Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
File:                     ym3NrZkpBFbG18GOscBY2UEIiAE.mft (raw, json)
Hash identifier:          exA6SwsVOLI7vH/gw7FA4AtzBob4h7PTyaN8ghky7SY=
Subject key identifier:   F7:F7:69:4D:4B:0E:56:7E:16:C7:A4:E6:70:D6:7B:5C:8E:C5:D3:AF
Authority key identifier: CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
Certificate issuer:       /CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Certificate serial:       019E209211BAB3553396038857DBF1918445
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
Manifest number:          18AB
Signing time:             Wed 13 May 2026 09:01:44 +0000
Manifest this update:     Wed 13 May 2026 09:01:44 +0000
Manifest next update:     Thu 14 May 2026 09:01:44 +0000
Files and hashes:         1: FoH9ps9NIlN7HCCsr_L_q5RnpT8.roa (hash: V8yDvWYjZgT2Vk6m8UQDxVTsGXUYqta3GtOUd408vp8=)
                          2: ym3NrZkpBFbG18GOscBY2UEIiAE.crl (hash: DlMRMWP0kRAV3qJdn5MrsqF88Kewm0kchIVz9Zp2auA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:92:11:ba:b3:55:33:96:03:88:57:db:f1:91:84:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca6dcdad99290456c6d7c18eb1c058d941088801
        Validity
            Not Before: May 13 09:01:44 2026 GMT
            Not After : May 14 09:01:44 2026 GMT
        Subject: CN=f7f7694d4b0e567e16c7a4e670d67b5c8ec5d3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e6:63:3f:7c:db:c1:09:eb:d2:54:b4:7c:be:
                    ae:f8:6c:2a:63:72:16:54:8f:17:05:6f:c5:ee:37:
                    1f:8a:4c:09:13:12:9f:c1:57:9b:72:ea:f5:f2:8a:
                    a6:24:97:d6:90:cb:27:da:97:7b:94:e2:a5:8f:57:
                    72:28:1d:d4:d8:22:87:4d:f1:86:82:66:bc:b4:73:
                    d5:c4:c9:f4:7b:dc:f8:11:60:27:77:38:da:33:54:
                    7b:73:b8:40:e0:bd:b8:27:7d:c5:dc:77:f6:cc:c2:
                    02:17:da:4d:fe:20:32:24:84:0c:17:50:a1:09:4e:
                    ab:ca:89:6d:59:cb:fb:4b:cb:21:f2:15:44:3c:45:
                    95:c3:c2:72:2c:6b:07:a0:59:3f:aa:74:54:19:cb:
                    77:73:3f:43:ea:a8:09:0a:c0:33:de:84:3c:58:e8:
                    0f:f1:f1:3d:10:55:3c:86:42:ab:60:c1:60:89:9d:
                    67:6c:77:78:b2:ad:34:cf:5c:ea:84:52:83:b6:6a:
                    b3:1f:1c:f5:0a:c9:e5:b8:fe:a8:bf:cd:d2:6e:22:
                    31:7f:7e:03:25:af:97:aa:54:f5:03:ca:d7:d8:fd:
                    d8:0a:03:b5:6c:aa:b6:31:6c:1c:b9:79:c3:77:77:
                    b2:22:0a:53:cf:40:8d:65:a8:df:32:03:00:71:2e:
                    bc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F7:69:4D:4B:0E:56:7E:16:C7:A4:E6:70:D6:7B:5C:8E:C5:D3:AF
            X509v3 Authority Key Identifier:
                keyid:CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:5c:7d:27:fe:b2:6f:b3:e9:a3:b6:5f:41:c5:f3:0d:4b:cb:
         36:b6:48:74:50:55:9d:f2:0f:a7:16:8c:8f:d3:e4:a2:a9:8f:
         e1:4b:c3:7a:6c:bc:ab:f9:74:f8:97:97:5e:26:c2:c6:35:1a:
         f9:2a:44:6e:7f:ca:bf:89:57:90:23:64:c4:48:af:40:63:05:
         1f:1c:15:07:1e:f8:db:09:cd:91:6b:53:a0:f8:1c:15:b9:0c:
         1d:18:d8:9f:14:1f:f2:14:00:aa:e9:c9:93:d8:57:1a:0a:45:
         73:06:0a:6b:b0:a1:31:53:66:5f:e7:7a:dc:d3:ef:f6:3d:0a:
         2d:5f:64:61:5f:c9:ab:ad:e5:fe:f3:cc:40:98:09:72:b8:bb:
         7c:93:b3:ab:e1:74:65:56:56:00:95:df:35:04:44:fb:5c:8b:
         fb:01:7e:99:de:10:5f:e8:ce:e2:8f:26:d7:39:25:fb:bb:03:
         95:76:51:37:80:9e:63:b9:bc:73:f6:4c:79:43:3a:81:6d:f9:
         67:34:c9:20:70:e5:b5:7e:bb:e5:be:97:54:b1:98:d2:06:6d:
         6f:e7:f7:a5:8a:55:5b:43:23:d1:8e:e9:1e:07:28:dc:7f:a6:
         21:f8:da:46:f3:0c:e3:e8:6e:92:ca:02:98:5a:f5:74:6a:75:
         ca:3b:ba:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:12:10 2026 by rpki-client