Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
File:                     yYlmC_FH9ij7fPiycYc3_qhimNA.mft (raw, json)
Hash identifier:          wig8Z1qJTDO3ZXsOzCSwukvTzRGQ7SZSphHcJ0mBYF0=
Subject key identifier:   AC:95:32:FC:25:D3:EC:CF:85:41:97:F9:80:0E:23:F0:44:F8:69:0A
Authority key identifier: C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
Certificate issuer:       /CN=c989660bf147f628fb7cf8b2718737fea86298d0
Certificate serial:       019D2703F11B35CBBA3A34DE71763AA30122
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
Manifest number:          0B8F
Signing time:             Wed 25 Mar 2026 22:01:02 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:02 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:02 +0000
Files and hashes:         1: IggoS081L9PfSnoANLO8UPkw_zo.roa (hash: RstMLmB9/U68WoUS3YJFOjuTsGp4LpQVXF1KSqQUnnk=)
                          2: yYlmC_FH9ij7fPiycYc3_qhimNA.crl (hash: oVq+AfkD1/oiZv6USUKN2Q6HLD7AbLt0IBnBNdxFHFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:f1:1b:35:cb:ba:3a:34:de:71:76:3a:a3:01:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c989660bf147f628fb7cf8b2718737fea86298d0
        Validity
            Not Before: Mar 25 22:01:02 2026 GMT
            Not After : Mar 26 22:01:02 2026 GMT
        Subject: CN=ac9532fc25d3eccf854197f9800e23f044f8690a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c2:8f:9f:48:14:66:25:57:06:5f:29:b6:a6:
                    f8:b3:5b:42:ff:a4:51:36:d9:e1:92:25:ff:88:e9:
                    70:2e:e6:11:96:53:0c:e2:a0:8f:ca:7a:a5:7b:d9:
                    c9:48:56:44:74:6d:a3:fe:ce:eb:f8:1b:8c:86:85:
                    16:ea:50:c6:c5:7a:57:0a:72:9b:01:7e:c5:53:1d:
                    77:a2:f9:78:56:3f:1b:6d:54:59:20:0a:f6:8e:10:
                    da:68:ef:75:13:44:3f:21:36:e9:99:10:b0:68:f9:
                    71:e1:0f:29:af:87:bd:d9:e4:cc:fe:ba:8d:28:85:
                    2d:ff:30:12:e6:e5:ae:bb:58:9d:64:f7:a1:48:de:
                    78:86:a5:48:91:a3:92:3b:5f:3e:35:3d:1a:0f:44:
                    22:b5:dd:77:87:f7:76:f9:15:e0:5a:69:b8:a6:c8:
                    82:5f:eb:0c:1e:3d:5f:59:d0:e6:d3:0c:d5:be:7d:
                    a9:70:4f:49:01:39:33:c5:42:d9:c6:b3:d9:bf:f3:
                    3d:52:ce:f7:03:33:2d:a0:be:77:39:7a:6d:5c:31:
                    11:d1:d7:ff:61:93:85:b5:37:39:bb:51:9a:4d:86:
                    92:23:e2:b0:10:0e:03:61:6d:41:6b:00:9c:59:25:
                    46:f9:ef:e1:b0:ed:a6:f1:2e:ba:c0:2f:ec:6a:3c:
                    37:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:95:32:FC:25:D3:EC:CF:85:41:97:F9:80:0E:23:F0:44:F8:69:0A
            X509v3 Authority Key Identifier:
                keyid:C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:cc:a2:1b:f0:42:19:80:6a:9a:ff:97:1f:54:7f:26:d7:87:
         0f:71:6a:c2:01:c0:d5:cc:be:ec:34:c6:90:c8:53:ef:d4:ae:
         60:a1:6f:ff:7b:c2:dc:52:50:ac:d5:62:9f:a3:cb:3c:e3:02:
         35:63:3d:0d:e1:d5:14:86:e4:ad:10:58:13:a0:1d:62:b9:f6:
         32:c3:b1:a4:9e:36:76:09:dc:ee:12:e3:b8:09:f8:c5:b4:ba:
         9e:b9:6f:28:ae:53:9d:01:3c:2c:2e:77:b2:1b:35:ce:3b:bc:
         e7:d1:e3:ee:43:08:b3:49:83:8c:bc:a4:f7:ea:d1:e3:2c:aa:
         04:22:3e:30:e3:50:08:46:6a:d3:2e:1e:63:fa:f8:03:9d:cf:
         37:59:28:c1:df:e4:0f:a4:13:11:06:5b:9b:bc:b7:f6:1a:84:
         b7:ac:fc:d9:ee:dd:a9:b2:a9:9d:25:b9:36:fb:b7:07:e8:19:
         1f:c4:56:ec:d0:57:fd:1f:8a:9a:2c:90:19:a7:b8:85:47:3a:
         68:c6:ed:56:6b:a4:36:83:77:fc:a8:4b:68:4a:3b:0b:09:90:
         13:00:83:bb:a2:a7:1d:ca:f2:95:11:0f:e4:7e:f7:85:f9:36:
         3d:61:97:94:ee:a8:3d:1d:fd:f1:0e:f8:15:05:97:e7:6c:98:
         a0:d4:60:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA/EbNcu6OjTecXY6owEiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ODk2NjBiZjE0N2Y2MjhmYjdjZjhiMjcxODczN2ZlYTg2
Mjk4ZDAwHhcNMjYwMzI1MjIwMTAyWhcNMjYwMzI2MjIwMTAyWjAzMTEwLwYDVQQD
EyhhYzk1MzJmYzI1ZDNlY2NmODU0MTk3Zjk4MDBlMjNmMDQ0Zjg2OTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMKPn0gUZiVXBl8ptqb4s1tC/6RR
NtnhkiX/iOlwLuYRllMM4qCPynqle9nJSFZEdG2j/s7r+BuMhoUW6lDGxXpXCnKb
AX7FUx13ovl4Vj8bbVRZIAr2jhDaaO91E0Q/ITbpmRCwaPlx4Q8pr4e92eTM/rqN
KIUt/zAS5uWuu1idZPehSN54hqVIkaOSO18+NT0aD0Qitd13h/d2+RXgWmm4psiC
X+sMHj1fWdDm0wzVvn2pcE9JATkzxULZxrPZv/M9Us73AzMtoL53OXptXDER0df/
YZOFtTc5u1GaTYaSI+KwEA4DYW1BawCcWSVG+e/hsO2m8S66wC/sajw3gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyVMvwl0+zPhUGX+YAOI/BE+GkKMB8GA1UdIwQY
MBaAFMmJZgvxR/Yo+3z4snGHN/6oYpjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVlsbUNfRkg5aWo3ZlBpeWNZYzNfcWhpbU5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82ZjAzOTItOGE4NS00N2FiLTg3NDYt
YzE5ODY1M2FhYzVmLzEveVlsbUNfRkg5aWo3ZlBpeWNZYzNfcWhpbU5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy82ZjAzOTItOGE4NS00N2FiLTg3NDYtYzE5ODY1M2FhYzVm
LzEveVlsbUNfRkg5aWo3ZlBpeWNZYzNfcWhpbU5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMyiG/BC
GYBqmv+XH1R/JteHD3FqwgHA1cy+7DTGkMhT79SuYKFv/3vC3FJQrNVin6PLPOMC
NWM9DeHVFIbkrRBYE6AdYrn2MsOxpJ42dgnc7hLjuAn4xbS6nrlvKK5TnQE8LC53
shs1zju859Hj7kMIs0mDjLyk9+rR4yyqBCI+MONQCEZq0y4eY/r4A53PN1kowd/k
D6QTEQZbm7y39hqEt6z82e7dqbKpnSW5Nvu3B+gZH8RW7NBX/R+KmiyQGae4hUc6
aMbtVmukNoN3/KhLaEo7CwmQEwCDu6KnHcrylREP5H73hfk2PWGXlO6oPR398Q74
FQWX52yYoNRg5g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:21:48 2026 by rpki-client