Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
File:                     yQ7dEObZBiIVv9ZORbO_imuZY3k.mft (raw, json)
Hash identifier:          J4tKgcI1q5/hg2h5nup0UiaoSdTpDeumGBgi5rPS+HM=
Subject key identifier:   89:BC:D7:C7:4C:15:6F:21:9D:29:FD:2F:D8:04:B3:4F:7D:7B:01:11
Authority key identifier: C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79
Certificate issuer:       /CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
Certificate serial:       019E1DFE47F7BCC169A804E239A1EE6D4EB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
Manifest number:          075A
Signing time:             Tue 12 May 2026 21:01:04 +0000
Manifest this update:     Tue 12 May 2026 21:01:04 +0000
Manifest next update:     Wed 13 May 2026 21:01:04 +0000
Files and hashes:         1: 97B8Hc4bCQZgRuJkPCMl4qPb1Ok.roa (hash: xJ7Id6kjvXsULsQ/zceu4XIQnNvHcYudEa21JYWOH88=)
                          2: yQ7dEObZBiIVv9ZORbO_imuZY3k.crl (hash: 5CzdoW1d+tkGp9BP/WGHkbOGe7UUBxcAIwsSMbkgNxo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:47:f7:bc:c1:69:a8:04:e2:39:a1:ee:6d:4e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
        Validity
            Not Before: May 12 21:01:04 2026 GMT
            Not After : May 13 21:01:04 2026 GMT
        Subject: CN=89bcd7c74c156f219d29fd2fd804b34f7d7b0111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:16:9d:0f:7e:bf:55:6e:69:29:38:6e:ce:88:
                    c8:a5:04:12:0d:33:81:09:a8:6e:80:68:63:03:87:
                    49:8c:be:c7:a4:05:b1:3b:d8:1e:2d:c6:d4:7a:7a:
                    11:2c:10:2b:b3:4c:b5:9b:56:a0:95:d9:32:79:b5:
                    c4:e0:75:5d:53:10:a9:9d:b7:79:79:a4:7b:35:05:
                    d4:3d:0f:c3:e0:57:98:0b:17:28:a0:bc:03:c7:30:
                    cc:59:6e:ae:6d:fa:8c:c2:03:ec:1a:0f:9e:f4:9b:
                    24:4e:72:06:e7:70:8a:02:65:7c:91:8a:22:5c:b1:
                    d4:af:5c:ab:d9:d8:ee:cf:6e:a6:f5:ef:85:d1:d6:
                    52:5c:24:da:04:ee:a6:8d:32:44:b7:c7:52:85:2b:
                    2d:31:bd:1a:cd:9f:42:10:e8:9b:67:4a:ab:df:a7:
                    14:83:db:ab:0e:58:3b:4a:34:cf:c5:ea:b3:2e:a4:
                    1d:74:10:e4:d7:f2:54:4e:a4:e2:64:e5:5f:ee:75:
                    63:df:ce:7d:66:e0:5a:1f:49:66:6a:c1:0f:bc:65:
                    bb:75:95:ad:67:76:77:96:07:eb:ef:a7:12:94:ac:
                    2c:b5:c9:4a:55:b5:74:7f:9e:b7:83:cf:ed:94:ac:
                    18:2f:c0:67:15:59:70:78:71:1a:3c:d7:ab:ae:6a:
                    76:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BC:D7:C7:4C:15:6F:21:9D:29:FD:2F:D8:04:B3:4F:7D:7B:01:11
            X509v3 Authority Key Identifier:
                keyid:C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:9c:2f:a6:30:a0:53:12:ca:2a:ac:9f:5b:8f:93:ad:2e:11:
         f3:5d:9d:98:33:b8:f0:5f:f7:1c:36:38:14:4d:b3:d4:80:af:
         6d:6b:1f:6d:ed:05:2d:f2:3b:aa:9f:92:1b:70:ee:1d:08:8c:
         e2:35:82:98:2f:95:c7:02:74:7e:32:ec:5c:f8:28:de:b5:65:
         70:84:bc:f6:0b:fe:80:31:78:3f:87:91:bd:3c:0f:b5:6c:44:
         2c:07:fa:62:be:eb:01:5c:f0:e3:96:82:bf:39:f7:20:f6:38:
         10:ba:6f:c9:64:27:3e:90:6e:80:93:72:7c:68:70:12:1b:93:
         f5:78:a7:55:68:81:1b:40:36:1d:d8:f4:f5:f2:e2:c1:98:a8:
         5c:35:79:4c:cf:b3:57:f2:57:36:40:cf:dc:e2:34:8a:ee:7a:
         7d:3e:7a:4d:ab:61:c3:20:e1:7b:fe:b9:74:e7:0f:4d:ff:24:
         a7:2c:0c:c2:b8:a0:c0:2d:b6:4c:f2:ab:1f:13:77:f4:b4:31:
         f8:1b:11:43:92:34:d3:59:5f:67:08:0e:11:b0:1e:76:01:91:
         51:e8:fd:18:b6:a5:83:cf:fd:d9:a7:d2:a2:17:05:cd:bc:1e:
         5a:9b:d0:45:3e:6a:51:1e:05:f5:d1:f5:37:65:83:8e:51:ed:
         91:fa:4a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:32:15 2026 by rpki-client