Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
File:                     Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft (raw, json)
Hash identifier:          sp00ddQ0OpcfLFPQw7526rVWnJLBJ3/VDAGsOrVyDns=
Subject key identifier:   C0:23:D9:CA:67:2C:44:A0:9E:B9:AB:AC:A5:C8:90:07:65:C4:8E:1E
Authority key identifier: 62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95
Certificate issuer:       /CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
Certificate serial:       019E205AB6503B0A6E0E643153922D91CB0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
Manifest number:          F7
Signing time:             Wed 13 May 2026 08:01:16 +0000
Manifest this update:     Wed 13 May 2026 08:01:16 +0000
Manifest next update:     Thu 14 May 2026 08:01:16 +0000
Files and hashes:         1: Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl (hash: iqatvxoVHemlrOETAGMpETFjKIatMQ53GGN+qtb9b+Y=)
                          2: dfKf0SUwjmWHGeIDN6xaPuWneS0.roa (hash: KNktDMnqe7pkdReM74aezUUfDskVVEXdt3/JJZM1pKk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:b6:50:3b:0a:6e:0e:64:31:53:92:2d:91:cb:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
        Validity
            Not Before: May 13 08:01:16 2026 GMT
            Not After : May 14 08:01:16 2026 GMT
        Subject: CN=c023d9ca672c44a09eb9abaca5c8900765c48e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d9:61:39:84:80:73:24:3f:26:d3:62:f8:fe:
                    18:31:ac:43:70:01:66:70:98:09:57:5b:d2:2e:e2:
                    35:74:0c:16:e7:f7:b9:43:e3:02:62:29:06:f5:c3:
                    57:be:bf:c3:20:5e:16:4d:d7:08:53:d5:d2:2a:12:
                    1a:43:59:fe:ea:19:98:4a:e3:32:b7:b9:80:89:5a:
                    4c:12:fd:c8:34:c4:4f:e2:1e:19:d4:8d:2b:d5:44:
                    2d:98:81:21:5d:6b:53:75:2a:0d:d5:3c:11:b1:2b:
                    17:db:e9:86:15:59:d6:2e:5a:e5:05:ee:aa:8b:dc:
                    89:0e:db:ef:96:9f:1a:17:37:60:e3:b2:2e:cb:7d:
                    56:e8:5f:70:75:c6:3c:4c:7b:ea:3d:6d:10:d7:3e:
                    55:82:86:40:e2:c2:85:db:1d:9a:3e:cc:6f:d4:8d:
                    3c:f3:20:79:6e:4e:87:55:0d:25:32:ad:2b:c7:84:
                    77:6b:4c:f0:48:9e:37:bc:c5:f7:40:6d:3f:83:1a:
                    73:8d:2d:63:2b:8c:4a:49:da:3b:48:65:bc:81:6a:
                    4e:c9:78:71:88:d7:23:50:77:a8:cc:23:99:66:27:
                    0e:15:de:63:04:91:cc:53:bb:f3:c5:08:74:3e:da:
                    31:84:89:f4:b4:1a:07:31:f5:82:12:e0:47:8c:9d:
                    68:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:23:D9:CA:67:2C:44:A0:9E:B9:AB:AC:A5:C8:90:07:65:C4:8E:1E
            X509v3 Authority Key Identifier:
                keyid:62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:cb:0d:29:be:41:b0:4a:54:ba:ec:b3:b5:84:b7:8a:13:38:
         0e:44:10:b7:f0:b6:38:f6:c5:77:ce:c8:87:8c:fd:d9:84:f1:
         ec:13:c4:85:5b:3a:09:1e:41:90:31:fa:8c:d3:09:9e:05:e4:
         42:8e:b7:5e:c3:5a:3a:8e:74:43:62:3b:e9:cc:d0:ae:67:d2:
         47:0d:2e:26:c9:d9:95:ee:c8:90:64:bd:95:37:70:1f:ba:04:
         d4:fb:82:e8:89:17:42:51:ab:80:7e:cc:d6:b1:2f:af:66:f5:
         98:31:1a:61:ac:26:87:a3:d2:49:06:62:c9:c8:ca:98:30:ad:
         00:4e:cd:d7:c7:52:f0:15:b5:35:2d:76:5b:2c:54:83:55:88:
         fa:fd:09:27:47:4d:ef:76:58:7e:a2:fb:8b:c7:59:29:dd:8f:
         ac:07:8e:4d:69:10:1a:a3:7d:e5:b8:d7:1f:a6:eb:4a:ef:02:
         5b:88:b6:f5:6f:b8:79:a5:69:f0:08:7f:c5:10:f1:a8:cd:e7:
         18:66:be:18:b7:f1:e0:e2:1a:69:a7:92:d6:4b:ab:21:c7:b2:
         75:17:36:d0:05:5b:da:eb:3a:11:98:06:4c:f4:fd:25:db:8b:
         b7:73:5f:d7:de:17:26:ea:70:a8:6b:f1:00:fb:8e:dc:00:77:
         8f:20:af:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:20 2026 by rpki-client