Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
File:                     yHQTLBL4aZX-KJPk3qcmONJgEHk.mft (raw, json)
Hash identifier:          L3AQEGKJstDa1nSxb6DqJ0LnEkYd+Xxam+/P5amv6rw=
Subject key identifier:   24:48:3A:51:76:69:B2:9C:09:8C:D1:7F:BB:BC:D0:4D:8F:95:48:DE
Authority key identifier: C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
Certificate issuer:       /CN=c874132c12f86995fe2893e4dea72638d2601079
Certificate serial:       01A0D4CB0765C4A9EED97535ADF1E3BF9F36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
Manifest number:          073F
Signing time:             Thu 24 Sep 2026 19:01:10 +0000
Manifest this update:     Thu 24 Sep 2026 19:01:10 +0000
Manifest next update:     Fri 25 Sep 2026 19:01:10 +0000
Files and hashes:         1: DHHudebUM3yKARxlaZ2YpDdj_10.roa (hash: 4IZZF7kG21QLytTXVu8J+ZgosQ4Y4zImjPdBHl+JNss=)
                          2: eCIxVJBlZJg4A1PAGkOvPg7aiUM.roa (hash: DjYNeiW4ymro6Kp8UT3pCBgwHWIhN9hxIR+IH3BcZMQ=)
                          3: i_xckZzjEkRw31aSrJAsV3dFCLE.roa (hash: autrGXMDWT9GWUylEMorom4KkZ2EMR11IzzFRFDlO9U=)
                          4: yHQTLBL4aZX-KJPk3qcmONJgEHk.crl (hash: eEJ7zpyWp19UsTe8P/MWja4VOP6jZ/Wc6rwNrLskPR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:cb:07:65:c4:a9:ee:d9:75:35:ad:f1:e3:bf:9f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c874132c12f86995fe2893e4dea72638d2601079
        Validity
            Not Before: Sep 24 19:01:10 2026 GMT
            Not After : Sep 25 19:01:10 2026 GMT
        Subject: CN=24483a517669b29c098cd17fbbbcd04d8f9548de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:58:de:fe:6b:7e:dc:e5:91:2c:ac:2c:f9:5e:
                    98:83:ce:bf:b4:5c:af:3d:4d:5b:3f:d3:2e:df:21:
                    be:2c:f6:f2:9c:73:c7:3a:e9:f7:ae:5d:3b:ce:4a:
                    1c:27:bf:ba:df:e8:39:90:06:67:4a:e5:46:82:f8:
                    78:f5:c3:ab:07:20:ca:5c:a1:ac:bc:0e:f6:c9:fb:
                    7d:e4:c4:e4:b2:11:9b:58:b3:2b:e2:53:3c:5b:a1:
                    50:8d:e4:f4:9a:12:a7:a2:74:f2:29:7e:c5:d3:34:
                    1f:a8:bd:2a:af:6f:72:ff:d2:18:49:f3:71:69:7e:
                    46:37:5d:6a:51:ce:6c:7d:06:c7:eb:ca:8d:9f:2d:
                    35:b2:84:41:2d:75:62:be:5f:56:b9:21:cf:35:4d:
                    05:bb:fa:97:65:c8:29:54:29:22:61:cd:2b:dd:c5:
                    a3:f6:a0:cd:de:aa:2e:e7:72:d0:1f:7a:97:bd:ce:
                    70:ec:82:e2:c7:f2:c8:f1:06:40:87:83:98:94:18:
                    94:1d:c3:5f:56:a3:a4:dd:aa:79:5f:57:f8:4a:eb:
                    ea:4e:81:07:7e:22:5e:39:19:f7:4d:e8:cf:90:b1:
                    94:9f:41:a2:49:fd:c3:bf:f5:6d:38:68:67:6a:2e:
                    bf:7d:4a:a3:de:13:50:11:98:5b:4b:bf:66:11:b1:
                    4d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:48:3A:51:76:69:B2:9C:09:8C:D1:7F:BB:BC:D0:4D:8F:95:48:DE
            X509v3 Authority Key Identifier:
                keyid:C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:2c:f8:45:a9:1a:68:f9:0f:3e:3a:b7:1a:b1:ee:c3:6c:70:
         c0:a6:27:19:d0:20:24:7a:db:51:3b:16:49:e4:2e:b7:e5:2e:
         bd:be:3f:82:fb:46:de:fc:e1:6b:0d:66:f5:95:8f:25:f6:a0:
         94:29:aa:37:0d:1f:6d:e6:2d:7f:be:ec:16:50:a5:31:a4:54:
         21:13:5a:e4:ec:d9:1a:3f:6b:94:c3:4c:ee:88:6c:99:50:6a:
         29:18:56:90:2e:e2:e8:5d:26:df:78:a8:94:dc:9e:e7:da:c6:
         8b:5d:ec:0e:86:7e:06:a6:23:a4:08:c9:04:33:26:1d:43:86:
         e3:f9:0b:f1:aa:8e:df:02:de:d7:b2:b6:50:6e:0b:46:e3:90:
         c6:5d:db:f7:c6:d1:e8:4d:d8:da:8d:14:74:f1:c5:8d:25:b4:
         23:01:05:6a:58:65:82:79:ad:c1:d5:9e:89:9b:b9:0f:7c:6b:
         ea:54:c3:d0:aa:f2:ab:0c:44:29:6d:a3:00:60:7d:f0:1a:27:
         d9:12:c2:cb:0e:7c:e0:db:39:07:e5:30:8d:f4:e8:b7:c8:2f:
         7e:d2:6b:f9:82:43:ec:35:34:10:24:94:3a:4a:70:81:c5:38:
         04:c7:10:34:f3:7c:68:6c:21:48:3d:f9:35:34:d2:cc:1a:f9:
         ab:35:09:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:54:42 2026 by rpki-client