Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
File:                     YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft (raw, json)
Hash identifier:          5hexn9ZQY6XMReHg1dewQr4/inYF1QLLCdGh2z08HUM=
Subject key identifier:   EE:60:F8:AC:98:7D:BF:A3:9F:03:47:81:60:EC:E4:F2:38:81:03:16
Authority key identifier: 60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
Certificate issuer:       /CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Certificate serial:       01A0D6F0C971C3ED3A01CF4D307AEAEF962D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
Manifest number:          1A6E
Signing time:             Fri 25 Sep 2026 05:01:39 +0000
Manifest this update:     Fri 25 Sep 2026 05:01:39 +0000
Manifest next update:     Sat 26 Sep 2026 05:01:39 +0000
Files and hashes:         1: YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl (hash: 7JIM4BUaR2B0O8TnDGQa8K9Afz1rp6SJOIQmcxVsMmY=)
                          2: gGpmcsWE1eZyNMee1NRlA1nhhvY.roa (hash: /R+1mDGIJPwiUjgMqzEayU7QgZR187J1ACp6m3yLtqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:f0:c9:71:c3:ed:3a:01:cf:4d:30:7a:ea:ef:96:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60077f22c6428bc889b365b006cb5248d4bf61cf
        Validity
            Not Before: Sep 25 05:01:39 2026 GMT
            Not After : Sep 26 05:01:39 2026 GMT
        Subject: CN=ee60f8ac987dbfa39f03478160ece4f238810316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:07:6e:e3:b2:39:c5:a0:62:c7:03:6e:22:6c:
                    23:2b:87:2d:e1:b6:22:7b:62:d8:25:bc:8e:ae:8b:
                    a6:ce:8a:f6:02:f2:4a:f2:d6:86:da:5e:62:3a:ac:
                    dd:9f:60:48:6a:c2:fe:4c:1a:23:c7:bc:2e:29:81:
                    eb:66:dd:97:40:40:c6:0a:bd:12:1b:92:75:9e:9f:
                    32:50:fb:6e:39:ff:ef:71:3d:74:45:03:d8:74:2f:
                    3d:11:5e:2c:e4:39:82:87:3a:22:b8:06:94:8a:1e:
                    0f:68:99:ef:d2:7d:fd:e8:0c:1a:54:2c:71:cc:df:
                    43:99:ed:c5:3b:a5:1d:fb:e4:0f:84:70:ee:64:08:
                    00:14:3d:a4:56:2b:57:c9:8d:62:12:ed:6d:96:53:
                    ca:f5:11:bb:60:7d:ec:7b:25:c7:b8:64:b0:cd:dd:
                    05:b2:b7:45:d1:3b:97:af:4f:3d:b5:95:ea:10:a5:
                    9c:27:29:5b:cf:01:11:b0:71:45:60:20:ee:3e:73:
                    ea:94:b0:7e:7a:46:14:18:d4:2a:c3:88:4e:18:23:
                    eb:80:4a:16:87:f2:3a:9a:20:fe:63:a4:e4:c9:7b:
                    d0:a5:2a:93:bb:8a:7e:7a:45:46:94:76:ba:6c:cd:
                    87:d7:05:c5:a3:48:c6:0d:62:83:43:5e:f5:38:44:
                    27:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:60:F8:AC:98:7D:BF:A3:9F:03:47:81:60:EC:E4:F2:38:81:03:16
            X509v3 Authority Key Identifier:
                keyid:60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:50:b3:bd:34:d5:21:4c:37:c1:92:e7:59:50:ec:58:d1:51:
         e8:5f:c1:f3:d9:60:48:62:42:ce:e8:12:d5:fe:1a:fb:89:e5:
         fd:f2:93:a6:91:f4:85:cb:49:7e:97:61:00:69:66:ad:2e:22:
         0f:08:b9:0a:50:28:d3:e5:8c:c1:35:69:e2:18:26:61:6a:0a:
         03:74:71:88:2a:6f:a9:b4:7b:07:44:69:3b:52:a4:68:21:4e:
         b4:bc:27:d6:04:89:7c:9e:c1:67:78:79:e6:8b:58:af:a7:c7:
         76:8d:6b:2f:94:b3:32:2d:a3:8e:2d:29:e3:6b:fa:c3:e7:4b:
         b6:49:42:2c:74:88:a3:ca:ed:b9:c2:41:4f:5e:29:ca:af:2c:
         60:bb:e6:54:7d:c9:ac:b9:1f:88:41:00:d6:14:cf:68:20:20:
         9b:2c:7b:17:35:60:34:d6:c2:8c:74:a0:51:56:36:ad:01:5d:
         fd:2b:10:08:f9:e7:a2:7d:ec:28:00:fa:01:f0:4c:27:08:1a:
         48:5f:9b:df:c7:cd:84:78:d5:75:3c:21:7c:96:4f:13:55:f2:
         0c:e5:07:e4:83:36:d4:21:3c:ff:6c:02:1c:a6:60:c8:14:16:
         06:e6:97:19:8e:83:ef:5f:a6:65:53:8e:77:cb:5d:f8:58:dc:
         f9:d0:20:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:44:54 2026 by rpki-client