Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft
File:                     yCyAAaF2QraVYsY6xYkg2jYPFU8.mft (raw, json)
Hash identifier:          Hufc25vXbW3bHqq0j0uqUbk2UZq7xYqkVb9dcdQUPfQ=
Subject key identifier:   66:70:B7:72:8E:6D:76:21:17:B1:F4:05:07:34:6D:66:10:6A:96:FE
Authority key identifier: C8:2C:80:01:A1:76:42:B6:95:62:C6:3A:C5:89:20:DA:36:0F:15:4F
Certificate issuer:       /CN=c82c8001a17642b69562c63ac58920da360f154f
Certificate serial:       019D28168B68295372F1F3BE0AA4E9C1DF38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 03:00:59 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:59 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:59 +0000
Files and hashes:         1: pWhlUSWFVOPEP1263TMWzwzar0A.roa (hash: 87ndsnniU0GBhS91z7qPanJilmWmzA/ki4F8WB5eiXE=)
                          2: yCyAAaF2QraVYsY6xYkg2jYPFU8.crl (hash: nY11MlO+nfq5rI8D+R4Mw9iVwmb0fZPSyyXf9lSfuWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:8b:68:29:53:72:f1:f3:be:0a:a4:e9:c1:df:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c82c8001a17642b69562c63ac58920da360f154f
        Validity
            Not Before: Mar 26 03:00:59 2026 GMT
            Not After : Mar 27 03:00:59 2026 GMT
        Subject: CN=6670b7728e6d762117b1f40507346d66106a96fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:30:4f:4e:25:b6:89:57:8c:17:42:e8:f3:73:
                    98:9f:1b:9d:a9:7a:6c:c8:23:73:5a:d7:56:c4:d3:
                    3d:d2:2a:ff:55:a1:7e:1b:f3:60:e2:2b:86:51:d6:
                    4e:fe:3c:cb:73:bb:7f:07:84:3e:d5:61:e1:83:db:
                    69:05:67:b9:f1:4e:53:f9:f5:96:a1:c5:33:1a:81:
                    f4:6c:64:b2:e3:34:50:73:92:3d:8d:ad:9c:d7:db:
                    3c:2b:af:f3:67:6d:5b:48:c6:a5:7a:1e:f1:29:aa:
                    f1:a3:75:71:d5:bb:cf:1c:ab:5b:87:73:fe:27:17:
                    ee:7a:6d:36:48:9f:22:f5:ae:43:dd:2d:47:51:c2:
                    43:ac:88:12:db:53:73:da:65:fd:19:c1:e9:40:10:
                    23:b3:2b:d5:15:2a:80:2c:d6:ae:df:55:aa:c4:71:
                    10:6b:67:04:67:fa:a6:2c:e6:b2:77:74:f7:1b:7c:
                    45:e4:59:97:cc:be:fd:82:8d:cb:09:ac:40:0d:21:
                    7a:22:53:13:86:d7:3d:89:39:5e:ba:9c:70:3f:f1:
                    30:3b:87:27:1a:3e:5a:2e:75:a9:41:db:2c:2f:2e:
                    a4:c7:79:4c:6f:36:d9:ec:b8:de:cf:1f:d5:6e:3a:
                    7f:a4:50:83:bb:80:dd:c9:8d:02:ad:62:d5:8b:18:
                    b6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:70:B7:72:8E:6D:76:21:17:B1:F4:05:07:34:6D:66:10:6A:96:FE
            X509v3 Authority Key Identifier:
                keyid:C8:2C:80:01:A1:76:42:B6:95:62:C6:3A:C5:89:20:DA:36:0F:15:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:48:f3:fa:a9:82:aa:21:e0:ea:80:ee:1d:b7:e5:21:c4:c1:
         f9:f0:ba:bb:c2:36:2e:46:92:e5:83:3f:5e:20:9e:1c:ce:80:
         43:9f:ce:96:da:9f:02:0c:4a:2c:1f:1b:f7:78:5c:a1:bb:ae:
         ba:56:95:0f:f4:3b:2d:e5:87:bf:64:96:7a:75:47:d8:1e:93:
         de:70:8a:27:52:7d:41:4c:ae:98:9a:88:c7:0a:bf:33:cb:b8:
         98:68:5f:3a:64:f6:31:c3:d1:3e:dd:7c:d3:c0:74:4f:13:1a:
         3f:19:77:01:77:d6:a7:96:39:0e:fe:92:70:a2:a1:75:da:01:
         31:65:a5:a7:ec:14:7e:74:12:b7:b9:7b:66:4e:b7:e1:c4:00:
         d9:9d:09:4c:c4:b1:3f:f8:5a:72:18:19:06:87:ea:ee:d2:72:
         fe:92:c6:e6:92:da:bf:8b:89:10:f6:0a:5c:02:01:50:5d:c3:
         0c:89:ba:9c:4a:f1:64:c0:74:47:6f:c5:b8:fb:1f:9f:25:4f:
         04:b0:04:41:18:fd:c8:bd:ef:53:00:a5:85:78:c0:f4:55:1c:
         8c:0f:4c:b6:12:ad:e1:dc:f4:db:50:1d:b5:13:95:47:2b:10:
         c1:71:8d:ca:84:55:f1:58:b6:64:65:c6:b7:62:75:1d:ae:74:
         64:dc:d5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:27 2026 by rpki-client