Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
File:                     yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft (raw, json)
Hash identifier:          5S90MhJGogsX2wJZZCj4ufRqCv36m/m1D7Xq5q8C1t8=
Subject key identifier:   4E:8C:B4:44:D8:E6:2D:EC:D2:32:B3:94:AF:EC:81:05:9E:85:95:11
Authority key identifier: C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
Certificate issuer:       /CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Certificate serial:       019E1FB5CE65CB79B4766D101AB0210BCEF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
Manifest number:          0D2A
Signing time:             Wed 13 May 2026 05:01:08 +0000
Manifest this update:     Wed 13 May 2026 05:01:08 +0000
Manifest next update:     Thu 14 May 2026 05:01:08 +0000
Files and hashes:         1: kmHpE0nIsqnNjXBHZzn8ghlLUAY.roa (hash: vHtrQdMnfFyM3Hed/jGaAR/NyxOc2xl8ZPzUXZL4Gvc=)
                          2: yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl (hash: bgwf75Qp6EqBb9ybCISecoTujHCweZSVwKNC+RE4B8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:ce:65:cb:79:b4:76:6d:10:1a:b0:21:0b:ce:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
        Validity
            Not Before: May 13 05:01:08 2026 GMT
            Not After : May 14 05:01:08 2026 GMT
        Subject: CN=4e8cb444d8e62decd232b394afec81059e859511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f3:be:97:3b:33:7b:f0:b0:23:f8:a1:81:cb:
                    1a:c0:9d:e1:20:e9:b3:d1:07:ac:e3:e9:9e:0b:ea:
                    c5:31:e9:35:9b:52:1e:a5:d8:f7:b1:41:46:b6:61:
                    fa:09:32:c7:b4:ed:1b:ef:89:59:d6:f4:ad:42:c6:
                    83:84:c4:b3:4a:bd:20:be:b1:ca:87:3f:a3:ad:c0:
                    07:05:0d:5a:a9:34:27:39:df:4f:b5:36:c2:68:bf:
                    fe:bf:ba:59:f6:de:f7:68:ed:44:4b:27:00:2f:4b:
                    40:68:0b:32:dd:01:a9:7f:1a:c4:ef:93:90:03:34:
                    48:94:b1:60:fb:d5:23:16:e0:f3:20:8c:0c:f7:67:
                    b1:aa:a5:8d:5f:ff:cf:de:05:d5:d5:4f:12:49:c2:
                    d3:73:30:bf:31:13:b8:f5:62:21:1c:aa:35:df:95:
                    c2:11:5b:62:b6:78:89:4f:80:a8:93:35:56:6a:17:
                    d9:66:a3:a2:33:77:8e:e8:99:65:f5:b7:c8:a0:1b:
                    8f:fb:72:f7:a5:a7:83:9b:6d:c0:ce:fb:2d:9f:93:
                    08:18:1f:0d:20:e2:25:6b:14:25:1f:f0:7e:ba:93:
                    23:3a:08:cd:91:23:d6:8e:88:ea:2f:5a:ce:ca:84:
                    a1:c0:dd:b0:b8:a7:a6:c6:78:35:60:4c:f9:d6:e2:
                    e3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8C:B4:44:D8:E6:2D:EC:D2:32:B3:94:AF:EC:81:05:9E:85:95:11
            X509v3 Authority Key Identifier:
                keyid:C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:67:37:9d:53:d5:06:36:2e:a4:ec:04:d1:0d:bb:5a:c0:22:
         47:70:6b:03:35:7a:30:3f:a5:9c:3a:2c:c2:7f:09:55:88:51:
         a2:0d:8c:1c:62:29:78:df:11:14:d2:c2:f0:b0:76:f1:7c:7a:
         31:91:e9:3f:f4:0e:91:39:0a:6a:fa:12:b4:33:77:08:e0:66:
         d8:3e:96:ca:89:1d:b5:e9:8c:21:f9:18:4d:35:eb:b9:a3:eb:
         51:87:32:ae:e7:b8:ff:b2:43:ba:15:ad:18:7d:64:32:ad:be:
         cc:7c:12:1b:67:62:e8:2a:98:7b:a7:ce:43:d8:a8:2a:41:f8:
         f2:a1:b9:7e:76:97:af:db:3e:28:41:12:48:eb:a7:1e:b2:52:
         14:a9:29:65:11:bd:c9:5f:af:0a:e2:65:66:bd:0c:c4:6d:db:
         53:e2:b3:05:03:a6:cb:44:f9:43:28:91:1f:e0:d5:83:d5:b5:
         97:dc:aa:b4:8b:d6:25:56:fd:61:39:7c:87:52:ec:fa:7c:dd:
         c3:e5:22:4e:79:c3:27:4e:66:3a:ce:c1:a7:f3:b0:2a:87:7e:
         9e:68:f3:5f:36:13:94:13:ca:a7:fd:04:e9:0d:83:95:1b:a0:
         f2:74:b9:aa:2e:69:83:f4:8b:5b:7a:88:b4:e6:ab:f0:17:cd:
         5f:78:0a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:59:07 2026 by rpki-client