Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
File:                     YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft (raw, json)
Hash identifier:          7e3Db31qDJLokI/QP3Q14tYC21I8oKqfk/CDdDyBmVY=
Subject key identifier:   D8:0F:C1:29:27:85:C9:FB:31:3B:26:CB:18:73:64:AB:52:37:7D:28
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Certificate issuer:       /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial:       019F954A3589784D78837F7E1313599B782C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
Manifest number:          0A2F
Signing time:             Fri 24 Jul 2026 18:01:36 +0000
Manifest this update:     Fri 24 Jul 2026 18:01:36 +0000
Manifest next update:     Sat 25 Jul 2026 18:01:36 +0000
Files and hashes:         1: 1-oc31O5yGfJm_mzZWVg8lkL2Wxc.roa (hash: Zj2r9ATg5ynR2EMFecfZew5Um/8F+DW2YUnerFrqrJY=)
                          2: YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl (hash: rnVW2eV0W0bni97gc5HHP4DediOWWeGmOo8rZDYEdgM=)
                          3: _3UUxWfdIKjZ94RP_R__5_MA69o.roa (hash: xEub+d4iGHet4J1D7KwTY4kCPRXkdFvIc+V+yAPzmjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:4a:35:89:78:4d:78:83:7f:7e:13:13:59:9b:78:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
        Validity
            Not Before: Jul 24 18:01:36 2026 GMT
            Not After : Jul 25 18:01:36 2026 GMT
        Subject: CN=d80fc1292785c9fb313b26cb187364ab52377d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3c:ba:e8:9d:4d:72:66:12:19:98:d5:f5:57:
                    c9:91:1e:7f:fe:61:65:51:5a:3f:15:35:0d:fc:04:
                    78:54:8e:fa:f5:42:1b:79:c0:10:54:07:8e:1c:ce:
                    56:a7:9d:11:93:06:1e:b1:84:f2:e6:86:3c:2f:00:
                    87:ca:4d:fd:97:41:37:73:4a:64:03:71:36:f1:a2:
                    3d:4d:08:28:29:39:e8:df:ad:93:e4:ca:0b:a6:11:
                    1f:df:65:f0:7e:a3:81:61:88:89:8f:cf:52:3f:d2:
                    16:73:5f:ed:3a:3e:9b:1f:20:8f:80:96:ab:13:45:
                    b2:eb:71:7c:12:8e:f4:39:cf:63:c3:2d:e8:58:d9:
                    5c:01:6c:a0:2d:9a:d7:47:53:54:20:48:b2:a2:3a:
                    ff:05:40:13:d1:28:75:ab:5d:5c:ef:97:e2:fe:9d:
                    24:0c:e6:c4:74:23:c1:6f:b6:55:9b:87:f3:cc:69:
                    78:de:34:f2:93:7b:32:e4:d7:05:26:88:eb:3d:88:
                    cc:05:4c:8e:da:fb:5c:98:cc:07:77:fe:9c:97:88:
                    9a:7b:bb:cb:8c:f8:46:ac:94:03:7c:3e:e2:1c:93:
                    ba:e4:f0:c9:38:ae:c1:51:b3:59:87:1c:0b:1d:60:
                    08:c5:97:ec:9a:c9:a4:15:4f:b8:01:db:12:cb:a0:
                    1a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0F:C1:29:27:85:C9:FB:31:3B:26:CB:18:73:64:AB:52:37:7D:28
            X509v3 Authority Key Identifier:
                keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:08:72:50:6c:9d:61:a8:60:17:95:3c:59:b6:c9:87:cf:d8:
         3a:92:79:5d:cd:1d:40:46:4d:2a:7d:03:d1:58:6a:fe:67:04:
         3a:28:a2:29:47:90:12:73:82:94:02:90:d3:7c:71:9c:93:38:
         4a:b8:ab:15:c8:36:24:20:3f:ae:bc:cc:8e:a1:4b:0f:cd:ad:
         17:73:1c:29:a4:81:a8:4f:72:52:2f:02:cc:ad:1b:bb:12:70:
         52:6e:f3:18:0c:29:40:31:21:ab:b4:94:45:95:cc:86:d1:65:
         61:82:31:78:c1:d5:b4:60:40:2b:66:9b:32:94:ba:4d:81:e7:
         ea:77:af:54:6a:5b:be:cc:17:32:25:29:08:b3:43:e3:65:7e:
         64:c2:54:4d:bc:f1:54:e4:d7:43:81:6d:c3:bd:56:99:a3:d2:
         71:a2:a7:ac:30:9a:c4:e8:61:eb:3d:56:70:dd:37:4f:f1:f3:
         ab:38:34:f5:02:56:23:8b:f6:ba:9d:32:e2:64:fb:7f:36:66:
         28:ae:d3:09:99:e8:4f:57:d7:d3:bf:6a:e9:7c:21:70:bb:f7:
         31:99:52:9a:f7:3e:28:7e:ed:e2:a2:74:3d:0c:00:62:60:4e:
         ea:8d:9f:c3:50:7c:92:bd:4d:06:fa:7b:8c:d6:42:7a:6b:6b:
         3a:df:55:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VSjWJeE14g39+ExNZm3gsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMDgyZDZkM2ExZGM1MDE3OTU3Mzc1MzdjYTc0ZDI3YTgw
MjY1YTIwHhcNMjYwNzI0MTgwMTM2WhcNMjYwNzI1MTgwMTM2WjAzMTEwLwYDVQQD
EyhkODBmYzEyOTI3ODVjOWZiMzEzYjI2Y2IxODczNjRhYjUyMzc3ZDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ty66J1NcmYSGZjV9VfJkR5//mFl
UVo/FTUN/AR4VI769UIbecAQVAeOHM5Wp50RkwYesYTy5oY8LwCHyk39l0E3c0pk
A3E28aI9TQgoKTno362T5MoLphEf32XwfqOBYYiJj89SP9IWc1/tOj6bHyCPgJar
E0Wy63F8Eo70Oc9jwy3oWNlcAWygLZrXR1NUIEiyojr/BUAT0Sh1q11c75fi/p0k
DObEdCPBb7ZVm4fzzGl43jTyk3sy5NcFJojrPYjMBUyO2vtcmMwHd/6cl4iae7vL
jPhGrJQDfD7iHJO65PDJOK7BUbNZhxwLHWAIxZfsmsmkFU+4AdsSy6AaOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgPwSknhcn7MTsmyxhzZKtSN30oMB8GA1UdIwQY
MBaAFGMILW06HcUBeVc3U3ynTSeoAmWiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85N2UxZTItNTY3Zi00MTRlLTliMDMt
YzE4YWQzNmE3YjMwLzEvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85N2UxZTItNTY3Zi00MTRlLTliMDMtYzE4YWQzNmE3YjMw
LzEvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALghyUGyd
YahgF5U8WbbJh8/YOpJ5Xc0dQEZNKn0D0Vhq/mcEOiiiKUeQEnOClAKQ03xxnJM4
SrirFcg2JCA/rrzMjqFLD82tF3McKaSBqE9yUi8CzK0buxJwUm7zGAwpQDEhq7SU
RZXMhtFlYYIxeMHVtGBAK2abMpS6TYHn6nevVGpbvswXMiUpCLND42V+ZMJUTbzx
VOTXQ4Ftw71WmaPScaKnrDCaxOhh6z1WcN03T/Hzqzg09QJWI4v2up0y4mT7fzZm
KK7TCZnoT1fX079q6XwhcLv3MZlSmvc+KH7t4qJ0PQwAYmBO6o2fw1B8kr1NBvp7
jNZCemtrOt9VRw==
-----END CERTIFICATE-----
Generated at Sat Jul 25 04:24:50 2026 by rpki-client