Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/6a2d87-e53d-49bb-be01-60aad3db3e38/1/yYPuPVHGojyZCacJi4Z41cjf7O0.mft
File:                     yYPuPVHGojyZCacJi4Z41cjf7O0.mft (raw, json)
Hash identifier:          0hBYVdhxNRQ9iuWv0AVL3Laxew4P+c4ZSnwVw3+s8vk=
Subject key identifier:   D0:EB:E8:85:FB:FF:86:C2:F6:72:3D:B1:CD:4D:19:A1:3E:B3:D4:0A
Authority key identifier: C9:83:EE:3D:51:C6:A2:3C:99:09:A7:09:8B:86:78:D5:C8:DF:EC:ED
Certificate issuer:       /CN=c983ee3d51c6a23c9909a7098b8678d5c8dfeced
Certificate serial:       01A0D682488DCB61152DB04B2B9F0D635381
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYPuPVHGojyZCacJi4Z41cjf7O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/6a2d87-e53d-49bb-be01-60aad3db3e38/1/yYPuPVHGojyZCacJi4Z41cjf7O0.mft
Manifest number:          69
Signing time:             Fri 25 Sep 2026 03:00:57 +0000
Manifest this update:     Fri 25 Sep 2026 03:00:57 +0000
Manifest next update:     Sat 26 Sep 2026 03:00:57 +0000
Files and hashes:         1: eDcSlxP7XiXaAiDLRSTct9MD2zg.roa (hash: QmP1HE0WxKhN31L+VXAQfz3t8ci7ROFl6oUrHnBNHmY=)
                          2: yYPuPVHGojyZCacJi4Z41cjf7O0.crl (hash: GxIcr3p0naE4TWB3QIhLo6a1Pw00s/FX05e/h79iOos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/6a2d87-e53d-49bb-be01-60aad3db3e38/1/yYPuPVHGojyZCacJi4Z41cjf7O0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/6a2d87-e53d-49bb-be01-60aad3db3e38/1/yYPuPVHGojyZCacJi4Z41cjf7O0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYPuPVHGojyZCacJi4Z41cjf7O0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 03:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:82:48:8d:cb:61:15:2d:b0:4b:2b:9f:0d:63:53:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c983ee3d51c6a23c9909a7098b8678d5c8dfeced
        Validity
            Not Before: Sep 25 03:00:57 2026 GMT
            Not After : Sep 26 03:00:57 2026 GMT
        Subject: CN=d0ebe885fbff86c2f6723db1cd4d19a13eb3d40a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8f:b1:e5:14:fe:70:06:58:91:5c:88:23:6a:
                    76:05:3f:4a:62:30:19:15:16:08:57:24:3e:85:70:
                    74:12:c9:5f:65:09:79:c4:19:80:0f:b4:19:3b:5c:
                    f7:54:6d:44:c5:93:24:a0:be:65:71:ec:27:10:8a:
                    63:84:ca:66:cc:9b:ab:bd:9b:77:c3:a3:d6:bd:08:
                    37:60:31:f7:6e:b8:6b:a1:66:06:e7:9e:88:e3:94:
                    1d:87:64:2a:55:2e:a8:64:ff:ef:47:61:71:22:c7:
                    61:d1:36:bd:e1:b8:e0:99:d5:e8:c6:0e:67:b5:c5:
                    64:0b:a6:6d:46:ea:4f:ad:e4:16:f5:a2:a0:62:da:
                    d6:9f:1b:09:84:b2:2e:cb:25:1d:66:7a:7b:e5:36:
                    05:3e:2b:97:45:c8:7a:bd:6b:05:62:b0:7f:59:68:
                    92:a4:c4:b6:b6:5d:87:c4:26:23:88:d1:a2:80:37:
                    85:4f:30:21:ca:40:d4:f3:aa:78:4c:49:fe:a2:6a:
                    35:92:eb:e9:b0:2e:66:db:51:c3:b8:06:27:2c:39:
                    c2:73:8d:01:11:e6:70:c8:c5:3f:20:86:1c:2b:99:
                    28:de:b5:ba:f0:0c:ee:20:3a:df:ab:3f:29:bc:ed:
                    36:c4:85:41:8a:c7:1c:a5:da:3e:54:a8:20:c9:22:
                    bc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EB:E8:85:FB:FF:86:C2:F6:72:3D:B1:CD:4D:19:A1:3E:B3:D4:0A
            X509v3 Authority Key Identifier:
                keyid:C9:83:EE:3D:51:C6:A2:3C:99:09:A7:09:8B:86:78:D5:C8:DF:EC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYPuPVHGojyZCacJi4Z41cjf7O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a2d87-e53d-49bb-be01-60aad3db3e38/1/yYPuPVHGojyZCacJi4Z41cjf7O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a2d87-e53d-49bb-be01-60aad3db3e38/1/yYPuPVHGojyZCacJi4Z41cjf7O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:b4:5c:bc:97:33:fd:d1:78:8c:20:1e:cb:90:76:0c:0e:63:
         ad:c0:78:f5:8d:24:48:94:1c:4a:2d:4e:23:38:71:11:83:79:
         17:23:9a:4b:ae:7e:03:34:c0:2a:57:d2:68:dc:7d:d9:e9:93:
         82:9c:f5:c9:57:cf:fb:8b:b4:17:6e:58:f9:f1:1f:5e:77:55:
         27:61:12:10:f6:3c:89:45:6b:79:b8:44:f1:a3:a2:49:84:a3:
         5c:19:ad:32:27:b7:93:c1:73:5a:d0:b2:d0:eb:18:19:4e:91:
         e8:b1:5b:4a:65:26:79:f2:c6:36:a2:74:cf:6d:6d:57:15:34:
         61:d7:7e:bd:a6:72:2e:d4:b3:22:3b:01:6d:d2:15:fd:7c:63:
         ad:a3:3a:56:24:0b:0c:ed:4d:fd:51:62:25:3c:24:f0:bb:d7:
         5a:fe:cf:a3:8c:56:91:d3:4b:90:0d:6f:a5:91:81:cc:24:19:
         63:06:d7:20:0a:f2:78:95:26:62:5c:b2:a7:6c:99:ce:b8:41:
         4e:28:19:4c:0e:28:d0:18:cf:bb:52:68:c6:79:8d:3b:55:c8:
         f9:77:31:18:41:48:23:ad:f3:0b:7c:3e:b4:bc:95:d0:13:59:
         99:8b:cf:c5:96:53:ad:48:ac:85:c9:74:ad:de:25:42:00:ea:
         82:14:5a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:58:37 2026 by rpki-client