Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
File:                     bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft (raw, json)
Hash identifier:          1tR+PDyM8ne5pF3pJBAl85gIZFdSt7NlW/aFP29w7L0=
Subject key identifier:   AC:D7:44:AA:31:98:8A:8B:14:81:D1:34:3F:72:B4:8A:C4:1F:CE:62
Authority key identifier: 6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
Certificate issuer:       /CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Certificate serial:       019D27044DB05C4785D325B9540E04842F71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
Manifest number:          15A1
Signing time:             Wed 25 Mar 2026 22:01:26 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:26 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:26 +0000
Files and hashes:         1: bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl (hash: NNgHdtOEY89VHjRhztYWx/RCUvm+uhiiPn+tJ9gpfps=)
                          2: kWBcLWbBpgxkDI6iP43AMVT02QQ.roa (hash: DhH8TmZUljkPYNL8msm1EY1T9GfinFMyYlzEgVbaeXM=)
                          3: n1DMRdKzm8oeQmtnP_k6lYoYRn4.roa (hash: CzHWxSnIwKSP4ZEcY55YGCHA51157aAGFagW8+Jl+6s=)
                          4: yNfD365-tXOpusJAZY2aazsc3UA.roa (hash: OKJa0B2w6ILG8VVTp6yanFtDn08u3rnQfhZF1PqwyYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:4d:b0:5c:47:85:d3:25:b9:54:0e:04:84:2f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
        Validity
            Not Before: Mar 25 22:01:26 2026 GMT
            Not After : Mar 26 22:01:26 2026 GMT
        Subject: CN=acd744aa31988a8b1481d1343f72b48ac41fce62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:26:4c:b4:61:4c:cd:5c:8c:6c:34:06:22:a2:
                    a9:1d:c3:f6:e3:e1:f2:30:0f:45:64:cd:d9:bf:fd:
                    6e:e3:8d:71:ab:a2:e3:89:22:d0:e3:c5:63:d1:19:
                    2d:16:f8:57:3a:dd:5d:3e:d0:c9:0b:3c:f0:70:2c:
                    95:69:89:22:07:07:a6:5f:ec:63:34:b7:49:ef:08:
                    25:9a:16:b3:1f:f4:93:ae:a0:3a:b8:96:46:5e:e1:
                    61:74:17:d3:56:c7:05:80:98:6a:57:e0:7c:4d:4f:
                    74:fb:f6:fc:54:8d:05:29:bb:ce:79:83:b3:c2:b6:
                    7c:15:5d:73:ea:6e:ef:5f:84:d9:9a:e1:f8:35:4e:
                    0d:fb:af:9d:70:de:4e:76:f1:53:38:2e:59:57:35:
                    b0:c1:dd:70:f5:da:76:b1:23:c5:72:b8:43:80:2f:
                    cf:84:84:72:71:2a:57:e4:f4:c2:3f:78:ef:18:90:
                    73:75:ee:83:e2:85:58:19:75:98:2f:e1:62:f5:fd:
                    43:ad:e1:7e:40:32:6a:d4:42:0d:cd:92:a7:4d:78:
                    fb:69:96:72:1f:b2:7a:73:a1:27:db:6b:6f:67:69:
                    80:bc:8f:11:74:b1:f6:c7:23:3d:0c:f7:8e:e9:7f:
                    58:da:30:7b:b1:4c:92:ac:69:1a:41:99:6e:57:6f:
                    77:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D7:44:AA:31:98:8A:8B:14:81:D1:34:3F:72:B4:8A:C4:1F:CE:62
            X509v3 Authority Key Identifier:
                keyid:6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:4b:95:81:67:cc:8a:79:4b:0f:97:52:8d:16:f5:0e:9a:39:
         c6:62:83:d6:ca:c0:2d:c0:fe:5a:e1:c1:7b:cc:51:8d:2c:fe:
         ce:ac:02:2c:a0:30:08:74:01:b6:79:67:e5:10:3b:2e:62:07:
         d0:dc:37:b9:6b:c7:5b:e3:51:1f:8c:f1:67:0f:2a:9c:6f:be:
         60:3e:90:8b:1e:c8:70:58:83:1a:9a:3a:1e:99:58:ef:f7:e8:
         6a:03:e9:06:6c:40:8a:08:85:f0:a0:b5:89:4b:ca:a5:1e:d3:
         35:8f:25:74:97:e4:fc:98:e7:fe:84:93:c6:90:7f:27:c4:e3:
         24:f0:d2:0f:d2:a9:90:9b:6e:ea:bd:31:82:dc:ec:2e:69:af:
         d5:54:9a:1a:f7:b0:c9:65:b5:b1:1e:5a:bd:3e:3a:57:d7:ed:
         d9:90:e7:e3:b7:e9:5b:b6:a4:ef:e6:b0:a8:98:a8:e6:cc:c7:
         3f:e8:f5:28:60:dc:0a:e9:34:e2:2e:a0:f0:07:b9:f7:71:3c:
         b7:30:48:23:96:89:2a:07:54:7e:23:39:82:82:d3:a4:60:5d:
         a3:ec:bf:3f:7b:56:e4:fc:27:d2:55:fc:f5:17:4d:db:e8:11:
         ff:b7:b1:f3:05:f5:c6:4b:31:ac:66:e0:ef:bc:09:5a:12:a9:
         f5:c8:87:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:17 2026 by rpki-client