Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
File:                     YdOddLF-aR3RsFIhxgmMr17pOjY.mft (raw, json)
Hash identifier:          yUUCIZSu0BBtDmWV46Jsf5uj68EinDVzhTFpKN306Y4=
Subject key identifier:   15:11:88:D2:E9:0F:C1:F8:6E:61:E2:F3:AF:EF:EA:E9:BD:04:47:E9
Authority key identifier: 61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36
Certificate issuer:       /CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
Certificate serial:       019F8FB539FCFA1BCE96B0C5D60D3FBEF83B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
Manifest number:          1491
Signing time:             Thu 23 Jul 2026 16:00:46 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:46 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:46 +0000
Files and hashes:         1: 0OOhZQIpq6dXwSrbl0KaN4bQBwk.roa (hash: z5lcUbMXKGaRM5S0Zeu6WP6amOKl5X2nXO5t7H9TCbI=)
                          2: YdOddLF-aR3RsFIhxgmMr17pOjY.crl (hash: ZHQTpPgjZJ87WnlEJtiCRmaGbNsqkb8h59Gj+kaXYEo=)
                          3: r8W-JPeHlAiFCJwWv-YMAOVztvA.asa (hash: k63Cqync/EGh92kwaNFltDkZGtDaRvYKfq5QI6GDv7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:39:fc:fa:1b:ce:96:b0:c5:d6:0d:3f:be:f8:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
        Validity
            Not Before: Jul 23 16:00:46 2026 GMT
            Not After : Jul 24 16:00:46 2026 GMT
        Subject: CN=151188d2e90fc1f86e61e2f3afefeae9bd0447e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:68:9a:c8:25:1c:05:8a:c2:a2:4c:59:29:47:
                    8e:3e:a2:4f:ac:74:a4:05:05:a8:19:f1:74:d9:cd:
                    58:1f:db:6f:39:c1:7d:93:92:24:ea:08:f3:0e:60:
                    40:1e:e6:f7:9f:00:25:1d:87:83:24:7b:53:6c:1e:
                    02:1c:91:0e:b2:68:13:90:8f:af:cd:42:d9:45:c9:
                    15:e4:73:d6:a2:cf:34:33:bf:22:7f:fd:02:16:a5:
                    32:cd:ab:24:c1:48:d0:8d:11:f5:fe:bf:7a:b2:5e:
                    ff:ec:6e:23:c6:64:49:25:2d:98:f4:f9:36:eb:74:
                    32:4d:21:af:ad:22:2d:5a:c3:29:5b:21:d1:c3:76:
                    bb:4a:4d:76:1b:d5:82:62:b7:ee:f1:e3:7b:62:e9:
                    a7:23:9c:84:77:b7:e9:59:2d:14:72:81:44:8e:23:
                    52:0a:8c:69:68:fd:e0:bc:87:cf:51:4c:a8:6e:f0:
                    b8:df:1b:81:17:a1:9c:8d:28:da:49:66:c1:a9:05:
                    93:85:67:a2:f3:2a:63:7c:55:0a:fc:f2:38:04:9d:
                    09:93:17:2b:95:7e:80:7e:24:c5:2d:7f:cf:2c:ea:
                    d7:cc:5d:c0:86:7b:b7:34:68:cf:63:6b:ce:3a:51:
                    9f:f3:af:66:8c:ed:b2:59:dc:a5:c1:61:1d:1d:3b:
                    b6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:11:88:D2:E9:0F:C1:F8:6E:61:E2:F3:AF:EF:EA:E9:BD:04:47:E9
            X509v3 Authority Key Identifier:
                keyid:61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:27:53:9f:02:c7:9c:be:c7:4a:86:65:de:fa:db:07:d4:db:
         53:1c:26:3f:18:08:8d:65:e7:62:79:b6:d8:bc:1a:49:2e:e7:
         e7:1d:8d:89:ee:6b:60:0a:0d:4b:c4:85:51:a2:8e:64:b7:e1:
         54:39:1d:f1:a3:97:c9:b6:aa:64:2b:9e:ef:3a:d3:13:95:45:
         ac:21:22:ab:78:76:12:1f:8f:3b:7b:2f:67:80:3b:f8:a3:55:
         0a:ce:b1:a7:85:d0:76:c8:df:47:74:05:7f:32:65:02:65:78:
         d4:e4:e8:7e:b8:8d:49:3c:46:4b:90:3f:45:b4:ec:29:cf:eb:
         67:fd:80:c9:5e:cf:a8:11:ff:e1:12:62:8b:f8:28:fa:5d:6a:
         a2:0e:45:de:70:64:2b:ef:21:23:dc:65:3d:78:2d:62:a3:bb:
         0b:37:e7:62:8a:06:b0:c2:30:d2:13:e0:f2:ff:9d:42:ae:21:
         57:48:e3:48:be:22:c5:8b:a4:07:3e:4e:e4:bc:87:ef:fb:53:
         be:c0:b6:d1:2d:ce:90:30:d6:f2:3b:76:e8:f5:e9:54:65:1a:
         8f:36:ef:27:78:ed:20:b2:95:b3:d8:cc:ff:21:77:fd:b1:bf:
         3c:65:63:d3:05:43:02:4e:71:b9:12:f4:dc:20:c3:bf:bf:9b:
         e2:7b:70:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:27 2026 by rpki-client