Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
File:                     1-YoC0gxrfeNXEl84sXNcobkfh7M.mft (raw, json)
Hash identifier:          axMzR9jdYrtIyHSI5g00KB9PvkuJSp95MujECjpKa4Q=
Subject key identifier:   60:AE:43:A9:F7:15:2D:CF:FA:31:FC:39:3B:90:69:A1:98:74:33:A7
Authority key identifier: F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
Certificate issuer:       /CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Certificate serial:       019D273AAAAA3FFAB0F1C75AFF66B8CBFB09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
Manifest number:          1665
Signing time:             Wed 25 Mar 2026 23:00:49 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:49 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:49 +0000
Files and hashes:         1: 1-YoC0gxrfeNXEl84sXNcobkfh7M.crl (hash: RzroxeZO7lbgmkpERXFinRc50SKsxG/+xbESYfDdNcw=)
                          2: 1lUz7Shr8fMa_pb6NtzznyZ41To.roa (hash: C1rnmJ3xKxL7Gseh79+XfFJXuiu5gmvcrxIosMgQNT4=)
                          3: 49ww4rPn3g7MqsmGfDqf0YpDy8s.roa (hash: fAAcaoMC+CvPBu2Hms/Nf/sHfWr9TponmPW+VL5Kk7Q=)
                          4: HkXjWGsEB_nzvxNHP8dGv7MAq7Q.roa (hash: 1xbJ8+wmJvUYu+3DXk9VVxz7EgtP35YeVUeb75i94aM=)
                          5: o8qBYm0XB-DKW0l9z4LxLJjVMt8.roa (hash: 6+/jpm9f+1fc/q145oBtk8Pmiq4grW2fLOR+zKT6VOc=)
                          6: vwVgz0AlWqP316EcZY-4ylK0yIA.roa (hash: FuDRoo1XnKDsM6Yjjqt7YCB9VBp4VwF44kzWhYXP7o4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:aa:aa:3f:fa:b0:f1:c7:5a:ff:66:b8:cb:fb:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
        Validity
            Not Before: Mar 25 23:00:49 2026 GMT
            Not After : Mar 26 23:00:49 2026 GMT
        Subject: CN=60ae43a9f7152dcffa31fc393b9069a1987433a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4a:07:74:79:2d:2a:13:58:c9:09:4f:59:81:
                    3f:4c:60:e4:e6:31:7c:76:5d:6e:42:f2:94:5d:22:
                    73:34:70:9f:e6:56:2e:b8:15:dc:5d:18:52:16:8a:
                    23:14:2d:d3:94:63:03:a5:5b:54:64:8e:3a:a7:03:
                    48:48:02:c7:67:77:14:f3:27:a8:14:0d:29:bf:bd:
                    21:36:1d:5b:4e:91:4e:10:96:a6:c4:bc:fd:7c:78:
                    fb:e7:12:a8:c9:99:e3:c4:fd:db:f0:5a:9e:59:82:
                    6d:90:1c:4b:35:ff:87:92:51:73:ae:29:ef:25:7b:
                    97:3a:60:33:e3:0c:ca:87:3a:9b:c4:fd:65:f5:b3:
                    04:69:a2:c1:90:2f:40:3a:84:93:6d:b6:17:4a:46:
                    b0:54:3b:96:fd:27:e8:bf:d7:26:c5:5b:ed:f6:5a:
                    5f:91:d3:03:30:44:86:2d:3a:8d:e3:12:7c:be:41:
                    b8:98:eb:99:42:91:7f:a7:7a:00:7b:89:20:c5:8e:
                    62:87:37:20:3d:d4:7a:61:0d:80:97:6f:a0:3a:e0:
                    56:89:88:20:e8:c1:12:ee:53:09:0e:41:71:7e:a5:
                    e9:15:25:b5:9f:f4:f4:e0:f3:9a:c1:04:a8:bb:87:
                    07:3b:9d:74:f1:f8:ce:ae:33:4a:95:52:01:66:57:
                    a7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AE:43:A9:F7:15:2D:CF:FA:31:FC:39:3B:90:69:A1:98:74:33:A7
            X509v3 Authority Key Identifier:
                keyid:F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:cc:31:0a:38:46:56:67:a6:17:a7:53:2b:08:49:1f:70:30:
         65:58:08:d5:70:33:95:b9:84:3d:c9:f9:34:a4:ac:76:38:a9:
         b1:41:1b:ff:3e:0e:7d:4a:1a:fd:e1:22:e6:93:38:c5:89:f6:
         9c:44:a6:00:9e:1b:66:c2:9a:e0:45:dc:ef:02:c4:28:18:c3:
         ea:1b:30:cd:9b:21:57:0c:e2:c0:69:79:1c:2f:2c:c5:f3:06:
         dd:6f:5e:3b:3a:dc:1b:d5:48:dc:cb:a9:10:38:5a:5f:11:1c:
         05:e0:55:40:4e:6c:07:16:c1:25:83:9d:d4:5d:d3:3a:0a:57:
         d1:c3:58:0c:4e:03:5a:53:13:c5:d8:3e:a2:35:0e:a6:0d:96:
         de:58:29:af:b3:3e:4f:45:65:a2:8d:4e:d9:e0:0a:89:49:87:
         cf:e7:db:4d:c0:9d:0e:12:8e:18:a5:0a:34:a0:71:78:96:ee:
         a5:ae:33:8e:9b:49:05:2c:5a:90:78:d6:3d:f4:ca:8e:cc:e9:
         9d:e3:32:cb:5b:ec:6e:cf:bf:78:d4:d9:5d:68:1d:d5:bc:3b:
         e1:26:53:b8:bd:b4:c3:bf:d1:31:4d:fd:c6:cc:1d:ec:93:fe:
         47:2d:bc:98:c5:70:42:63:83:d8:d4:cd:91:d4:ff:9d:fc:20:
         d7:05:0d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:30 2026 by rpki-client