Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
File:                     Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft (raw, json)
Hash identifier:          s10xxE7lnCyGRH72P+LA6Pf3nqyDrcZcn6W5lsAsXzE=
Subject key identifier:   20:27:0B:51:41:E0:FA:A4:EF:E5:5F:8B:4A:67:E4:4F:47:A4:EC:5B
Authority key identifier: 62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95
Certificate issuer:       /CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
Certificate serial:       01A101368F38EBBE41D8A1D0B0AB471045F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
Manifest number:          0275
Signing time:             Sat 03 Oct 2026 10:01:55 +0000
Manifest this update:     Sat 03 Oct 2026 10:01:55 +0000
Manifest next update:     Sun 04 Oct 2026 10:01:55 +0000
Files and hashes:         1: V6kppHtIo247BBTH3uKp26adRoU.roa (hash: r9eyxABr1xQBoWx1fQ1XYssusw5T9eBOHoVdb80YKAw=)
                          2: Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl (hash: gQbhCpAKL8rD2+De7seTAtfnUwq+GbsZnBS8L+y9/1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 10:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:01:36:8f:38:eb:be:41:d8:a1:d0:b0:ab:47:10:45:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
        Validity
            Not Before: Oct  3 10:01:55 2026 GMT
            Not After : Oct  4 10:01:55 2026 GMT
        Subject: CN=20270b5141e0faa4efe55f8b4a67e44f47a4ec5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:68:a4:fb:fc:5b:e1:80:28:48:25:c8:bf:8e:
                    5b:d5:f7:94:61:6b:41:05:1d:28:f2:73:a4:e9:49:
                    9b:de:a7:3f:0d:4f:8c:91:59:d1:20:76:35:6a:54:
                    a2:0a:da:f3:07:69:5b:46:ba:b1:e8:35:33:61:4f:
                    80:db:40:b0:d1:44:f6:bb:71:fc:e6:85:4e:95:ba:
                    2d:26:f8:5e:ff:a5:06:4c:1d:f3:1c:e8:1f:48:2c:
                    ce:c8:75:34:dc:9b:2d:9d:63:b5:9a:51:0b:37:1e:
                    e5:ac:cc:b6:77:3a:f9:c8:77:fa:92:1b:4c:27:af:
                    bf:cd:7c:b9:17:9e:a0:e5:9e:d5:2f:05:d6:69:35:
                    6d:55:1c:5d:7c:a5:8e:64:9b:ce:b3:83:e8:76:c6:
                    b8:3f:6d:7c:68:b3:f3:11:a7:10:0a:e3:73:17:ec:
                    19:fe:de:c5:fa:23:73:3e:02:9a:a9:21:70:db:63:
                    46:0d:b2:37:09:b9:5c:b3:a0:4a:5b:ca:e5:38:d6:
                    4c:24:4e:be:22:67:94:5a:54:d1:99:51:26:ce:3c:
                    c4:84:88:f7:b2:3c:f6:ba:da:39:ef:74:d4:20:50:
                    34:0a:c8:72:9c:ef:11:36:c4:c9:92:c0:33:da:2b:
                    49:ab:dd:4c:87:20:71:e5:a4:52:b8:89:d0:51:11:
                    1e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:27:0B:51:41:E0:FA:A4:EF:E5:5F:8B:4A:67:E4:4F:47:A4:EC:5B
            X509v3 Authority Key Identifier:
                keyid:62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:65:a4:90:7f:53:8a:9a:0f:1b:f2:a0:16:57:53:fe:6a:93:
         db:c2:f7:84:8a:e0:ff:ca:25:77:1f:e0:69:e0:46:b1:88:e4:
         56:2c:63:0d:3e:d3:be:5d:d6:43:0f:d6:98:71:e6:62:bf:03:
         7e:62:95:15:d7:32:a1:41:9d:90:4d:c8:88:3d:9d:3a:8a:7a:
         26:8f:ea:ae:c5:5f:89:53:2d:85:2c:01:fa:f7:18:7c:90:86:
         bc:11:ec:cc:5c:b0:cf:f6:a5:6e:10:13:fb:33:bd:a5:cf:fa:
         19:11:86:63:32:16:2e:32:55:e2:c2:fa:d0:1b:5d:52:9c:47:
         9a:ce:d9:3d:dc:53:24:09:50:1f:cc:5b:be:16:cc:f3:2c:03:
         1e:2d:32:54:93:49:e6:94:86:b2:3f:4d:70:d4:74:dc:9f:40:
         c3:c7:10:22:e1:7c:2e:30:50:b8:fc:d3:d9:42:0f:15:8a:64:
         0c:df:e7:60:24:71:0a:bf:98:d1:b4:b1:4d:c6:8c:32:fa:40:
         83:17:06:8a:9a:56:2f:9f:31:ff:39:fd:0d:4d:be:f8:f5:32:
         ce:9c:c2:5b:74:d7:cf:3e:a8:d8:a4:49:56:14:86:c4:3e:da:
         f3:bb:93:34:b4:58:6e:92:39:c4:f5:4e:dc:aa:4d:dc:13:1e:
         1e:88:a0:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEBNo84675B2KHQsKtHEEXyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZDliNWRhODQ2MTBlZDIyMGY2ZDBmZDFhODg4ZDFmOTQ2
M2Y1OTUwHhcNMjYxMDAzMTAwMTU1WhcNMjYxMDA0MTAwMTU1WjAzMTEwLwYDVQQD
EygyMDI3MGI1MTQxZTBmYWE0ZWZlNTVmOGI0YTY3ZTQ0ZjQ3YTRlYzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22ik+/xb4YAoSCXIv45b1feUYWtB
BR0o8nOk6Umb3qc/DU+MkVnRIHY1alSiCtrzB2lbRrqx6DUzYU+A20Cw0UT2u3H8
5oVOlbotJvhe/6UGTB3zHOgfSCzOyHU03JstnWO1mlELNx7lrMy2dzr5yHf6khtM
J6+/zXy5F56g5Z7VLwXWaTVtVRxdfKWOZJvOs4Podsa4P218aLPzEacQCuNzF+wZ
/t7F+iNzPgKaqSFw22NGDbI3Cblcs6BKW8rlONZMJE6+ImeUWlTRmVEmzjzEhIj3
sjz2uto573TUIFA0CshynO8RNsTJksAz2itJq91MhyBx5aRSuInQUREewwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAnC1FB4Pqk7+Vfi0pn5E9HpOxbMB8GA1UdIwQY
MBaAFGLZtdqEYQ7SIPbQ/RqIjR+UY/WVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXRtMTJvUmhEdElnOXREOUdvaU5INVJqOVpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83NTVkN2YtODdhZi00YTI5LTk3NDQt
OGVkMzY4YTlkNjAwLzEvWXRtMTJvUmhEdElnOXREOUdvaU5INVJqOVpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83NTVkN2YtODdhZi00YTI5LTk3NDQtOGVkMzY4YTlkNjAw
LzEvWXRtMTJvUmhEdElnOXREOUdvaU5INVJqOVpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWWkkH9T
ipoPG/KgFldT/mqT28L3hIrg/8oldx/gaeBGsYjkVixjDT7Tvl3WQw/WmHHmYr8D
fmKVFdcyoUGdkE3IiD2dOop6Jo/qrsVfiVMthSwB+vcYfJCGvBHszFywz/albhAT
+zO9pc/6GRGGYzIWLjJV4sL60BtdUpxHms7ZPdxTJAlQH8xbvhbM8ywDHi0yVJNJ
5pSGsj9NcNR03J9Aw8cQIuF8LjBQuPzT2UIPFYpkDN/nYCRxCr+Y0bSxTcaMMvpA
gxcGippWL58x/zn9DU2++PUyzpzCW3TXzz6o2KRJVhSGxD7a87uTNLRYbpI5xPVO
3KpN3BMeHoigTg==
-----END CERTIFICATE-----
Generated at Sat Oct 3 20:22:49 2026 by rpki-client