x74IuPW45MM/QoYobdWOJwgU/vwyNB9bVYzPX6+yM=)
                          5: Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl (hash: x8nRosnpIhHM0eA7eNHcI7OJdPbTqXYzbQ5IF8HLd4M=)
                          6: ccp8zm5l48CBMMmzIGnalUun-Ds.roa (hash: z44haiNc9m8K5F7QSyFq2IsEkays9vJP4wkOIVQCjsw=)
                          7: kvQ545VBeKJ16540o8TuObo3Lms.roa (hash: 6nWlGmTGLlqKlb5UMIbOgwBINXEzC37TRE8Q0aoo66Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:17:f4:ae:7b:66:9b:44:5b:37:22:26:18:12:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
        Validity
            Not Before: Mar 25 21:01:08 2026 GMT
            Not After : Mar 26 21:01:08 2026 GMT
        Subject: CN=77b0b38091e287713b7efaaa0985e46014147255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b8:41:0a:b3:3e:2b:36:28:4b:3c:c8:9e:b8:
                    d2:6b:e7:70:fa:67:0a:ee:76:87:44:09:d7:af:e0:
                    4d:9c:cb:31:a8:d0:a0:b9:d6:63:bd:34:67:81:1c:
                    a4:d9:9a:75:aa:9a:dc:35:f5:35:c4:a0:1c:bd:26:
                    d0:c2:39:82:23:d7:d9:bc:f5:b2:86:26:b3:a7:33:
                    b6:83:66:6c:0a:37:2a:70:e2:3d:74:bb:33:9f:cc:
                    60:33:c1:27:cf:4e:15:2c:72:30:9e:f1:d5:0a:ec:
                    a1:b8:f9:e4:05:c6:6e:96:d4:2b:1a:e6:d0:2c:55:
                    b0:07:10:54:03:92:d4:31:10:6e:99:50:de:4b:47:
                    7c:8d:41:f2:ea:f1:1f:fd:1b:53:2f:55:56:b8:c5:
                    97:68:58:fd:38:90:94:18:6f:dc:51:ea:e9:1b:eb:
                    b9:e6:59:fb:1a:27:8d:33:6b:17:e5:50:b8:16:8e:
                    57:6d:28:19:dc:66:f6:70:fa:ea:1c:97:f4:44:05:
                    2f:4b:7a:d0:80:6e:b7:dc:f8:5b:60:d6:29:0a:ef:
                    ca:9b:97:92:5f:dd:01:ec:82:b1:9c:ae:2d:66:d2:
                    d0:19:80:4c:2a:a8:7c:b0:59:ab:78:0b:97:fe:6e:
                    55:05:e7:0a:6b:f6:48:c6:a0:52:ed:4d:c4:f1:da:
                    e5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B0:B3:80:91:E2:87:71:3B:7E:FA:AA:09:85:E4:60:14:14:72:55
            X509v3 Authority Key Identifier:
                keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ec:5e:48:23:ef:c7:3d:ef:f6:dc:e9:5f:f7:1a:90:30:90:
         38:f1:70:5b:4f:9a:da:8e:e0:b0:8f:ec:51:90:83:2a:a5:bd:
         bd:c0:d7:c0:65:6c:57:e9:7f:b1:37:18:7a:0d:9f:24:f8:c8:
         ca:03:ba:b3:44:f9:c3:db:f7:3c:24:85:9e:2f:21:5c:c9:24:
         cc:4e:b1:54:bc:b6:58:bf:63:8d:33:71:26:b9:5b:07:66:4a:
         46:d2:66:13:2e:43:2f:76:b6:68:36:ba:c7:09:e5:60:3e:c8:
         ab:74:e9:4b:c3:58:04:55:d3:94:47:13:a0:4c:93:c0:c7:5c:
         12:0f:eb:de:57:79:38:dd:61:8a:7b:02:b2:8f:97:9d:d3:37:
         63:33:2f:b2:8a:4b:35:70:5f:d5:e2:e9:ce:18:a7:2b:60:b1:
         ce:77:91:8d:73:0d:1d:83:90:57:75:5f:66:83:d6:82:3c:51:
         81:b7:39:38:1c:f3:63:27:87:8f:38:98:07:be:c9:03:34:dc:
         d3:0e:7a:c9:f8:d7:a3:9f:49:c9:48:c5:b7:32:6f:97:d5:6e:
         7b:d1:32:ce:29:a1:ec:51:ff:01:a1:54:bc:51:32:d8:e5:da:
         79:f9:a1:52:bd:a5:48:ef:2f:2b:cf:fb:60:77:19:f7:bd:8f:
         13:7c:2b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:09 2026 by rpki-client