Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
File:                     0YZHAF-osG5H7i77_e3Jegx3Vfg.mft (raw, json)
Hash identifier:          0VINKOyidtn9um0X6A1OGoIFKna8d45u1s3Lhq5dp3o=
Subject key identifier:   1B:6B:79:7F:00:EE:5C:10:22:08:81:25:5E:C7:28:5E:95:CD:E4:38
Authority key identifier: D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8
Certificate issuer:       /CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
Certificate serial:       01A0D4260B4613F827C99D168A78DEF8F764
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
Manifest number:          1A6E
Signing time:             Thu 24 Sep 2026 16:00:57 +0000
Manifest this update:     Thu 24 Sep 2026 16:00:57 +0000
Manifest next update:     Fri 25 Sep 2026 16:00:57 +0000
Files and hashes:         1: 0YZHAF-osG5H7i77_e3Jegx3Vfg.crl (hash: MsK4m19U+Ouy1dIYk9veflkNpzdf6xSyiDYIFdugAeU=)
                          2: GmHD_yxmhmb7r8gjp6el8HpBXOw.roa (hash: fVaQ2rKEBssbb0vmO7FX3uJ1zApwIkrOyFVIx+Y+u/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:26:0b:46:13:f8:27:c9:9d:16:8a:78:de:f8:f7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
        Validity
            Not Before: Sep 24 16:00:57 2026 GMT
            Not After : Sep 25 16:00:57 2026 GMT
        Subject: CN=1b6b797f00ee5c10220881255ec7285e95cde438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:92:09:6b:3e:35:07:cd:10:35:ca:2b:4d:da:
                    d4:49:d7:8d:b0:d7:50:de:f5:2a:52:65:32:53:06:
                    ad:74:e2:47:76:b0:c6:c1:64:47:08:75:b5:96:e3:
                    9c:4f:7a:27:c6:4b:b7:d3:95:bf:46:49:f2:24:ce:
                    cd:e8:36:d9:5a:41:65:db:f4:fb:95:54:47:3a:3b:
                    52:35:db:c4:7e:63:9e:27:ed:f6:08:ad:4d:01:06:
                    29:ae:a1:cd:f2:2a:a9:cb:61:c4:07:d9:4e:e0:69:
                    9b:03:42:ce:03:03:7f:92:f1:a2:76:2c:3a:c2:7d:
                    01:41:76:7a:da:ff:f3:ca:d5:6b:bb:3e:74:4e:45:
                    1c:36:ce:ab:70:91:9f:fa:46:c0:c8:ec:1c:a7:7f:
                    fd:b8:98:f7:16:2c:7c:5f:f0:bd:71:7b:6a:2f:a0:
                    01:45:dd:a4:b3:a1:37:55:b8:ad:78:19:a2:99:72:
                    85:8c:d6:9c:54:17:41:e2:a4:c1:e7:9b:72:c6:f5:
                    4d:5b:c7:96:5e:d4:01:bb:eb:97:f4:56:3d:51:c5:
                    b4:07:96:57:70:56:d7:8b:28:0e:23:61:b1:3a:0c:
                    5b:da:84:e3:fc:29:4c:8d:c6:fb:20:9a:b0:a0:2a:
                    9c:26:77:38:c7:12:cf:70:34:42:2b:54:a4:80:72:
                    10:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6B:79:7F:00:EE:5C:10:22:08:81:25:5E:C7:28:5E:95:CD:E4:38
            X509v3 Authority Key Identifier:
                keyid:D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:fc:3d:46:c2:04:ee:ec:75:b0:88:ca:b2:49:09:5d:84:03:
         be:c2:e7:1b:f4:aa:b8:40:32:fe:e3:8a:6f:5d:ee:58:6b:99:
         c4:43:91:f9:8c:5b:a6:1c:6e:ca:c1:9f:ae:d5:19:37:ae:7a:
         3b:79:5c:81:83:94:fd:a4:45:7b:9e:a1:15:28:5d:98:db:5c:
         0c:dd:74:e9:de:a5:b7:44:e7:e6:06:88:66:94:32:a6:de:f4:
         d7:c2:1e:c6:81:c8:30:5f:28:45:e6:59:47:e3:fb:21:d3:5a:
         ba:9a:83:12:3a:99:ad:f6:d1:ff:15:f2:55:d4:4c:46:4d:5b:
         91:d1:e7:29:0b:75:9f:9d:48:a6:2f:0a:45:09:12:37:73:1c:
         f3:8b:4d:a9:c9:43:4f:fe:22:a2:5d:56:c0:5f:f1:d4:ae:a2:
         8b:37:e5:f6:19:49:fd:c1:3e:cc:69:c2:07:b4:5b:78:47:39:
         89:c8:af:9a:3b:5f:96:c2:7e:12:3a:42:1c:85:25:cf:84:2f:
         cf:8f:3f:88:c4:f9:95:5c:7e:95:a4:55:ea:a3:28:cd:fb:a7:
         41:0c:03:14:7e:15:3e:d8:d7:2e:e1:b6:34:52:09:d7:a1:73:
         52:b6:28:16:be:c6:be:ca:4b:95:d9:71:23:27:b6:a0:58:72:
         3c:25:8e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:11:19 2026 by rpki-client