Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
File:                     YoVOil7h3sifJbKnhZAj_7Ejufg.mft (raw, json)
Hash identifier:          bUxZlfpYBlsai6B2lCRURfL2YF4Cq8zPATqXkqU17f8=
Subject key identifier:   53:2C:F8:C1:5C:2D:09:74:BA:55:E9:4F:B8:07:4B:AC:08:B2:1F:49
Authority key identifier: 62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8
Certificate issuer:       /CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8
Certificate serial:       019D27A8D67F2F4CC7920F9C162CF89866FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
Manifest number:          080E
Signing time:             Thu 26 Mar 2026 01:01:09 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:09 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:09 +0000
Files and hashes:         1: YoVOil7h3sifJbKnhZAj_7Ejufg.crl (hash: uugD0W3L7gNFy8H7/uP/jKaLLQt7sWdQx0WSRoBCv7M=)
                          2: isOSymizWXOcC4S89abLh_Td0W4.roa (hash: ZSx/++lxhtzVvGMFIOdk3/EWMp5zvQTOhZYOai4ono8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:d6:7f:2f:4c:c7:92:0f:9c:16:2c:f8:98:66:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8
        Validity
            Not Before: Mar 26 01:01:09 2026 GMT
            Not After : Mar 27 01:01:09 2026 GMT
        Subject: CN=532cf8c15c2d0974ba55e94fb8074bac08b21f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0e:3d:e7:1e:f2:54:17:8a:fe:1c:87:60:2b:
                    26:58:9e:80:1a:8b:d0:55:5f:3c:0c:47:ad:e1:b3:
                    a8:83:3b:72:15:fd:a8:42:da:73:ce:b1:b7:51:1e:
                    33:72:c8:94:71:e6:a5:5e:4d:a7:4e:e7:16:45:76:
                    8b:c3:20:11:c0:ab:bc:27:d0:39:4c:23:57:9d:e3:
                    95:21:b1:1d:46:46:66:5f:a9:88:e5:ec:e6:79:d9:
                    0b:6a:00:9f:87:0e:33:6c:11:9e:a6:39:5d:e1:8b:
                    ef:96:03:ba:63:2a:d7:6b:c9:fc:9c:df:0d:b2:31:
                    cc:b4:89:a5:18:9c:b9:08:8d:29:e7:05:d8:1d:66:
                    36:c4:7e:0c:81:36:c3:43:c4:e8:e0:f9:38:9b:41:
                    79:72:3e:15:55:7a:4e:bd:fe:3b:f8:0f:29:b4:d5:
                    62:67:2e:26:21:7e:e6:0f:f3:4a:d1:3e:f8:cc:ea:
                    3e:80:26:a9:d6:4e:d2:51:e6:d1:02:67:f0:e5:05:
                    88:85:c0:e2:d7:16:e4:2a:65:98:fe:f2:c5:fa:b3:
                    91:98:bd:d3:d2:6b:1d:fc:a9:7d:32:41:e5:d1:02:
                    82:23:0f:23:6d:04:71:e1:cc:a5:f2:f1:ad:64:68:
                    04:78:9e:4d:b2:40:f6:b0:02:5e:88:de:f0:dc:a6:
                    a5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2C:F8:C1:5C:2D:09:74:BA:55:E9:4F:B8:07:4B:AC:08:B2:1F:49
            X509v3 Authority Key Identifier:
                keyid:62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:03:da:6c:d7:d3:3e:13:98:72:d1:7a:41:9c:c2:2a:76:4d:
         d6:95:49:d2:5f:ad:1f:3c:48:c4:02:92:3c:ff:7a:da:e0:81:
         09:1b:28:3f:28:2f:03:d2:cc:19:94:8d:a6:8b:e2:81:cd:d7:
         14:9d:60:65:23:61:b1:3e:72:64:30:32:1b:cd:d5:43:52:1c:
         32:5c:dd:c4:0e:62:73:60:d1:27:4c:4c:90:1b:35:1b:a9:84:
         f1:78:a9:07:24:38:c0:49:eb:d3:8b:64:60:b8:ad:32:40:3c:
         da:d0:8a:7c:e7:0d:eb:fa:98:ef:ed:30:98:51:a2:57:8f:12:
         b5:97:f2:4d:34:87:ba:63:33:a7:4a:e2:c0:d7:ad:b8:85:a0:
         30:59:c4:d9:5c:d4:8e:58:b6:2d:c4:69:9c:9d:33:e9:44:7e:
         2f:ba:7b:eb:94:bc:1b:27:5b:73:f0:5b:3e:c2:a3:12:c1:20:
         b8:2e:28:3d:b5:a5:31:77:80:4e:c7:43:b2:48:ac:92:df:45:
         eb:c3:54:3f:86:44:ec:ca:97:fa:f9:b6:57:71:4f:9b:95:63:
         55:35:6a:cb:4b:b0:8a:67:35:9b:f0:22:79:90:7f:84:3c:e4:
         c1:7b:48:bf:b8:cc:54:ea:82:c6:ec:ab:2b:d4:70:6d:57:db:
         36:fc:07:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:51:28 2026 by rpki-client