Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
File:                     Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft (raw, json)
Hash identifier:          aiT9yRLS231xFvAmM01RCOr2XFYT374eaQc/rteX4Ac=
Subject key identifier:   7A:0E:E9:86:4B:AD:2A:11:72:88:30:D3:C8:59:43:7C:88:68:B9:27
Authority key identifier: 61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
Certificate issuer:       /CN=61e6ea83926bc478c785471d805a5c1210a8c993
Certificate serial:       01A1E02817C17519ECCEBCCF2FEA2C38924A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
Manifest number:          1B02
Signing time:             Sun 15 Nov 2026 17:01:26 +0000
Manifest this update:     Sun 15 Nov 2026 17:01:26 +0000
Manifest next update:     Mon 16 Nov 2026 17:01:26 +0000
Files and hashes:         1: 2dU_Wx7maoKES4uWBmISrFThyIU.roa (hash: ffH0TAg9XSxzOXt+6AV+6sDEvW+c8igbg9XX2e6NJUY=)
                          2: HZb22Oio0r0dOkO7Ylc22UNpmkI.roa (hash: 4bxPJ8gmL9NMrQNM+ipouVsdrPbO9cdpsR6HkCC+6eM=)
                          3: Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl (hash: 6JCSh7YQEiSfWtLeMQ9klPBDhp46sFg1kvUPe7HEy5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:e0:28:17:c1:75:19:ec:ce:bc:cf:2f:ea:2c:38:92:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61e6ea83926bc478c785471d805a5c1210a8c993
        Validity
            Not Before: Nov 15 17:01:26 2026 GMT
            Not After : Nov 16 17:01:26 2026 GMT
        Subject: CN=7a0ee9864bad2a11728830d3c859437c8868b927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e2:fd:d4:97:ff:d2:9c:e0:81:43:7a:9e:0c:
                    1a:39:13:1e:88:e1:ba:81:08:d1:bc:b0:9f:ce:83:
                    b7:10:7c:99:61:bf:81:0d:af:cc:5f:47:01:88:df:
                    5f:be:34:c1:60:c1:86:52:44:e0:65:ba:08:97:43:
                    9a:7e:ce:af:d7:3c:0b:86:b3:8c:f3:48:b2:e7:d4:
                    92:f4:11:0c:37:91:6d:9d:7a:62:55:28:62:5d:2c:
                    e6:00:8e:1f:02:90:2a:d3:73:d0:78:70:eb:cb:08:
                    38:35:0c:d5:58:0f:cf:6f:dc:51:dc:e4:4b:f5:01:
                    33:f8:0b:b6:d4:2c:79:aa:34:9d:6a:44:a2:1e:12:
                    01:f7:e0:90:b5:9a:1b:ed:a7:fb:2b:51:7b:ac:07:
                    9d:c1:cf:a0:1c:c2:8c:76:cc:40:72:7c:b1:32:8f:
                    6c:3b:65:a5:c7:a9:b1:29:4b:21:3e:b6:c3:00:75:
                    86:9e:34:10:b0:43:b5:53:80:e6:ab:e8:59:d8:5f:
                    b1:09:45:c3:d6:3a:5f:0b:fd:ff:21:1b:e9:32:61:
                    de:a3:ef:58:00:7c:e1:d7:8d:3a:bf:89:e3:ce:05:
                    4a:fe:ad:bc:0b:bc:f3:36:e3:5e:0d:24:6a:9e:13:
                    75:87:69:32:55:e3:07:e5:0d:22:d3:81:f8:46:ca:
                    df:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0E:E9:86:4B:AD:2A:11:72:88:30:D3:C8:59:43:7C:88:68:B9:27
            X509v3 Authority Key Identifier:
                keyid:61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:90:a7:4d:a1:80:ec:76:5c:8b:8b:71:93:21:74:77:e7:50:
         c4:97:f0:7a:d1:31:29:26:e1:7d:49:a0:e9:a5:7d:ca:ab:e1:
         be:c8:05:50:e9:19:ed:be:52:83:5c:bc:a7:97:41:39:c3:b4:
         6d:93:29:ff:44:08:fc:56:dd:98:57:14:a8:bf:77:5b:a2:8f:
         d3:2c:be:b1:e8:ba:08:59:75:83:3b:dd:14:3f:a2:12:19:63:
         bc:d0:ec:12:76:ea:fb:2c:43:51:b7:e3:19:13:65:44:c4:6b:
         df:04:2e:7c:06:6f:68:21:ee:a7:09:db:64:fe:1f:bc:23:71:
         2d:25:1c:fc:fd:c2:f4:f6:92:0a:49:9f:89:51:66:93:80:af:
         d7:68:f3:db:3a:a0:82:16:dc:00:60:23:af:69:c5:7e:40:b1:
         26:21:45:05:18:ca:41:8a:06:c8:ca:19:e6:78:fc:45:52:fd:
         9e:b0:3d:84:af:90:ef:08:f9:1c:cc:94:9e:80:7f:62:fa:a6:
         da:74:b7:30:48:78:70:00:4b:19:c8:9e:5a:7d:96:a9:e4:d7:
         a1:a3:73:7b:b4:75:24:7c:b9:b2:58:40:71:7b:32:b6:c4:3f:
         6b:28:a2:ad:85:84:cc:12:c7:3e:db:73:a9:75:35:40:0b:6f:
         5b:38:0d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:03:07 2026 by rpki-client