Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
File:                     YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json)
Hash identifier:          OwYj0mhXist8OBjTv44wFHgjSB20g2xOEpjGqKU0LWk=
Subject key identifier:   A7:19:9C:42:69:6A:F8:BE:06:36:A6:7C:DC:6D:E5:82:2A:1C:0D:6E
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Certificate issuer:       /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial:       019E1DC750E04757FD153187FEEB95C208CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 20:01:02 +0000
Manifest this update:     Tue 12 May 2026 20:01:02 +0000
Manifest next update:     Wed 13 May 2026 20:01:02 +0000
Files and hashes:         1: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: BKVqNPzynP5VBoqT9urHIb4cl31XkWpzJPv/HPh0ucM=)
                          2: zk24Xibi_69XM4miradQH_-zfVo.roa (hash: 8vWhGhRcVD9hGye0zCP9w/L6uhcw5ZBizDAK5O4GtQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:50:e0:47:57:fd:15:31:87:fe:eb:95:c2:08:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
        Validity
            Not Before: May 12 20:01:02 2026 GMT
            Not After : May 13 20:01:02 2026 GMT
        Subject: CN=a7199c42696af8be0636a67cdc6de5822a1c0d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1f:6b:b5:df:3f:5e:95:35:02:5f:30:a0:a6:
                    8b:d9:05:80:7e:e5:62:55:82:3d:5d:9e:3b:a6:18:
                    65:33:5f:77:ea:79:91:43:b7:6f:4f:00:51:f4:48:
                    50:ab:a6:cb:a8:b8:23:69:41:78:5d:fe:1d:75:f1:
                    0f:f8:47:47:fd:ed:bb:61:e8:6a:ac:a8:90:ed:31:
                    2d:b6:b2:4f:87:2c:d8:f0:1b:a9:cd:67:a0:10:28:
                    20:75:ae:10:16:46:4d:c1:e3:b6:4e:3d:26:4e:ba:
                    e4:47:f7:4c:b9:cf:38:4e:68:f8:89:6e:c2:0e:f3:
                    60:70:bd:6a:9f:c8:3f:25:08:54:79:a3:fc:b7:3d:
                    9c:02:82:59:a1:5f:a6:4a:d9:26:58:7d:19:6e:ad:
                    16:28:53:bd:15:55:48:dc:7f:ca:d1:7c:3a:0b:60:
                    25:8e:f1:ab:7a:be:eb:ac:c4:40:70:4e:c4:b1:9e:
                    15:fb:f8:85:d7:cc:95:4d:7e:6e:a4:95:6a:26:ad:
                    04:97:91:8c:5e:99:81:46:e8:de:0a:55:e2:e0:be:
                    75:5b:b7:c8:11:d9:ab:c1:80:f2:87:65:f8:9f:34:
                    38:5f:3a:75:10:9d:85:e1:53:f1:da:1c:c0:2d:d2:
                    ba:62:70:f5:d9:12:b2:88:84:69:ed:8d:a4:be:de:
                    b8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:19:9C:42:69:6A:F8:BE:06:36:A6:7C:DC:6D:E5:82:2A:1C:0D:6E
            X509v3 Authority Key Identifier:
                keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e6:f0:f5:c6:72:35:4b:aa:fb:e7:b8:6a:16:61:3e:0f:10:
         3c:2d:e1:4c:0f:da:e5:c2:c2:e2:c5:56:b1:b9:85:ca:e2:c7:
         c0:97:20:40:52:92:c1:dc:2d:01:da:98:2e:ed:43:72:1e:85:
         5e:84:0b:55:51:8f:a4:3e:f5:90:96:59:4a:a1:59:27:c4:c9:
         5c:76:ae:e7:58:ef:61:cd:6b:93:18:8f:1c:ad:f4:f8:59:28:
         a8:41:60:dd:db:8f:6c:d3:a0:89:3c:db:fc:f3:31:f0:b9:44:
         42:86:c8:56:bf:5d:cd:39:60:e0:00:88:f4:ac:96:b8:c3:0a:
         ee:93:f6:4d:c3:10:8e:3d:50:0d:51:17:2f:a7:d6:60:df:5d:
         81:28:cb:b4:33:6a:37:a7:96:4d:78:10:57:ac:1f:6c:91:95:
         07:66:f8:5c:dd:db:61:51:34:e7:4a:90:01:3a:ea:03:d2:16:
         ca:4a:8f:81:3b:71:05:2e:34:5c:75:36:7a:0b:d9:dc:96:6d:
         04:73:8c:75:21:9f:04:d4:7e:ba:d0:f2:d8:30:42:2a:88:a7:
         93:85:61:da:f1:9b:b7:24:67:fe:da:81:8a:9f:25:43:37:5c:
         fc:69:65:9c:4e:ee:0f:86:85:65:4f:1b:e8:42:bd:70:10:51:
         c1:5b:aa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:24:44 2026 by rpki-client