Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
File:                     YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft (raw, json)
Hash identifier:          F0+VTibL+RJScN/mspwoIOKxaK8cijbf/2O16nuVA9A=
Subject key identifier:   85:55:A3:CE:49:AA:47:19:2B:48:07:B6:5D:C2:CF:1A:84:60:F8:A1
Authority key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
Certificate issuer:       /CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Certificate serial:       01A0D804C755FA59B8B0A0134784018E8455
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
Manifest number:          0EB0
Signing time:             Fri 25 Sep 2026 10:03:06 +0000
Manifest this update:     Fri 25 Sep 2026 10:03:06 +0000
Manifest next update:     Sat 26 Sep 2026 10:03:06 +0000
Files and hashes:         1: 8y6CSuTPq3UxhTyIPDkLzey39TU.roa (hash: d0MlsOE7YxSPTJhFI0bSHyZQVZmMtG9CLdrDZmVT9Fg=)
                          2: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl (hash: sBdP4+qTd0EnEqglXDm58MpGMksp+UxLvHR6qHdPomI=)
                          3: gEzEJ6XiEvkU7WE0W5L45VqOyXU.roa (hash: M/qvtMRQ3XJJlTOVAUv0L9u5CgWgEkXMKqMCgmgXNVM=)
                          4: uiEPOruYyynMnv0DkemAao-QO_M.roa (hash: zwZ/t6zJRBJasigAc2EM1YRTTVM6B1E25xzsECcPnU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:04:c7:55:fa:59:b8:b0:a0:13:47:84:01:8e:84:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
        Validity
            Not Before: Sep 25 10:03:06 2026 GMT
            Not After : Sep 26 10:03:06 2026 GMT
        Subject: CN=8555a3ce49aa47192b4807b65dc2cf1a8460f8a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b1:99:0d:88:f2:ce:0a:d1:48:e8:31:02:fd:
                    7c:69:bf:cb:37:a9:6d:d5:fe:d9:a3:18:ea:5d:eb:
                    3e:e7:4b:3f:ed:9c:8a:af:99:94:6e:17:ee:74:30:
                    28:54:63:08:0f:69:e6:95:58:0b:3b:01:8b:48:b4:
                    2b:c9:dd:97:3b:7f:f9:28:86:f8:ba:b5:bc:74:1c:
                    e2:03:35:06:41:ad:d9:02:d9:2e:54:40:1a:c8:0d:
                    67:0d:59:37:9f:fb:9e:a7:09:37:fb:e8:fe:b0:62:
                    24:de:6c:b9:1c:19:42:0e:d5:a8:60:f0:b0:6d:25:
                    2b:a9:56:48:20:45:6e:4b:73:9f:cc:20:a5:58:86:
                    88:8b:3f:d9:72:64:63:20:df:b8:3c:da:70:be:97:
                    ad:41:a9:bc:02:22:28:3e:93:29:29:36:0a:6c:10:
                    41:c3:25:8f:ff:0c:86:7d:42:bc:38:e2:5c:ea:dc:
                    a6:c8:cf:30:8f:6a:2c:2b:78:2f:44:43:3c:29:4d:
                    b3:03:68:c8:f4:65:2a:57:cd:8f:01:a1:4b:b4:e1:
                    94:38:4e:41:89:1e:dc:84:2f:2a:96:eb:a8:2f:a7:
                    df:af:3c:b4:2d:c8:3b:39:d4:76:2e:0e:92:b4:a4:
                    e8:5f:60:45:94:af:b3:25:41:9f:ef:03:e1:8a:97:
                    a0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:55:A3:CE:49:AA:47:19:2B:48:07:B6:5D:C2:CF:1A:84:60:F8:A1
            X509v3 Authority Key Identifier:
                keyid:60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ec:c2:78:15:bf:22:52:b4:c7:74:e1:d6:fa:80:9f:2e:ea:
         23:88:50:d1:09:93:f3:11:3c:2a:9b:93:02:42:f9:09:3e:98:
         77:1c:c9:cf:2a:c8:32:15:ae:fa:c8:79:07:23:ee:02:e7:7f:
         4b:e9:15:85:a9:89:c0:9a:f9:24:44:97:aa:31:bd:f5:04:54:
         28:41:ce:69:4f:51:3f:06:1a:61:15:db:ba:bb:e3:ef:36:a5:
         d3:7a:a4:cd:bd:10:e6:e0:d5:17:e6:36:a4:b5:19:0e:1b:da:
         66:04:40:5b:b0:93:40:90:e9:ea:ec:0c:9f:ef:2e:5d:6c:8e:
         64:27:21:d9:ec:e4:29:4f:88:74:b8:68:53:48:6e:90:7a:54:
         c6:5e:5b:33:de:c8:7c:41:a9:34:3f:9f:0b:53:3e:c4:8b:cb:
         8c:25:0f:34:a6:a7:a4:e5:c9:a0:4d:87:2a:8c:97:ca:dd:88:
         2c:a1:2d:70:31:a6:6a:bf:34:0c:8c:0b:cf:75:f0:00:07:14:
         4f:b3:b8:16:3b:37:ae:dc:55:7a:63:e4:79:e9:6a:f7:60:14:
         21:0d:52:ff:91:ab:90:d9:6e:37:18:77:0f:7b:6b:1d:f0:f9:
         86:64:08:3c:72:b2:af:56:cf:60:8a:81:ca:7a:73:de:fb:b3:
         5e:0a:9f:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYBMdV+lm4sKATR4QBjoRVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZGFkOTViYTJiMWViM2RkNzczODAwMmZjNjhhYTk1NTg4
YzNiZjEwHhcNMjYwOTI1MTAwMzA2WhcNMjYwOTI2MTAwMzA2WjAzMTEwLwYDVQQD
Eyg4NTU1YTNjZTQ5YWE0NzE5MmI0ODA3YjY1ZGMyY2YxYTg0NjBmOGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67GZDYjyzgrRSOgxAv18ab/LN6lt
1f7ZoxjqXes+50s/7ZyKr5mUbhfudDAoVGMID2nmlVgLOwGLSLQryd2XO3/5KIb4
urW8dBziAzUGQa3ZAtkuVEAayA1nDVk3n/uepwk3++j+sGIk3my5HBlCDtWoYPCw
bSUrqVZIIEVuS3OfzCClWIaIiz/ZcmRjIN+4PNpwvpetQam8AiIoPpMpKTYKbBBB
wyWP/wyGfUK8OOJc6tymyM8wj2osK3gvREM8KU2zA2jI9GUqV82PAaFLtOGUOE5B
iR7chC8qluuoL6ffrzy0Lcg7OdR2Lg6StKToX2BFlK+zJUGf7wPhipegTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVVo85JqkcZK0gHtl3CzxqEYPihMB8GA1UdIwQY
MBaAFGDa2Vuises913OAAvxoqpVYjDvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80NDhiYTAtYTQzOC00ZjU5LTg4NWIt
NDIxOGIyYjY5NjNhLzEvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi80NDhiYTAtYTQzOC00ZjU5LTg4NWItNDIxOGIyYjY5NjNh
LzEvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEezCeBW/
IlK0x3Th1vqAny7qI4hQ0QmT8xE8KpuTAkL5CT6YdxzJzyrIMhWu+sh5ByPuAud/
S+kVhamJwJr5JESXqjG99QRUKEHOaU9RPwYaYRXburvj7zal03qkzb0Q5uDVF+Y2
pLUZDhvaZgRAW7CTQJDp6uwMn+8uXWyOZCch2ezkKU+IdLhoU0hukHpUxl5bM97I
fEGpND+fC1M+xIvLjCUPNKanpOXJoE2HKoyXyt2ILKEtcDGmar80DIwLz3XwAAcU
T7O4Fjs3rtxVemPkeelq92AUIQ1S/5GrkNluNxh3D3trHfD5hmQIPHKyr1bPYIqB
ynpz3vuzXgqfAw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 16:35:26 2026 by rpki-client