Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
File:                     yJwsxInr5I9JBYSshm_jYsQRfnU.mft (raw, json)
Hash identifier:          tRPzg7LyAkKIqE2VfUFZBlPpaJVlulFufu2TVYMoNfM=
Subject key identifier:   82:B8:EA:31:A1:8D:C1:F2:53:EB:E5:8F:37:A6:C3:43:59:E9:AB:21
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Certificate issuer:       /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial:       019D265FAFFB2F37DE8FE2CA276EA179C8B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
Manifest number:          15A2
Signing time:             Wed 25 Mar 2026 19:01:38 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:38 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:38 +0000
Files and hashes:         1: KbGZziqCA41JgOpe8AUOSiv8rIM.roa (hash: MBAhT/6sVckMLfrlu1S3S4sTHwbcNuOAQSyBUhp+xNk=)
                          2: Lr_Xbb1THDKqD6RwPgUdUA9h3EY.roa (hash: cfMlImvmxi+0oJBR3nteg7NdpbusKTlCxQY6ByRViVA=)
                          3: Wgv3nP3KPCzK8Vc3Ujwc5tCZFEY.roa (hash: sZiUtGsuan8lIISLSvNoUUBLxQveJeIACDPYwQFWZys=)
                          4: ZkNagawyRZ70RDIXLqeICJ_NWvA.roa (hash: 1+wxgjSOWcm3+O0IK2qUtncsQ8Yyn6qzh3/LjTc9BqU=)
                          5: fotaW3reFeI2SLYUxkvM2Rp9oWU.roa (hash: 6ry4szc/4WpgdCqU6mLC/W0kQtFV5fQ4EQEyOj83ctw=)
                          6: yJwsxInr5I9JBYSshm_jYsQRfnU.crl (hash: XWIhf+VT9JqGAOStA94HAzIL4MX//Tcoy6COg6UlV+0=)
                          7: yhTiQ6aF_riEAT4eOqJDdkaQDgQ.roa (hash: uZrw316MsEk/l2BZfI6IcKecY27h3x31Etnd61KuR2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:af:fb:2f:37:de:8f:e2:ca:27:6e:a1:79:c8:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
        Validity
            Not Before: Mar 25 19:01:38 2026 GMT
            Not After : Mar 26 19:01:38 2026 GMT
        Subject: CN=82b8ea31a18dc1f253ebe58f37a6c34359e9ab21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bc:be:8f:8e:d4:b4:9f:81:54:c5:21:1e:c5:
                    68:a1:33:57:6c:f5:0f:dc:4a:f2:3a:d3:05:7a:84:
                    bf:fe:e2:9b:31:63:26:e5:4f:ad:0f:c7:20:de:23:
                    ee:47:ba:14:72:ad:3a:18:d1:b4:05:b2:ec:c0:7d:
                    e6:36:08:54:74:1e:c6:c4:1f:79:34:48:c8:ae:41:
                    e7:0f:4a:18:52:94:1c:53:35:32:cd:94:43:93:82:
                    96:6b:bf:91:ed:dc:2d:f5:a5:5f:71:cf:56:7d:0a:
                    2a:02:66:ab:7d:b5:ef:8d:f9:95:9c:38:37:81:da:
                    93:86:ec:ce:26:ef:8c:46:2e:da:52:94:75:d5:75:
                    ee:5c:5e:e3:2d:75:c7:41:fa:27:9b:c8:ab:6d:8c:
                    9f:c1:51:13:93:98:63:48:bf:33:0b:78:a9:b1:d6:
                    6d:9c:b3:f7:b9:d1:35:11:a5:c2:02:9d:61:03:0a:
                    bc:f7:ad:93:90:bf:86:1b:74:b4:4f:1a:03:d0:74:
                    d8:88:4b:81:a6:35:c4:c4:82:28:38:21:99:89:7c:
                    4d:6b:cf:a7:35:5a:3c:95:eb:e6:92:33:7f:24:6e:
                    cf:2c:93:e8:40:07:cc:09:65:80:8e:7b:6d:e3:88:
                    c1:20:63:df:e3:8c:3c:c0:e0:4c:00:ea:ed:a5:be:
                    a6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B8:EA:31:A1:8D:C1:F2:53:EB:E5:8F:37:A6:C3:43:59:E9:AB:21
            X509v3 Authority Key Identifier:
                keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:6f:2f:9d:7b:db:4d:4a:85:3c:b6:ae:d9:97:c4:4c:52:54:
         2d:cf:52:5d:4d:84:22:52:6b:f7:10:d6:a7:68:50:11:58:9c:
         a4:5c:73:e1:1b:cf:d8:9d:83:d0:a4:05:cb:d8:cf:0d:c5:ec:
         09:ee:5a:c9:08:a4:0f:11:d8:fa:b7:0e:e0:43:1c:b3:69:58:
         c9:0c:66:82:7a:e9:3e:0a:e4:76:98:e9:b1:eb:df:95:5c:ac:
         04:90:40:95:e7:ee:81:76:68:ec:0c:45:c9:d0:b0:72:f2:8f:
         82:87:77:bc:0d:ba:17:a8:92:2c:f0:0f:cb:80:32:60:70:d1:
         96:a4:fc:62:4e:9e:85:0e:5a:0b:c2:9d:09:8a:a5:a7:44:76:
         1a:a7:94:9b:fc:ce:73:55:02:da:a7:d4:12:30:b1:a9:b6:e2:
         ea:54:2a:39:f2:0c:c5:10:f6:3e:d8:f6:22:ce:01:47:83:3b:
         e4:88:0e:35:fe:34:e9:44:65:0b:f6:69:21:3a:14:dd:fd:3a:
         21:e1:cd:c1:be:fc:8c:43:e6:d3:65:ce:23:9e:f1:a8:dc:5d:
         d9:a4:2f:4b:e1:ac:e9:e8:b7:00:29:1c:2e:5a:52:d7:c0:2f:
         a2:73:e8:4c:8b:75:61:b7:69:7f:f4:10:11:c6:0c:db:f6:2f:
         0d:9f:a9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----