Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
File:                     yteUrGAc4lBbZfl1p9UWovAKWzE.mft (raw, json)
Hash identifier:          V34N3DDxuxtuq0FsSOhBTIdxQ5kXEJijAACB5+pe12A=
Subject key identifier:   A6:01:8F:B8:B9:0F:65:AA:17:93:E1:24:C0:40:CA:D9:AA:3F:2D:D7
Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Certificate issuer:       /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Certificate serial:       019D26963E19792089D0B7EB8809C4EFA983
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
Manifest number:          1890
Signing time:             Wed 25 Mar 2026 20:01:13 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:13 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:13 +0000
Files and hashes:         1: HqGTGlJNCwD8iNo3O2yITxmeCwc.roa (hash: lYCD20DI0iQge3ODQugwP5cP7vicqwIE+12AsMdZEFg=)
                          2: PZTHXJOe6Rub2_B35Qp_XWm1nCI.roa (hash: ECesKQ6eT4CAViBPjtKG3epmntO2VSEJzUCQqkLEU1U=)
                          3: aFAces1pfL2Gf7A82Ua9HdY5M_8.roa (hash: ihoy12eYWp6w4F3+SZfOyRsI/MGwgD7ZEiY1ooLQCpo=)
                          4: aPG3EYw2VofOCEzLOdUvwSZioag.roa (hash: Wotu54IXEWdJ5q1KogRg82/7w2mseyamEfZGS9yMPLs=)
                          5: sR1oPQtW-Makp0q2GEwGGGWP6-4.roa (hash: 42QylWBVPcRn+sQtIzfk5m8WJP9tWYlxV8MBA5fdb50=)
                          6: uNpGJTkDf9vfyQ-rWsMHOZPhKY4.roa (hash: DmupEvIL4K/NQQ7P0WNq04y0+5V0bCdj/6N1toh/r7g=)
                          7: yoOlkunfyIDQIpu8hSJPuV67N8k.roa (hash: 3vGjw6ITVAmFgqvDm6vNVM3T1UQ++9p2OwqdlJ0wKCw=)
                          8: yteUrGAc4lBbZfl1p9UWovAKWzE.crl (hash: SUzBJjaYxbhqDZQkfsjPu2pHRiTARTEFuiUPJKTKhyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:3e:19:79:20:89:d0:b7:eb:88:09:c4:ef:a9:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
        Validity
            Not Before: Mar 25 20:01:13 2026 GMT
            Not After : Mar 26 20:01:13 2026 GMT
        Subject: CN=a6018fb8b90f65aa1793e124c040cad9aa3f2dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:21:eb:38:1c:ae:13:53:f8:67:d0:4f:b4:a7:
                    83:6a:90:22:30:19:15:72:cf:8b:61:13:8a:f1:45:
                    6d:36:71:42:0a:aa:2d:00:43:38:0d:19:42:58:02:
                    b6:ed:94:84:a7:a5:f2:19:d1:10:c8:4d:2a:f2:87:
                    0e:45:85:f8:fe:bf:c0:c2:e9:7f:68:ce:56:d8:bb:
                    3d:a7:b1:70:ff:83:b3:70:a4:d4:bb:83:7b:b3:0a:
                    9e:3a:12:20:c2:13:c3:74:d8:3f:ab:10:3c:15:34:
                    42:4b:a2:48:01:72:5a:86:94:ba:9e:24:92:06:f6:
                    76:fb:f5:8e:1c:91:e0:4d:d3:56:c9:0d:91:36:f7:
                    40:0b:fb:7d:74:27:da:ba:e7:f4:94:41:4c:7f:1a:
                    9c:dc:b3:10:0f:66:04:fb:29:5b:cd:43:68:73:b7:
                    ba:db:61:16:cc:e8:7c:e6:1a:3c:80:a1:b3:98:bc:
                    8d:99:77:bc:2c:ad:f9:b2:8b:c5:81:18:69:09:0a:
                    4e:65:a7:4d:09:62:ee:24:b6:73:36:b8:c3:a5:ae:
                    10:fd:29:01:22:7c:03:42:2b:95:d9:31:ce:7f:92:
                    db:1b:40:4b:ba:3a:72:e6:7c:8b:97:cf:62:f2:78:
                    f8:d9:f3:71:25:72:68:79:74:9c:87:15:da:0f:47:
                    14:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:01:8F:B8:B9:0F:65:AA:17:93:E1:24:C0:40:CA:D9:AA:3F:2D:D7
            X509v3 Authority Key Identifier:
                keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d2:35:0d:2c:a1:33:cb:a6:3e:6b:bc:35:eb:cf:3a:4b:4a:
         63:7f:09:55:98:c7:eb:52:ad:e2:7e:2c:0f:d6:eb:bc:2b:7b:
         8b:7d:fa:68:2a:61:16:ff:21:82:1f:df:3b:77:de:b6:0f:a9:
         9c:e7:71:88:f2:6d:7d:ae:ca:ab:56:5e:a5:c6:27:4e:00:02:
         fc:87:0f:3f:c7:04:2c:26:60:44:c4:5c:07:d9:b8:8d:bb:b3:
         19:6f:43:98:d0:bd:10:e3:9c:a1:43:bc:52:c3:49:23:c0:38:
         b4:23:a7:ec:43:ea:ae:f1:78:7e:38:7f:06:4c:fb:c7:73:d2:
         1f:5d:12:d6:ea:2f:08:d7:3c:e4:a2:95:2e:1d:59:c4:3e:06:
         1c:fe:66:59:7c:bb:18:cb:37:ff:1a:89:b4:48:fa:2d:fd:fd:
         2b:6b:ad:a3:40:90:4b:79:17:14:3a:d7:e3:7a:91:06:dc:ee:
         f2:28:2d:92:27:ea:56:12:ea:49:10:c0:b8:0a:a8:6a:a6:2c:
         fe:47:c6:78:c6:36:d8:72:08:0d:11:f4:30:af:5d:54:ce:4a:
         23:32:aa:27:f2:08:f0:41:dd:84:b4:91:6d:9c:35:f9:3a:85:
         eb:58:56:b6:a9:0c:57:c0:5d:35:85:59:42:0b:a3:f4:e3:2a:
         6c:1f:b0:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlj4ZeSCJ0LfriAnE76mDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZDc5NGFjNjAxY2UyNTA1YjY1Zjk3NWE3ZDUxNmEyZjAw
YTViMzEwHhcNMjYwMzI1MjAwMTEzWhcNMjYwMzI2MjAwMTEzWjAzMTEwLwYDVQQD
EyhhNjAxOGZiOGI5MGY2NWFhMTc5M2UxMjRjMDQwY2FkOWFhM2YyZGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyHrOByuE1P4Z9BPtKeDapAiMBkV
cs+LYROK8UVtNnFCCqotAEM4DRlCWAK27ZSEp6XyGdEQyE0q8ocORYX4/r/Awul/
aM5W2Ls9p7Fw/4OzcKTUu4N7swqeOhIgwhPDdNg/qxA8FTRCS6JIAXJahpS6niSS
BvZ2+/WOHJHgTdNWyQ2RNvdAC/t9dCfauuf0lEFMfxqc3LMQD2YE+ylbzUNoc7e6
22EWzOh85ho8gKGzmLyNmXe8LK35sovFgRhpCQpOZadNCWLuJLZzNrjDpa4Q/SkB
InwDQiuV2THOf5LbG0BLujpy5nyLl89i8nj42fNxJXJoeXSchxXaD0cUgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYBj7i5D2WqF5PhJMBAytmqPy3XMB8GA1UdIwQY
MBaAFMrXlKxgHOJQW2X5dafVFqLwClsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXRlVXJHQWM0bEJiWmZsMXA5VVdvdkFLV3pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mOWE0YmUtZDc5Yy00MTkyLWE2YjMt
M2I5ODhmMTg4ZDkxLzEveXRlVXJHQWM0bEJiWmZsMXA5VVdvdkFLV3pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9mOWE0YmUtZDc5Yy00MTkyLWE2YjMtM2I5ODhmMTg4ZDkx
LzEveXRlVXJHQWM0bEJiWmZsMXA5VVdvdkFLV3pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtI1DSyh
M8umPmu8NevPOktKY38JVZjH61Kt4n4sD9brvCt7i336aCphFv8hgh/fO3fetg+p
nOdxiPJtfa7Kq1ZepcYnTgAC/IcPP8cELCZgRMRcB9m4jbuzGW9DmNC9EOOcoUO8
UsNJI8A4tCOn7EPqrvF4fjh/Bkz7x3PSH10S1uovCNc85KKVLh1ZxD4GHP5mWXy7
GMs3/xqJtEj6Lf39K2uto0CQS3kXFDrX43qRBtzu8igtkifqVhLqSRDAuAqoaqYs
/kfGeMY22HIIDRH0MK9dVM5KIzKqJ/II8EHdhLSRbZw1+TqF61hWtqkMV8BdNYVZ
Qguj9OMqbB+wBQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:34 2026 by rpki-client