Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
File:                     yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft (raw, json)
Hash identifier:          zIvZzpDL/kHW8wEQU6DdSSWp+n5rxWnz3uIqm9WxPsA=
Subject key identifier:   61:A9:7B:86:78:C4:7C:B2:5C:F8:08:BE:98:5A:69:D7:D4:F3:88:ED
Authority key identifier: CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
Certificate issuer:       /CN=ca37843f0752224459e6034569a217c8b611564b
Certificate serial:       019F924914D011A12689F7F87E4EFD4AF864
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
Manifest number:          19CB
Signing time:             Fri 24 Jul 2026 04:01:30 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:30 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:30 +0000
Files and hashes:         1: 2BMOpp_wwQldET06QZPy2wGLMZE.roa (hash: o3jxLcUWsaBV2UnbMYTOzdFwg6geCgqlvEJuA1VSTfU=)
                          2: hoZI_9EArI1Si7uz13Ke8OnteiE.roa (hash: LayP+QLnOj4vcYwwGf7M4XCZtnOUkpFaK8bKqcrT3zA=)
                          3: yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl (hash: fOFeSTt/YQT0Y4Y3swx25wwtu/KGSG1aFp7/Csp8ptw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:49:14:d0:11:a1:26:89:f7:f8:7e:4e:fd:4a:f8:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca37843f0752224459e6034569a217c8b611564b
        Validity
            Not Before: Jul 24 04:01:30 2026 GMT
            Not After : Jul 25 04:01:30 2026 GMT
        Subject: CN=61a97b8678c47cb25cf808be985a69d7d4f388ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:11:4b:20:1e:7b:43:02:c2:c0:c7:9d:ac:c4:
                    18:46:fc:46:46:f2:a2:c5:a2:54:12:d6:97:82:2f:
                    f5:1a:24:9c:7b:e8:0c:61:f2:6a:bd:82:3c:9e:aa:
                    96:a5:e8:82:74:7c:a1:ce:27:7b:43:94:db:b4:b0:
                    b4:a9:68:98:99:2a:d2:31:df:79:3e:27:bb:49:a7:
                    cc:c0:3e:a4:1b:0d:5b:5c:5e:97:b1:14:af:dd:44:
                    a7:b1:7b:1c:9c:99:1a:7b:4b:3b:c6:63:9e:0e:e4:
                    87:a9:53:42:4b:ec:0a:f7:f6:d5:84:bf:70:5a:01:
                    0b:14:53:a2:8f:80:2c:4e:da:0a:f6:8d:83:22:07:
                    2d:4c:d0:c5:66:25:f4:a8:a5:7c:c3:75:89:e4:ed:
                    80:03:0c:8e:03:f4:4d:17:3a:cc:6c:26:88:df:1a:
                    96:60:c1:5c:cc:c8:06:a7:58:a6:00:33:d9:66:80:
                    d2:2a:2d:8e:77:a1:72:98:67:dd:8f:cc:9e:ea:62:
                    b6:76:b9:0a:d5:9b:e9:5f:19:a0:5a:e9:c4:8a:79:
                    51:51:13:be:93:d0:d9:43:ee:1d:f3:bc:3d:34:1b:
                    45:92:97:36:50:87:91:6a:cc:67:90:57:7a:56:1e:
                    74:f2:47:8f:c7:bd:eb:94:41:27:fd:d6:66:eb:8a:
                    f9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A9:7B:86:78:C4:7C:B2:5C:F8:08:BE:98:5A:69:D7:D4:F3:88:ED
            X509v3 Authority Key Identifier:
                keyid:CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:00:50:b5:3b:b3:d0:92:c7:eb:5b:43:c3:32:26:06:f6:0c:
         54:a4:8f:2a:72:94:f1:23:c8:8f:e7:77:62:06:09:44:9e:5d:
         dc:9e:fc:e8:b2:c2:10:a4:e3:bf:34:8f:58:3b:5e:5d:97:56:
         a3:bb:91:1a:8a:b9:3f:3f:20:c5:fb:c6:b4:9d:1d:43:9d:19:
         ff:18:9a:d3:a1:94:4f:5d:bb:24:a5:a7:4f:b8:f7:d3:4b:88:
         e5:fd:a3:6e:54:e0:7c:f3:9d:21:21:bd:5d:d6:73:99:6d:d9:
         6d:72:75:99:43:13:14:2b:6b:bd:a8:dd:2e:fa:77:35:39:84:
         1a:dd:fe:dd:88:76:e8:28:e0:35:00:8a:ad:9c:47:ad:b0:77:
         18:d5:34:e1:8a:c4:ad:e8:c8:21:b8:ee:b4:4a:d7:56:63:be:
         3f:bc:9a:83:94:dd:4d:d7:89:86:6c:42:ff:dc:68:2c:b4:67:
         24:7e:e1:e1:f4:11:8c:9a:d2:e0:79:fe:72:71:ca:1f:f6:af:
         2a:83:45:fe:18:e7:bd:5e:3b:05:42:e6:4a:fc:0b:17:d8:40:
         65:d3:25:7b:9a:6c:a8:ec:85:f4:06:43:c5:95:8a:f3:f0:84:
         98:ac:a5:f4:49:f7:7e:61:b0:c8:d3:73:b5:60:c8:7e:91:ea:
         96:60:e8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:09:09 2026 by rpki-client