Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
File:                     Y_peK-wKPseV-PGc1H_sxoBniwg.mft (raw, json)
Hash identifier:          FOI5c7XHldSce+YNV9t1Al+pfoF/byqUj3h+tpZfx5E=
Subject key identifier:   0F:BB:05:75:F6:5E:4B:A6:83:7E:E5:B1:77:53:1D:60:29:D1:D4:87
Authority key identifier: 63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
Certificate issuer:       /CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Certificate serial:       01A0F2678BFC88BDE2392F94680293D2D80E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
Manifest number:          0F50
Signing time:             Wed 30 Sep 2026 13:01:07 +0000
Manifest this update:     Wed 30 Sep 2026 13:01:07 +0000
Manifest next update:     Thu 01 Oct 2026 13:01:07 +0000
Files and hashes:         1: HySy1-w259OtwsCg5swN-VwOsIc.roa (hash: tvVWnwmA44Tb3dPv6zXdwof7x/dRGrZDDRwKxiajQCQ=)
                          2: Sc_1GNWpnruRCO8C0dbP_tb3_Jk.roa (hash: D32roY9At7ZQDFO2xjIH7ea8DQkPVsoFzPeqmrWzK3I=)
                          3: Y_peK-wKPseV-PGc1H_sxoBniwg.crl (hash: BPaeWckdxIqgBmHCg2LhN+XuMG6kEPhS1cAvzkqhtJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f2:67:8b:fc:88:bd:e2:39:2f:94:68:02:93:d2:d8:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
        Validity
            Not Before: Sep 30 13:01:07 2026 GMT
            Not After : Oct  1 13:01:07 2026 GMT
        Subject: CN=0fbb0575f65e4ba6837ee5b177531d6029d1d487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:79:3f:0e:45:5a:e1:e9:60:ff:24:b0:21:d7:
                    1b:d9:e5:1f:dd:fb:55:58:99:e1:f6:d9:1e:ba:a7:
                    2c:8d:57:4d:eb:d1:b9:65:46:50:fe:7f:23:f4:96:
                    04:78:0c:b0:05:47:6e:2d:6a:5a:2e:b5:46:30:cb:
                    60:56:12:e6:4a:40:f4:e9:eb:97:8f:cc:52:f1:8a:
                    d7:5f:f6:b3:25:99:30:21:8f:65:85:28:51:c7:32:
                    98:41:eb:f4:b5:3c:d3:1c:27:28:29:dc:e4:2a:65:
                    3b:3e:c0:60:8c:e9:2c:59:58:96:f3:f4:77:e6:c5:
                    fd:ed:83:14:f9:5e:f7:39:a3:cd:81:a3:d2:c7:fe:
                    47:83:f8:02:77:78:20:6f:eb:41:37:72:7d:e1:51:
                    c2:a9:af:24:97:f6:56:9b:ad:16:1d:f1:14:12:ee:
                    20:2a:39:3d:27:3b:87:48:8e:c9:81:69:1c:95:14:
                    4d:4f:bd:8e:56:b4:c9:24:98:cb:65:cb:f4:a5:cc:
                    26:7d:e9:80:d1:d6:03:9e:16:34:83:ee:68:5d:94:
                    47:01:21:30:04:51:13:ed:af:5b:06:e1:96:3d:44:
                    ad:98:21:58:05:24:be:f1:f8:23:85:b5:b0:af:bd:
                    3e:85:69:5c:e4:d4:4f:23:2a:c9:07:78:3e:81:54:
                    34:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BB:05:75:F6:5E:4B:A6:83:7E:E5:B1:77:53:1D:60:29:D1:D4:87
            X509v3 Authority Key Identifier:
                keyid:63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:24:b5:37:72:51:45:71:24:85:fe:cc:8f:29:cb:c2:71:d1:
         2f:c9:cb:3a:f7:35:e8:16:f7:12:19:e2:de:7d:06:93:46:27:
         1c:e1:0e:b6:bc:35:89:8f:05:e8:8c:0e:de:3c:0c:5e:16:f4:
         4e:72:e3:8e:b7:93:b8:8d:fe:ab:8d:a6:63:14:d1:b4:50:61:
         ac:ba:82:c8:b9:32:2d:6a:55:e3:5d:61:66:48:97:d9:6d:08:
         5c:8d:7f:4a:8a:c2:f0:39:21:e6:ff:d6:31:99:b2:73:ef:b5:
         e9:41:9d:90:0b:cc:7b:e7:cb:a1:af:0b:1b:76:84:31:92:84:
         08:74:2b:e2:ff:f7:54:88:e6:e5:b2:66:40:09:96:b0:79:3c:
         fb:dc:fd:84:b5:59:15:47:02:d1:db:6e:c8:c7:57:d5:49:51:
         78:13:7f:96:7c:e4:c4:8c:2f:07:98:9a:bb:dd:fe:04:94:66:
         77:b7:c7:ff:8f:53:65:9d:c2:2f:78:16:d5:7f:b8:9b:47:4a:
         e6:a9:16:71:d9:97:f7:ca:a6:36:30:55:4f:3b:01:ca:5f:fd:
         be:ca:d6:2c:55:47:11:fa:ef:8b:97:87:fc:c3:18:af:af:66:
         0d:5b:cf:41:77:70:b9:44:fa:7e:7b:1e:b8:ee:f6:2a:fa:68:
         41:3f:83:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:00:15 2026 by rpki-client