Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
File:                     YbHjHAn-gm_k15Ln-ohV4K05NCo.mft (raw, json)
Hash identifier:          y5oN+2pmIpQkldB7BZ/MWbh0QXTnuzdBnwEVk8023l8=
Subject key identifier:   40:BC:4F:12:65:BC:7A:55:6B:40:DF:5B:82:0A:95:EC:29:F5:06:23
Authority key identifier: 61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
Certificate issuer:       /CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Certificate serial:       01A10437B79C7B37F5817CA5741432719C27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
Manifest number:          1A84
Signing time:             Sun 04 Oct 2026 00:02:02 +0000
Manifest this update:     Sun 04 Oct 2026 00:02:02 +0000
Manifest next update:     Mon 05 Oct 2026 00:02:02 +0000
Files and hashes:         1: YbHjHAn-gm_k15Ln-ohV4K05NCo.crl (hash: Z7xop3jDvoFR3D67vxfxneYIVeEJ5jyx29Z3dzm5uIs=)
                          2: gI7wdVdEujvd9VLF4Y0d2YxxXVQ.roa (hash: /3JebFmLKobYKFETqDIlb43OxSa7E2ofJHi6zZ1wGnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 00:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:04:37:b7:9c:7b:37:f5:81:7c:a5:74:14:32:71:9c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
        Validity
            Not Before: Oct  4 00:02:02 2026 GMT
            Not After : Oct  5 00:02:02 2026 GMT
        Subject: CN=40bc4f1265bc7a556b40df5b820a95ec29f50623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5c:6c:c8:d6:f5:1b:4a:3f:0e:7d:05:43:db:
                    43:12:c1:2d:17:b7:fe:6e:5c:17:d0:12:99:46:3a:
                    a4:b9:24:91:7b:4e:b1:5f:af:29:4b:15:63:11:7d:
                    fe:68:88:e0:50:9b:e1:38:ce:d5:29:23:fb:0d:40:
                    98:a8:95:63:f0:1c:aa:0a:66:94:2a:91:c0:9c:da:
                    5c:37:ff:eb:e3:97:35:b4:76:02:02:c7:23:37:c6:
                    14:8c:dc:8d:86:fa:37:0e:93:6e:c4:f9:f7:0b:75:
                    0b:3d:09:96:66:62:d5:e0:b6:9b:86:2d:30:c0:36:
                    d7:21:60:34:f9:ce:5d:c8:69:e5:55:3d:e7:41:e7:
                    5a:b2:b9:a6:24:5a:85:2d:0d:7a:cf:53:88:f5:8f:
                    59:39:9c:36:b5:79:85:ca:f4:d4:27:7c:e4:18:01:
                    24:18:5b:88:ae:f3:e5:66:a5:9d:5b:9d:72:90:0f:
                    f8:96:64:ce:41:f8:91:ba:45:41:d8:1a:c1:3e:a6:
                    f7:79:f1:e8:d6:8d:5e:ce:02:9a:f8:38:07:95:63:
                    00:db:6b:12:57:e5:30:f7:c1:79:fc:66:43:fc:47:
                    2c:73:af:88:3f:60:8c:e4:8c:51:00:e2:d2:ed:b7:
                    e0:8d:b3:d9:de:e8:73:4b:0d:1c:45:0a:16:e9:06:
                    ae:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BC:4F:12:65:BC:7A:55:6B:40:DF:5B:82:0A:95:EC:29:F5:06:23
            X509v3 Authority Key Identifier:
                keyid:61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:b5:7e:f3:fe:12:f6:9d:cc:44:87:56:9f:cb:cb:05:fe:98:
         16:0f:86:f2:5c:a6:0a:54:f8:be:94:0e:14:78:a8:e5:21:27:
         ee:7f:8e:6e:31:45:68:8c:41:47:2f:45:bd:ac:51:eb:ce:38:
         bc:50:61:84:12:c6:23:ee:84:36:11:79:b9:92:73:27:93:f4:
         d6:f2:83:dc:2b:87:ed:5a:80:be:60:04:51:dc:47:45:e7:9b:
         c7:c5:fa:c3:c2:8e:1b:d8:8d:60:55:78:bb:03:70:90:85:f7:
         c8:ec:89:86:9d:02:8e:28:05:c7:17:33:41:18:43:9b:31:46:
         8c:71:67:43:d2:2a:88:30:e2:46:85:3e:e4:c3:8b:8b:44:ad:
         a5:5a:f0:f7:fe:85:e4:8a:92:88:61:2d:70:3c:96:c6:ef:58:
         b4:86:ee:52:d3:d6:aa:5a:61:78:a2:40:77:91:d2:8d:49:f6:
         d8:ac:38:ef:f2:1e:fd:15:bd:bc:6a:c8:c9:79:d0:c8:f2:37:
         e8:a8:b9:5e:04:34:dd:ba:27:45:5b:34:ec:82:72:35:3f:55:
         b7:b4:13:f1:87:76:40:8d:86:eb:55:73:eb:96:6a:6f:3e:21:
         1c:27:47:b7:1a:9f:c0:25:8c:67:fb:e3:4c:5c:bc:1d:bc:52:
         ef:63:0c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:01:41 2026 by rpki-client