Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
File:                     YictaPs4lesim2j41DNBJLlnxw4.mft (raw, json)
Hash identifier:          KvhP4xSxzz7IvFVVWmTSjVroGz95OhjQImaKG5KGtdw=
Subject key identifier:   51:78:7A:A8:D6:A0:7A:85:0A:02:CB:88:D9:D7:BA:2D:30:C4:E5:88
Authority key identifier: 62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E
Certificate issuer:       /CN=62272d68fb3895eb229b68f8d4334124b967c70e
Certificate serial:       019E1FB5CDAD94437C79E1FEDE5A26D507C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
Manifest number:          1377
Signing time:             Wed 13 May 2026 05:01:08 +0000
Manifest this update:     Wed 13 May 2026 05:01:08 +0000
Manifest next update:     Thu 14 May 2026 05:01:08 +0000
Files and hashes:         1: 33i2qqWu0X5QxMYwp4hgjABiqq4.roa (hash: 1hHMiIhJSj+gJrD8TbC5dlRZ8I3xR9/+D7WQxWbZlNU=)
                          2: YictaPs4lesim2j41DNBJLlnxw4.crl (hash: 4IdOBkV3WmzGgeRzlyUMCp3kgkt5M2uoFVi0IJ+nvqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:cd:ad:94:43:7c:79:e1:fe:de:5a:26:d5:07:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62272d68fb3895eb229b68f8d4334124b967c70e
        Validity
            Not Before: May 13 05:01:08 2026 GMT
            Not After : May 14 05:01:08 2026 GMT
        Subject: CN=51787aa8d6a07a850a02cb88d9d7ba2d30c4e588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cd:31:98:1b:20:98:0b:6e:f4:8e:60:8f:cc:
                    83:9c:38:87:b3:56:5c:1c:19:02:53:37:84:b8:d6:
                    ac:4a:f8:0d:47:ae:ed:2e:46:23:04:e5:0d:2a:ba:
                    ac:40:95:f6:86:4d:0c:79:6a:d8:0b:c6:34:81:26:
                    12:b8:a5:5b:f9:53:b9:6c:d2:c0:eb:8d:e2:67:c4:
                    22:99:f8:f6:c7:2c:9c:cc:fd:54:64:85:0b:15:b5:
                    00:95:b6:81:9e:a3:33:94:cc:03:39:92:b6:eb:42:
                    87:a1:db:a9:b8:eb:3f:a8:20:f4:44:7f:48:e1:a0:
                    bf:ff:b7:78:d6:31:81:2e:d1:f4:93:38:fc:26:dd:
                    d9:ba:ed:fc:ea:dd:1c:5c:bc:90:1f:2f:09:c3:91:
                    cf:9e:5b:03:0f:17:1e:d3:92:0c:ef:12:2a:c2:2c:
                    03:42:35:0f:ab:5e:ff:92:ef:9e:0c:50:cb:c8:6a:
                    b0:43:8c:9c:ef:62:d6:ab:f7:ec:0b:31:b0:77:cb:
                    8a:ba:a0:49:1f:4f:1c:c8:f6:53:a6:3b:ce:74:cb:
                    0c:a6:28:52:7b:02:85:f4:e3:fd:2d:ae:0a:c4:d5:
                    bb:ee:35:fe:70:87:c6:28:80:9a:b8:d1:46:36:c8:
                    7e:bd:5b:53:3e:7f:90:e7:3f:8c:5c:3d:35:b0:6d:
                    9d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:78:7A:A8:D6:A0:7A:85:0A:02:CB:88:D9:D7:BA:2D:30:C4:E5:88
            X509v3 Authority Key Identifier:
                keyid:62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:07:51:f2:81:d5:3c:1b:5d:33:06:12:65:bb:09:d4:ca:d5:
         16:aa:5f:45:12:b3:72:65:38:d9:a0:74:b3:1c:72:d0:b5:15:
         48:d7:4b:bf:b2:4d:56:15:7d:3b:a0:ae:70:d3:33:b6:28:71:
         3e:1d:de:e9:f1:a3:b4:f6:b5:f9:a2:e4:2c:af:7c:31:01:f4:
         98:25:d3:d0:1e:9e:f2:6a:26:0b:6d:99:c6:c2:ba:a0:8d:f9:
         a6:56:bd:6c:1a:34:9e:0a:89:53:f3:1f:d3:0c:cf:6a:d9:b2:
         6c:cc:a8:b6:3c:d7:c1:3f:5e:27:14:bc:97:20:eb:19:ab:7f:
         be:21:93:3c:d8:c9:95:9f:65:74:6c:33:4a:5c:03:98:ca:6e:
         23:f8:08:ca:a3:12:35:26:c1:33:3f:8d:9a:e1:c5:98:09:f0:
         b6:57:cb:e7:d9:4d:3c:d6:fe:e4:08:18:9a:a4:ab:c6:a6:4c:
         c9:f2:48:c3:8c:54:65:d4:66:21:a8:6e:57:b0:44:76:9d:ab:
         1b:5c:28:4d:d0:00:fb:00:1a:13:ed:2a:2f:16:af:e7:8a:77:
         be:e2:1b:b8:cb:cb:9e:96:15:fc:27:95:01:47:e4:a4:1f:24:
         0c:fe:8d:84:17:6b:29:6a:55:59:de:4e:94:0e:47:6d:3b:85:
         cb:93:7a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:47:34 2026 by rpki-client