Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
File:                     YzkukpMXrmveCKWjuYorcB3biTo.mft (raw, json)
Hash identifier:          TKJ5BtXXTvwSpJccdyYIHwc+F1FWxHbsm+kfU528mDI=
Subject key identifier:   C4:F9:65:3E:02:47:39:89:7B:00:F9:03:66:B3:2D:4C:40:93:63:7A
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Certificate issuer:       /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial:       019E1E6C13E0780F171A5229AF4E5A9FDDBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
Manifest number:          0783
Signing time:             Tue 12 May 2026 23:00:59 +0000
Manifest this update:     Tue 12 May 2026 23:00:59 +0000
Manifest next update:     Wed 13 May 2026 23:00:59 +0000
Files and hashes:         1: 6sPueaU-Xz-iNYE6n6z1UIYXbPs.roa (hash: pjL7PLIGwLTNOBt+seTt/W2jPyX7Bk12lzulixeL94A=)
                          2: Ag9N_F37RcuQM8A4wSEwNzlbKjQ.roa (hash: 2K+D9bxizH0sqWU2qEMlwlkxQrgykxO7hyEi+m+gV4g=)
                          3: MjYgj5PkJtwB52FzuT0YsILbMY0.roa (hash: Indk9YkEk2hK3dLWnIDlZYz40E8hqE2V87I+wxoCcUk=)
                          4: YzkukpMXrmveCKWjuYorcB3biTo.crl (hash: /IhCSQulyZtHc9LEtl/L53ZQwNQuOKVWHd/XIo4yiLs=)
                          5: aAyjGidCRd4HZ3z28s7kHfI3sFQ.roa (hash: yyghszcohtM5Wk9rUOZWwch/Wn48BU9LOtNcV0EZHsc=)
                          6: haQRwP2dzsg-sHVyLxYX0ft7Uk8.roa (hash: E+J4U5Y2xIVaeCaY8cTdAkE1+HOCrIQ4nNQKMPeb/WA=)
                          7: uSGmmmaLtoe3eUHigIrN47aVHko.roa (hash: tjzYIHWpoG3yiW/4rVWqjKVzthPOwUg7TejbjmApHRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:13:e0:78:0f:17:1a:52:29:af:4e:5a:9f:dd:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
        Validity
            Not Before: May 12 23:00:59 2026 GMT
            Not After : May 13 23:00:59 2026 GMT
        Subject: CN=c4f9653e024739897b00f90366b32d4c4093637a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:92:31:11:89:16:82:62:bb:dd:73:bf:fe:5f:
                    cf:96:29:69:29:5b:5d:3b:d0:53:bb:c7:7e:b6:e2:
                    09:f3:64:16:d3:55:56:2a:04:53:be:c1:1e:c3:d0:
                    f9:82:17:a8:38:ca:04:eb:e9:e0:ad:81:dc:fe:21:
                    e4:53:d1:51:cf:fc:38:e6:6d:da:9a:f2:bb:ac:c3:
                    82:7c:1b:ec:1b:d2:a0:c7:6e:60:4d:93:64:e0:87:
                    c2:6e:89:d2:65:b0:0e:17:b9:7d:b1:d8:9f:18:e2:
                    3b:c7:6a:67:27:a9:55:27:2b:d3:47:90:f3:9a:e9:
                    34:53:cf:de:ed:d3:b7:51:c6:b1:34:4b:1c:d8:a3:
                    7a:7b:dd:79:72:33:af:35:39:ef:50:37:f3:07:76:
                    03:45:34:a0:ad:dc:d4:cf:49:34:bc:df:98:ce:3e:
                    76:47:89:1b:c7:3f:26:21:53:23:17:d9:39:d5:dd:
                    44:91:c9:23:ca:a2:ea:6a:67:1e:41:39:d7:f9:23:
                    d4:75:22:8b:4d:b9:a7:97:3d:2e:b9:d1:24:54:85:
                    9c:17:90:f9:4d:96:0e:6b:19:b2:41:ef:0b:25:14:
                    04:ee:0b:2b:4c:17:55:93:a0:af:50:a1:5c:cd:c7:
                    64:61:b4:80:48:21:96:e6:c0:55:4a:25:dc:1f:f8:
                    3a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F9:65:3E:02:47:39:89:7B:00:F9:03:66:B3:2D:4C:40:93:63:7A
            X509v3 Authority Key Identifier:
                keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:8d:1f:0c:e5:f2:af:a5:56:4e:21:6b:d9:ab:fb:4e:50:2c:
         89:29:28:58:84:98:6c:b4:7a:5a:0f:43:e5:ed:23:a5:6e:25:
         9d:b8:05:a0:ee:75:38:2d:b6:dd:01:c9:21:07:3e:ec:e1:9a:
         e0:3b:81:6c:32:a1:8b:b9:d5:10:da:c1:c6:79:78:c4:a1:b9:
         c6:38:b0:3c:43:9c:59:bc:5a:95:73:c8:29:5e:88:d2:84:f9:
         7f:7f:95:89:10:68:cc:e1:03:29:74:61:15:95:08:fc:17:ca:
         7c:a9:2e:bd:c3:4c:e2:89:62:a1:27:59:6b:62:f8:91:19:14:
         e7:4e:f6:7e:62:b7:c9:33:ea:f3:e0:7b:eb:df:bb:f7:74:34:
         63:58:34:0c:6f:9c:82:66:17:e2:1b:66:04:69:ce:d4:40:0b:
         cf:2b:c0:7e:62:fb:f8:94:96:7c:0c:7a:1a:0b:41:16:3b:5c:
         e6:68:ba:61:fc:c2:54:b2:0e:8f:a9:f1:d1:13:c1:82:9e:43:
         db:2c:5b:15:ce:14:c6:ef:f9:c5:80:aa:f8:43:bd:ba:18:13:
         af:57:4f:80:72:a5:85:66:79:cc:09:e6:cf:db:0e:83:07:d0:
         6a:09:a6:c4:12:02:f3:9d:e2:e7:06:1c:f2:b5:37:01:b1:d7:
         13:3a:8c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:11:34 2026 by rpki-client