Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft
File:                     Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft (raw, json)
Hash identifier:          UMj4KJ7d32iqb2bNH34RpwDhWs0zvGHwM/QtCsvJVJI=
Subject key identifier:   54:B5:C8:21:53:0D:C9:93:7A:D3:6E:83:F2:D6:30:29:F3:9E:45:A4
Authority key identifier: 62:9E:80:E8:8B:B7:66:29:1E:5E:C8:03:38:73:25:11:E4:D4:1E:04
Certificate issuer:       /CN=629e80e88bb766291e5ec80338732511e4d41e04
Certificate serial:       019F94DBBB718E10695AE4DF8D4119E66AEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft
Manifest number:          0EE5
Signing time:             Fri 24 Jul 2026 16:00:55 +0000
Manifest this update:     Fri 24 Jul 2026 16:00:55 +0000
Manifest next update:     Sat 25 Jul 2026 16:00:55 +0000
Files and hashes:         1: Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.crl (hash: 3nMnElq8+BTH41v3JFr9Qd3ILUpnPf3ZFB2g+PSuzEU=)
                          2: dJuawEWS8NqZGJF9uJKMoItyq7U.roa (hash: IYmTE9NklyCZqQOo3sZkgAOEmHqhiMDY4VmI2iuEFr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:db:bb:71:8e:10:69:5a:e4:df:8d:41:19:e6:6a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=629e80e88bb766291e5ec80338732511e4d41e04
        Validity
            Not Before: Jul 24 16:00:55 2026 GMT
            Not After : Jul 25 16:00:55 2026 GMT
        Subject: CN=54b5c821530dc9937ad36e83f2d63029f39e45a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a3:53:91:95:d5:0c:16:d2:d8:fc:15:e2:6f:
                    92:2b:60:26:75:23:01:eb:e2:e0:7a:44:c6:f8:a9:
                    1d:ba:7f:19:44:83:97:fd:40:f9:5a:68:aa:2e:9d:
                    4d:9f:d5:aa:7a:86:0b:21:72:b7:b8:b0:46:e6:fb:
                    90:9b:da:58:6e:20:e9:3c:04:6d:3d:f0:55:21:ed:
                    47:8c:39:e0:58:a3:90:d1:3e:4f:91:d2:3c:c4:3e:
                    03:93:c8:7e:42:99:df:85:7a:2e:2f:ad:3b:29:9e:
                    72:7c:94:7f:46:55:7a:8d:c4:aa:77:57:79:f3:15:
                    dc:1a:2e:7c:93:21:34:ee:dd:9e:f9:24:e1:5c:d1:
                    ec:a9:99:11:47:d3:cd:2b:78:40:3f:ac:b7:c1:17:
                    26:9b:20:43:f4:00:c7:1c:06:a2:22:02:d7:22:4a:
                    12:48:c4:bd:16:9a:5c:de:60:b2:77:3e:5e:79:e9:
                    e0:7f:cf:43:04:51:68:c9:c5:97:f2:9e:03:27:fa:
                    cb:6a:d9:33:5c:30:71:2b:fb:e5:12:52:46:06:ad:
                    49:51:c2:fe:46:a1:a8:01:02:da:bf:8b:89:5a:48:
                    9d:f5:82:85:4f:0b:21:40:10:54:b9:2a:79:0c:f1:
                    7c:05:05:e4:c3:7a:d9:28:bd:8d:43:65:58:8c:cf:
                    fa:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B5:C8:21:53:0D:C9:93:7A:D3:6E:83:F2:D6:30:29:F3:9E:45:A4
            X509v3 Authority Key Identifier:
                keyid:62:9E:80:E8:8B:B7:66:29:1E:5E:C8:03:38:73:25:11:E4:D4:1E:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:43:fd:9f:2a:01:ee:83:60:6c:fd:ef:fd:20:9e:88:9d:21:
         46:89:26:cd:f1:0a:1b:03:d6:82:df:81:90:53:9c:e3:c2:fd:
         fe:39:cb:ad:6d:41:0a:d9:c3:75:be:24:84:31:ad:99:67:00:
         51:6b:ec:b9:8c:4f:60:17:da:44:76:77:f6:83:a1:25:83:3c:
         e8:c8:f3:3e:90:db:85:68:e1:31:d9:1e:54:09:8d:46:db:58:
         23:6d:bc:5c:2a:d6:68:50:95:47:ad:a8:c4:3b:f6:e8:50:60:
         fc:5a:55:a5:d3:7e:86:84:82:07:51:4c:e8:e3:0e:29:64:a5:
         ec:e2:12:7d:5a:75:c2:e0:8d:90:61:b3:7e:d4:8d:40:24:3e:
         13:2a:97:b1:3c:ec:78:ca:79:36:10:3e:93:93:83:d5:41:43:
         78:53:e8:81:e3:2f:99:ea:f8:00:45:92:d9:a3:cb:6a:98:f5:
         72:ec:5f:ae:dc:7c:3c:b4:cb:a1:64:70:b4:0b:54:99:c8:39:
         38:64:1b:4f:52:af:c4:ff:a0:69:c4:35:1e:6c:95:f2:5a:b5:
         39:33:53:d8:72:b9:eb:08:8c:3c:db:b7:b3:5c:46:ed:32:98:
         de:4c:79:73:dc:cb:b4:67:a7:16:e7:4e:bb:36:3c:c4:41:8d:
         66:57:b7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:30:24 2026 by rpki-client