Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft
File:                     YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft (raw, json)
Hash identifier:          uWvSjD0R2PRXFgCCPg8LXZCW+/NOZ+tPBGaiedZQRyA=
Subject key identifier:   23:B3:5B:8A:86:F1:F9:86:73:9F:4C:E9:DC:7C:52:43:16:CF:2C:D9
Authority key identifier: 62:F6:2A:84:7A:4E:DF:F9:95:71:A3:2E:94:ED:FF:05:25:B0:3B:66
Certificate issuer:       /CN=62f62a847a4edff99571a32e94edff0525b03b66
Certificate serial:       019D27DFDA66F7A33BA13331CEC91A2886D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft
Manifest number:          1884
Signing time:             Thu 26 Mar 2026 02:01:15 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:15 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:15 +0000
Files and hashes:         1: P1ghkVf1iYeiJ5urtCBrMjr_3Hg.roa (hash: +Jnqgq2YUIAGH2X9ewpN8lb6jHk8R5mKkq16yKUVg6M=)
                          2: YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl (hash: Smg3QjJaxrOfX6EKQATWZwCOO+PZGX1ONALTCIPFY/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:da:66:f7:a3:3b:a1:33:31:ce:c9:1a:28:86:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f62a847a4edff99571a32e94edff0525b03b66
        Validity
            Not Before: Mar 26 02:01:15 2026 GMT
            Not After : Mar 27 02:01:15 2026 GMT
        Subject: CN=23b35b8a86f1f986739f4ce9dc7c524316cf2cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cf:cc:a0:dd:8a:7d:d0:1a:e3:cc:86:94:8d:
                    4f:14:62:b5:47:f9:12:c5:60:d0:4a:72:74:6f:c7:
                    04:f0:80:d1:05:29:94:27:2f:87:2b:f2:c5:2a:47:
                    e7:8c:13:89:86:c0:ee:26:9d:4f:d1:ef:3c:d2:75:
                    74:01:08:2f:81:ec:0d:7f:0b:e8:f9:5b:d2:ae:7b:
                    7f:50:14:fa:ce:46:2c:ec:f9:3b:70:48:f6:f0:7a:
                    15:f9:d0:fa:88:4c:79:09:8c:17:2d:1c:c1:4a:20:
                    9d:1d:e3:9a:d4:c8:9f:d1:2c:9a:8a:9b:fe:fd:31:
                    d9:64:b1:94:45:23:ae:93:9f:e6:f9:69:8a:27:74:
                    84:27:60:08:fa:32:0d:a8:5f:5d:1b:ed:a9:80:32:
                    b9:01:36:e8:58:56:a2:7d:80:1a:4d:3b:33:d4:4d:
                    a5:6b:42:df:10:ed:36:86:cd:29:65:9f:19:ec:27:
                    9d:c4:91:ca:b0:50:98:cc:bb:d6:99:e9:25:05:b1:
                    f7:5d:19:57:88:c6:a7:74:28:99:b0:80:4a:5a:55:
                    bd:72:21:65:b3:ee:a3:d3:23:53:ad:db:b5:b2:8b:
                    84:6b:f6:24:6d:ed:23:8c:fc:d8:69:fd:4f:c6:93:
                    e0:cf:73:61:c9:af:b2:8a:a8:fa:5f:0c:25:ef:d9:
                    ce:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B3:5B:8A:86:F1:F9:86:73:9F:4C:E9:DC:7C:52:43:16:CF:2C:D9
            X509v3 Authority Key Identifier:
                keyid:62:F6:2A:84:7A:4E:DF:F9:95:71:A3:2E:94:ED:FF:05:25:B0:3B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:e2:f3:4a:ad:a6:f3:ff:e0:b3:54:c9:82:2e:5f:73:28:1d:
         3b:54:bb:87:dd:94:33:1b:8e:d6:81:e3:58:88:20:ca:77:20:
         e1:e8:e4:68:2b:af:33:f9:cc:40:e4:4a:83:fb:f3:c8:b9:87:
         26:84:82:60:f8:a1:ff:e9:99:36:bd:0d:78:2f:ab:43:fa:12:
         7a:8a:78:d7:c2:44:9c:ec:a3:ea:da:60:63:f9:29:4b:fa:0a:
         a1:89:a3:e0:6e:d5:a9:60:15:8f:79:08:ec:23:56:8d:a0:5d:
         c2:18:6e:9e:ed:13:96:8a:54:a4:80:48:44:5c:f8:ff:b4:04:
         fd:cb:46:5c:16:e8:7a:0a:bf:9e:67:84:e0:aa:1a:f1:df:9f:
         a4:76:59:cd:03:88:4d:29:26:ba:e6:e5:8f:51:f6:bb:44:53:
         f4:a8:a2:d2:6b:f9:ff:da:c9:d4:5f:d6:b9:04:1a:23:b5:25:
         8b:d6:fc:87:4a:80:04:4f:5b:96:79:2e:fc:ca:1d:e4:36:83:
         51:3c:2f:65:44:03:b8:02:08:4b:11:50:1e:ac:43:62:43:71:
         0b:47:2b:e6:f2:f8:41:a7:c6:91:6d:ea:27:d2:4a:ca:b2:6b:
         50:33:34:7f:04:52:23:4a:35:57:f7:7e:64:9e:54:88:96:9e:
         cc:af:41:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:59:47 2026 by rpki-client