Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
File:                     yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json)
Hash identifier:          AdLBr4urbBvlfEiWItwQ8MQfNt9UQZ1ydDCyXZwF8G8=
Subject key identifier:   0A:6B:81:21:FF:BE:B5:9F:08:E2:5F:C5:7F:6C:59:6F:9A:83:D0:27
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Certificate issuer:       /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial:       019E216DA0A0AE06D7260BB3A35581C5CBA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
Manifest number:          1164
Signing time:             Wed 13 May 2026 13:01:33 +0000
Manifest this update:     Wed 13 May 2026 13:01:33 +0000
Manifest next update:     Thu 14 May 2026 13:01:33 +0000
Files and hashes:         1: D3wkpKKSoJovDsiCfvbh1DYTkx8.roa (hash: c0FcHGYTB+tG9IR/+QbyBfjUn2VqFpbtfy3DDserGhM=)
                          2: KSjHgXPRASqnBW1tjOtvhmkWPHE.roa (hash: h5XvzMTTFxSuHg9vWwCmjacM7SXacJTLfB8wl2n3Cec=)
                          3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: EUWzNDpKwdbVn1tGOVqLZ1H1H4pHkvFFvLDEpgo29wY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 13:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:6d:a0:a0:ae:06:d7:26:0b:b3:a3:55:81:c5:cb:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
        Validity
            Not Before: May 13 13:01:33 2026 GMT
            Not After : May 14 13:01:33 2026 GMT
        Subject: CN=0a6b8121ffbeb59f08e25fc57f6c596f9a83d027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:18:12:75:4a:08:0a:6f:cf:ec:1d:40:50:89:
                    fd:d1:89:16:2a:3d:f9:57:b7:ae:c5:38:cd:8c:95:
                    a0:d4:f9:ad:0c:75:68:42:dd:cb:0a:c8:e0:7d:65:
                    23:e1:66:41:3d:be:65:85:1c:c6:ec:81:52:20:60:
                    b0:6c:98:aa:b9:85:1c:31:c4:0e:e5:87:35:af:69:
                    e7:a6:9b:75:2a:6d:8e:00:0f:fa:eb:cf:b7:0e:66:
                    1c:69:5c:a4:f5:a4:09:fb:e0:b9:ab:75:19:37:5b:
                    d6:97:91:7e:fe:5b:8b:95:e7:cc:df:42:7c:05:a6:
                    b8:48:82:6c:dc:8a:2b:37:fc:4a:67:10:84:0f:70:
                    e2:e4:80:14:a5:3f:35:dc:5b:4f:45:70:0e:86:06:
                    6c:ed:f4:5c:bd:8e:27:ca:5c:28:ff:40:fc:a6:02:
                    eb:ee:b0:c8:61:45:b1:6b:73:d0:d7:c5:c7:1b:6e:
                    4d:75:68:71:9e:b6:74:ef:f3:06:18:ef:96:be:9f:
                    f2:c5:31:3f:ae:b1:b6:ae:a5:8f:85:c4:85:76:8b:
                    76:a3:3b:68:8d:83:75:ae:fb:cb:1f:ea:af:d1:01:
                    75:fb:fe:c2:24:c9:dc:0e:c4:c7:fe:3a:b6:8f:f0:
                    48:21:e1:ba:3a:46:39:02:ee:da:b8:c7:0e:38:1a:
                    35:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6B:81:21:FF:BE:B5:9F:08:E2:5F:C5:7F:6C:59:6F:9A:83:D0:27
            X509v3 Authority Key Identifier:
                keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:94:b7:83:cb:3a:ac:5d:c6:9c:2e:0f:00:7e:3b:82:3a:31:
         db:c1:4c:7c:ad:d0:bd:d4:ae:57:6a:76:48:7c:78:99:32:be:
         57:76:5e:46:41:6f:a2:fe:12:54:4c:df:0e:eb:84:cd:a5:c0:
         31:f2:38:b3:29:5f:3d:e0:5f:d4:3f:19:51:4e:21:33:cd:69:
         69:6b:b9:c4:05:02:5e:a8:ec:c1:d1:a4:81:41:aa:8c:58:5b:
         25:47:50:bc:59:25:77:14:d5:eb:a1:97:39:06:85:d2:fa:9a:
         dc:8c:ba:36:f7:e2:cb:e0:69:ff:63:7b:ca:4e:30:00:29:29:
         b6:d3:a6:11:02:ea:7c:f2:0e:cd:aa:3c:a3:5e:cf:51:8a:8a:
         6e:e6:dd:08:ff:32:86:9b:24:58:8e:8c:77:b8:7e:ce:a2:13:
         a2:2b:db:ba:f5:ba:76:ec:cd:f5:77:99:28:9e:d9:92:e8:75:
         3d:b4:af:03:7f:ae:1d:07:ff:e4:5b:0a:18:9f:1b:07:5d:fc:
         c2:41:78:07:da:93:d7:bf:05:93:25:e9:9b:11:be:09:48:04:
         b1:c3:6c:83:46:3b:c4:08:0b:4f:d6:2f:02:a7:4c:64:3b:f1:
         45:f8:d9:f6:fd:19:37:c9:38:0e:34:57:df:52:62:98:0f:9a:
         da:4c:30:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:23:01 2026 by rpki-client