Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
File:                     yeG79grg631AB2JxhcXxRyP_864.mft (raw, json)
Hash identifier:          03qvM7MDCCWNtH124LR68JN/WY5NEuS8MBVt7v5+cBA=
Subject key identifier:   A2:C8:A4:D4:34:8C:42:A2:2F:48:BC:EB:E8:05:43:B8:98:38:5A:B4
Authority key identifier: C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE
Certificate issuer:       /CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae
Certificate serial:       019E1FEC6B9B7A47EF6AE4180FA684E221D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
Manifest number:          044B
Signing time:             Wed 13 May 2026 06:00:48 +0000
Manifest this update:     Wed 13 May 2026 06:00:48 +0000
Manifest next update:     Thu 14 May 2026 06:00:48 +0000
Files and hashes:         1: T-09y-oUF-oVxc0rII_IKxv-tqo.roa (hash: mtxY/euYWXc5W24bVNJKERPEbeVn8RYrIiTpc8jewmU=)
                          2: yeG79grg631AB2JxhcXxRyP_864.crl (hash: 8RJYbdIgjJpw6V0GjgSoq06piE95VVL/btureO0f7dU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:6b:9b:7a:47:ef:6a:e4:18:0f:a6:84:e2:21:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae
        Validity
            Not Before: May 13 06:00:48 2026 GMT
            Not After : May 14 06:00:48 2026 GMT
        Subject: CN=a2c8a4d4348c42a22f48bcebe80543b898385ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d7:10:b6:45:89:9e:d4:78:31:cc:04:fd:36:
                    78:a9:e5:6a:0f:a8:1d:25:ce:7c:08:78:99:c8:67:
                    ee:b2:91:6a:b7:3a:08:df:f1:cb:88:4d:88:48:c2:
                    2f:d6:09:70:49:4e:78:68:03:5f:66:17:7a:e5:c5:
                    3c:16:35:b6:dc:22:16:ba:f5:13:03:b4:72:f0:3d:
                    25:38:90:af:93:95:83:90:46:17:6d:2d:75:fd:53:
                    cc:ab:58:c4:d7:f8:45:2e:0c:a1:1d:bf:af:e6:8f:
                    cf:41:67:71:e6:dc:13:43:9e:38:62:45:c9:c4:de:
                    3a:71:cb:76:21:1f:35:36:6f:90:01:69:c8:06:ad:
                    cb:f1:0c:25:40:c3:b1:e1:36:a4:db:3b:05:c7:b1:
                    1e:3d:9b:2d:38:16:4a:30:dd:f1:66:6d:b1:60:f9:
                    6a:dd:8b:05:e1:e1:c6:5b:65:6a:e1:05:6c:65:f3:
                    1d:3d:26:48:8e:64:75:09:3e:a3:a2:b6:e2:74:b0:
                    4b:39:65:9f:0e:b4:a4:89:02:d4:ef:40:43:0f:ed:
                    b6:91:54:7d:b7:97:63:a8:0a:78:73:d0:02:c9:ef:
                    9f:26:4b:bc:b5:f5:94:a2:c5:f1:37:8e:59:39:9c:
                    87:c3:bb:a7:3e:20:e5:8e:0a:c4:4e:77:39:c9:56:
                    f9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C8:A4:D4:34:8C:42:A2:2F:48:BC:EB:E8:05:43:B8:98:38:5A:B4
            X509v3 Authority Key Identifier:
                keyid:C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f7:78:23:1d:77:42:de:9f:ec:24:45:03:94:9a:05:2c:8d:
         8d:c9:69:00:31:44:8e:11:27:c4:31:eb:8f:0f:23:42:d2:1c:
         95:e0:98:e0:f6:51:a7:bc:2c:1c:25:1e:e3:ca:50:fb:5d:4a:
         77:05:e4:2c:36:44:01:7c:9d:5f:b4:2d:a8:24:0c:85:5c:d5:
         cc:1c:4f:a0:db:69:e1:8f:20:c9:9a:e9:33:a3:58:37:34:f0:
         30:15:a7:db:90:af:e9:6b:02:ea:27:ef:5d:22:4f:27:e3:07:
         66:2c:e4:9f:55:9b:a0:dd:b2:92:db:11:89:a1:84:f2:98:29:
         a5:06:92:96:df:f0:5f:6b:8f:7c:4c:b1:90:dd:e1:1f:0a:2e:
         a7:c9:55:37:1d:6c:fb:3e:8d:c5:96:8c:7b:b2:a9:0a:1e:c9:
         d8:7a:5f:86:b0:43:22:bd:96:47:48:45:c3:9c:f3:f7:51:1b:
         f5:15:1b:33:5b:f5:ab:06:2d:c6:64:17:ff:35:1c:0b:1d:75:
         c5:19:76:30:9b:e6:76:72:8a:6d:49:73:5a:92:55:dc:2f:f1:
         1a:cb:0d:14:e1:27:5f:d0:f0:21:52:82:c5:5b:d0:23:fe:a7:
         57:42:3d:ff:2d:f2:33:c7:c1:42:fb:21:20:7c:93:f7:30:c1:
         9f:05:c3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:53:54 2026 by rpki-client