Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
File:                     YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft (raw, json)
Hash identifier:          vWVsGDEGNtPQtdf4vyd8LsG8NKx9cLZBwFTjh1qMWP8=
Subject key identifier:   30:18:6C:22:0F:51:D1:E4:FF:FE:3C:36:01:92:8C:11:80:77:52:4C
Authority key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
Certificate issuer:       /CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Certificate serial:       019E1EDA700D70EB927FDF213D409C6DF56E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
Manifest number:          0D47
Signing time:             Wed 13 May 2026 01:01:32 +0000
Manifest this update:     Wed 13 May 2026 01:01:32 +0000
Manifest next update:     Thu 14 May 2026 01:01:32 +0000
Files and hashes:         1: 8y6CSuTPq3UxhTyIPDkLzey39TU.roa (hash: d0MlsOE7YxSPTJhFI0bSHyZQVZmMtG9CLdrDZmVT9Fg=)
                          2: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl (hash: YHY/P9lk0JpzlcXeB9SvqR+EjJhU5O/mogfqlM/xx1k=)
                          3: gEzEJ6XiEvkU7WE0W5L45VqOyXU.roa (hash: M/qvtMRQ3XJJlTOVAUv0L9u5CgWgEkXMKqMCgmgXNVM=)
                          4: uiEPOruYyynMnv0DkemAao-QO_M.roa (hash: zwZ/t6zJRBJasigAc2EM1YRTTVM6B1E25xzsECcPnU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:70:0d:70:eb:92:7f:df:21:3d:40:9c:6d:f5:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
        Validity
            Not Before: May 13 01:01:32 2026 GMT
            Not After : May 14 01:01:32 2026 GMT
        Subject: CN=30186c220f51d1e4fffe3c3601928c118077524c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:04:14:e7:3e:51:0d:7b:b9:57:3b:0e:ca:8b:
                    43:a3:10:aa:b7:ef:79:b2:12:83:2c:4f:53:57:c2:
                    e2:3a:2d:ae:ee:31:f7:03:35:d7:31:7e:89:b3:1c:
                    2c:45:fd:ab:c1:bc:f4:6a:1a:77:52:b5:3b:15:77:
                    3a:78:b0:73:75:f3:c9:16:b2:48:25:de:97:2f:9e:
                    6f:9f:e2:39:d9:6d:22:05:d9:8f:1c:c6:d4:ce:cd:
                    17:09:3d:f1:3c:59:c8:b7:16:d3:e7:08:d2:5a:c9:
                    5a:77:a0:21:30:9b:6e:5b:5c:2c:82:63:c5:af:4a:
                    a7:51:88:c9:94:b0:c8:ff:e3:64:c2:64:93:ed:76:
                    bd:b1:6b:81:a4:f0:23:87:1e:3d:f6:cf:5b:6a:58:
                    44:6e:cb:94:58:b2:b0:53:10:f4:f7:56:be:04:bc:
                    4b:d9:cb:b6:2f:f2:ae:df:46:6d:02:9b:d0:1a:10:
                    20:fa:72:6e:2e:6b:f0:90:9d:bc:cb:27:51:d7:12:
                    d4:6f:47:47:a0:f5:57:4e:22:b5:59:12:fd:ae:ab:
                    f2:29:61:5c:d5:39:5d:86:95:1c:ea:08:cf:d2:35:
                    7a:2b:95:e8:81:46:87:69:bd:b9:2f:c3:44:47:be:
                    3c:72:0d:a0:c0:e7:d8:44:3c:78:aa:a0:49:36:61:
                    37:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:18:6C:22:0F:51:D1:E4:FF:FE:3C:36:01:92:8C:11:80:77:52:4C
            X509v3 Authority Key Identifier:
                keyid:60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:35:e6:eb:c9:06:26:18:75:31:f2:e6:b7:4f:4d:1b:74:cd:
         1e:96:25:b1:48:d9:3c:8f:b6:15:d1:e8:d9:8e:3d:b1:81:33:
         d9:b9:74:ec:fb:de:fb:3d:a8:2b:76:6b:20:f7:4c:cc:53:63:
         18:63:d9:4c:43:c4:5e:a5:8d:b5:06:18:06:b2:bd:eb:9c:20:
         bb:7f:df:cd:8f:24:ec:ab:ee:9d:f0:98:27:69:57:20:7d:67:
         e2:c0:41:c6:af:8b:1e:98:cf:1d:ac:5a:7d:a0:1e:43:9b:c4:
         47:ee:78:a2:33:aa:f4:59:ca:43:db:65:36:6d:9b:b8:03:2c:
         f1:85:82:09:ab:25:4a:a6:99:75:c0:3a:0c:eb:cc:47:c6:2b:
         62:16:88:5c:33:fc:82:e9:29:0c:cc:8d:fe:20:de:25:52:b4:
         39:8c:39:6a:59:ca:02:43:6d:0c:f5:f5:90:65:d7:a9:04:6a:
         6c:c8:ff:36:a4:cf:4d:41:9e:0c:48:00:b1:cf:ff:6b:a2:02:
         b1:26:8b:a0:d6:23:8c:1a:3f:dc:ca:32:b5:7f:55:5d:ca:54:
         49:16:eb:e7:bd:59:8b:fd:97:87:1e:7f:ef:8d:b8:1e:05:e2:
         80:77:a0:29:64:21:f5:b8:b4:d5:fa:20:1c:af:0f:22:b2:ba:
         94:ba:43:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:35:35 2026 by rpki-client