Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
File:                     y-PaNYKiKDDsTmdUfnX6O52iCyM.mft (raw, json)
Hash identifier:          sFktsUW8onsIEHJLj2ZY6Dw0p0dQG1fPaBlkcBFGrwA=
Subject key identifier:   EE:CF:9D:37:E1:40:A4:F3:13:43:E3:85:89:21:A7:20:1C:32:16:AF
Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
Certificate issuer:       /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Certificate serial:       01A1DE39AB03EEBF01B502DC9AC392D735CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
Manifest number:          0D0A
Signing time:             Sun 15 Nov 2026 08:01:23 +0000
Manifest this update:     Sun 15 Nov 2026 08:01:23 +0000
Manifest next update:     Mon 16 Nov 2026 08:01:23 +0000
Files and hashes:         1: Ptns1aj1-mp6wXpfkNSnzIUQg2M.roa (hash: YJhTXg15y7lXDt6el4G9uRQ6GoxJANZucXloZAXI/Mc=)
                          2: SyLOIp0kgjoWQcew30ARcomgpA8.roa (hash: tw+paFoNwVB8IkQny5dTEcgX/0463MTe3dsdhAVbLtI=)
                          3: YWG5ON1b6X3BqwXFFTAP2PK_wGs.roa (hash: CcEaIDcXc7s7X0W0T9ehF2loB+l3cG3LCSPSSnUIhJc=)
                          4: lSJi95jp0I1-ibaWMd_zn9diC_Y.roa (hash: ODHEc3bs//C5ArR+d/PUUYKnyXgjhKhyolbB69ZsTvE=)
                          5: mGTXHUzlo8jZOHFUmBeN6FRI7Bk.roa (hash: 2bfzL2d7ZwGUW9cvd/ehAd7HuPDH/Eytzu1KccPbTks=)
                          6: y-PaNYKiKDDsTmdUfnX6O52iCyM.crl (hash: hzj/okFFEjFr3bHTPFIXaeMKnfuuzryw+YsDjRZvciw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:39:ab:03:ee:bf:01:b5:02:dc:9a:c3:92:d7:35:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
        Validity
            Not Before: Nov 15 08:01:23 2026 GMT
            Not After : Nov 16 08:01:23 2026 GMT
        Subject: CN=eecf9d37e140a4f31343e3858921a7201c3216af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f9:57:29:4a:df:ac:00:ee:b6:ef:6f:82:ac:
                    e7:6c:17:36:84:fb:95:c7:01:82:20:f6:70:07:80:
                    0f:a8:3c:03:80:b7:99:88:d4:ba:3c:ae:a3:7f:e6:
                    e5:80:34:21:6f:6b:9a:42:84:39:ef:7f:3a:f4:ba:
                    04:82:cd:16:0d:a2:c8:6a:ee:64:6b:a6:48:07:85:
                    d6:57:fb:4e:12:c9:18:1a:76:7c:d9:6e:48:85:41:
                    4d:ea:04:09:46:73:9f:b8:88:65:51:e5:ff:7b:3a:
                    fd:64:e3:8b:3d:d1:03:e9:f4:d8:e8:bd:ec:44:91:
                    35:9a:b3:6c:eb:e9:1e:06:d2:b7:26:53:6e:da:bd:
                    da:89:2d:0e:ff:31:01:d0:b9:dd:6d:a7:f6:e3:9e:
                    5d:b5:06:f0:90:0b:48:05:36:82:5a:20:a6:ff:7a:
                    f8:c6:b3:6f:06:78:31:89:b3:e9:dd:e0:5b:71:6f:
                    1c:fe:69:74:df:9e:d6:33:8a:19:b8:c3:8f:6c:f9:
                    3c:bd:3e:5d:03:53:06:95:e2:da:76:d2:4c:d1:b9:
                    48:c0:09:04:92:0f:f4:92:d4:ba:a3:6d:0e:74:39:
                    97:f2:5e:32:17:bb:79:96:ad:0d:c6:76:51:eb:a7:
                    03:e1:0c:3b:8d:0a:92:7c:e0:03:8f:29:ad:90:bc:
                    bd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CF:9D:37:E1:40:A4:F3:13:43:E3:85:89:21:A7:20:1C:32:16:AF
            X509v3 Authority Key Identifier:
                keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:8f:4e:82:a3:9f:60:d9:7e:45:46:5e:e1:0b:b9:81:20:37:
         60:d5:e0:cf:ca:41:4b:aa:88:ef:13:45:ed:0c:0c:ae:7e:dd:
         ac:96:e1:8a:78:da:5f:ee:90:5f:e1:94:ce:ba:b1:de:ca:b1:
         14:4e:5c:aa:88:f6:14:81:9d:bf:0b:24:88:60:48:f2:0b:1a:
         bc:3a:bf:c5:99:12:c6:de:af:58:6e:18:2e:ab:44:c5:cd:f4:
         76:84:60:da:f9:b0:b6:ac:68:1f:81:09:88:a0:c9:86:62:e8:
         10:dc:78:82:08:1f:97:07:82:09:ba:74:46:1b:e5:64:b1:23:
         99:35:68:06:ff:d6:1c:b9:32:90:de:38:9c:59:6a:6a:38:7b:
         38:79:7e:2a:ea:5b:4f:85:4d:5d:7a:b8:f3:e8:75:6b:13:de:
         9a:1b:2b:60:b4:95:43:3a:68:6b:b6:b9:0a:63:18:ce:b8:c1:
         4a:f6:d3:c8:ee:49:c8:fe:77:27:6f:ae:dc:a8:1f:6c:9c:0c:
         9f:4a:c2:2e:95:19:38:fc:30:b4:a4:df:e4:99:03:0f:d2:53:
         c8:4d:a7:48:62:78:5c:60:5b:37:25:9e:e4:38:f1:5a:e0:0f:
         b3:ac:cc:3a:65:2c:bd:b5:de:93:f9:ca:18:1a:aa:2c:e1:75:
         3f:f2:79:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:52:45 2026 by rpki-client