Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft
File:                     Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft (raw, json)
Hash identifier:          wimCKaHvIQfDi6KOE+U8irfUCcDiYuk//2HDotk9TAU=
Subject key identifier:   BC:48:47:7A:42:AB:2B:99:34:B6:74:3A:6D:E5:EE:44:ED:04:99:83
Authority key identifier: 62:BB:1C:6E:5E:88:65:88:CD:47:61:6B:AC:BD:7C:CB:64:AB:F4:78
Certificate issuer:       /CN=62bb1c6e5e886588cd47616bacbd7ccb64abf478
Certificate serial:       019D254CE2D855316A95D7151AB0EFD046C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft
Manifest number:          1885
Signing time:             Wed 25 Mar 2026 14:01:28 +0000
Manifest this update:     Wed 25 Mar 2026 14:01:28 +0000
Manifest next update:     Thu 26 Mar 2026 14:01:28 +0000
Files and hashes:         1: Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl (hash: QLxONoZZJyT1q4hjOCI7mF4IpYJTouMZ0YrKw4zeTz0=)
                          2: inCR3eFEyTL7jghyDh1WvEPXeKA.roa (hash: ejthjyHSduvput3CocjdA0Eo0asNaU9wCge8BSjS0K0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 14:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:4c:e2:d8:55:31:6a:95:d7:15:1a:b0:ef:d0:46:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62bb1c6e5e886588cd47616bacbd7ccb64abf478
        Validity
            Not Before: Mar 25 14:01:28 2026 GMT
            Not After : Mar 26 14:01:28 2026 GMT
        Subject: CN=bc48477a42ab2b9934b6743a6de5ee44ed049983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:24:5c:d0:7e:44:2a:83:33:2e:64:ca:8b:80:
                    2c:83:e9:bd:5e:66:85:67:6c:77:9c:95:39:04:31:
                    fa:aa:27:66:37:93:1a:c4:fd:12:2a:17:9a:b0:b0:
                    4f:86:55:73:58:ab:02:ec:0a:4e:5c:99:15:2d:d7:
                    43:f2:49:dd:f2:cb:7c:3f:93:9f:60:33:69:07:ab:
                    0d:5d:b1:6e:25:ee:07:0f:14:7e:b6:2a:7a:2d:68:
                    31:4e:f5:70:93:d6:52:29:34:84:08:76:a1:95:80:
                    13:2b:4b:51:39:b4:2c:34:29:9a:80:b6:ce:90:b9:
                    c8:f7:52:15:c3:16:5b:90:d5:b1:35:6c:86:95:02:
                    e9:e6:81:5e:eb:58:9a:c4:5c:ce:99:80:91:59:f3:
                    5b:8e:f0:16:e8:f9:6b:a4:02:e3:04:0f:d0:da:15:
                    71:9a:85:96:95:c7:36:70:f3:3b:28:48:5b:26:ef:
                    9a:d8:bc:59:df:f1:19:a9:02:7b:3f:95:99:8b:a1:
                    0b:c4:11:8c:ff:7a:61:43:c6:e7:13:98:7f:5e:22:
                    c8:14:72:6d:1d:be:b2:c8:1d:c7:68:41:e6:19:33:
                    27:c6:f4:94:05:c0:7c:8b:e2:ba:af:8a:c5:30:53:
                    4c:56:6b:d1:7f:e0:d0:04:f8:c6:46:31:ca:53:d0:
                    23:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:48:47:7A:42:AB:2B:99:34:B6:74:3A:6D:E5:EE:44:ED:04:99:83
            X509v3 Authority Key Identifier:
                keyid:62:BB:1C:6E:5E:88:65:88:CD:47:61:6B:AC:BD:7C:CB:64:AB:F4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ef:13:3f:3a:05:e5:d0:ca:fb:5b:74:f6:68:46:05:d0:e2:
         49:3f:c0:ef:e8:4d:00:9f:f2:90:85:70:cf:d1:bb:c3:e3:f6:
         8d:29:e5:0a:9e:1a:1a:bf:a1:ed:9c:01:f9:68:79:52:32:e4:
         23:0d:57:b5:30:77:06:28:93:eb:df:66:20:db:43:38:cb:cc:
         34:9e:20:7f:64:6b:a1:4f:20:ae:64:6b:3a:e3:06:80:73:35:
         cb:53:2c:ad:16:1a:d2:78:b3:52:3a:16:75:03:f7:ad:d0:62:
         39:57:29:80:d6:c9:c8:06:3a:27:7d:9b:06:33:7e:20:8b:c2:
         ad:16:ba:9b:7e:4a:14:85:a9:0b:ec:3a:3c:5e:0c:10:95:e0:
         30:f6:49:df:33:75:f4:b2:78:ef:58:9c:b4:dc:59:91:c5:a4:
         31:ff:75:a9:c4:fa:9b:81:c6:c5:9e:c8:32:38:3e:79:91:c3:
         7b:3a:9c:45:39:7d:e4:b4:3b:34:6f:cc:f7:96:89:7a:64:8f:
         a9:f0:db:8f:82:52:5a:a4:fc:6c:34:b2:0c:fa:96:94:f9:e6:
         6c:5f:85:ed:64:8f:d2:1b:65:a1:64:bb:c2:0a:11:30:d8:e6:
         7d:f8:cf:16:f2:41:f5:f5:b3:ed:96:ba:3c:22:e0:10:2d:e4:
         0f:0a:73:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lTOLYVTFqldcVGrDv0EbIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYmIxYzZlNWU4ODY1ODhjZDQ3NjE2YmFjYmQ3Y2NiNjRh
YmY0NzgwHhcNMjYwMzI1MTQwMTI4WhcNMjYwMzI2MTQwMTI4WjAzMTEwLwYDVQQD
EyhiYzQ4NDc3YTQyYWIyYjk5MzRiNjc0M2E2ZGU1ZWU0NGVkMDQ5OTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyRc0H5EKoMzLmTKi4Asg+m9XmaF
Z2x3nJU5BDH6qidmN5MaxP0SKheasLBPhlVzWKsC7ApOXJkVLddD8knd8st8P5Of
YDNpB6sNXbFuJe4HDxR+tip6LWgxTvVwk9ZSKTSECHahlYATK0tRObQsNCmagLbO
kLnI91IVwxZbkNWxNWyGlQLp5oFe61iaxFzOmYCRWfNbjvAW6PlrpALjBA/Q2hVx
moWWlcc2cPM7KEhbJu+a2LxZ3/EZqQJ7P5WZi6ELxBGM/3phQ8bnE5h/XiLIFHJt
Hb6yyB3HaEHmGTMnxvSUBcB8i+K6r4rFMFNMVmvRf+DQBPjGRjHKU9AjVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxIR3pCqyuZNLZ0Om3l7kTtBJmDMB8GA1UdIwQY
MBaAFGK7HG5eiGWIzUdha6y9fMtkq/R4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXJzY2JsNklaWWpOUjJGcnJMMTh5MlNyOUhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85Zjk0NDAtNTkxYi00NGQzLTg3ZDYt
N2M0NDViM2Y5ZmMzLzEvWXJzY2JsNklaWWpOUjJGcnJMMTh5MlNyOUhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85Zjk0NDAtNTkxYi00NGQzLTg3ZDYtN2M0NDViM2Y5ZmMz
LzEvWXJzY2JsNklaWWpOUjJGcnJMMTh5MlNyOUhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+8TPzoF
5dDK+1t09mhGBdDiST/A7+hNAJ/ykIVwz9G7w+P2jSnlCp4aGr+h7ZwB+Wh5UjLk
Iw1XtTB3BiiT699mINtDOMvMNJ4gf2RroU8grmRrOuMGgHM1y1MsrRYa0nizUjoW
dQP3rdBiOVcpgNbJyAY6J32bBjN+IIvCrRa6m35KFIWpC+w6PF4MEJXgMPZJ3zN1
9LJ471ictNxZkcWkMf91qcT6m4HGxZ7IMjg+eZHDezqcRTl95LQ7NG/M95aJemSP
qfDbj4JSWqT8bDSyDPqWlPnmbF+F7WSP0htloWS7wgoRMNjmffjPFvJB9fWz7Za6
PCLgEC3kDwpzrg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:55 2026 by rpki-client