Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
File:                     yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json)
Hash identifier:          5t7OExXLnlsZC1qFUqQLOr3o+2Ey61hasy9GcKJNxJU=
Subject key identifier:   3D:CC:23:81:36:51:F8:8D:B7:40:F8:92:6C:62:42:57:AC:FF:92:43
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Certificate issuer:       /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial:       019E1DFE8296FA69570E0E6CD39724953FBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
Manifest number:          1906
Signing time:             Tue 12 May 2026 21:01:19 +0000
Manifest this update:     Tue 12 May 2026 21:01:19 +0000
Manifest next update:     Wed 13 May 2026 21:01:19 +0000
Files and hashes:         1: JBraeIgnuA6e6r7UQt_AjcfpK9E.roa (hash: tQM9C7OHo0XqPssxXUnuLcGysh5HiluPj8tqyjMnFVk=)
                          2: qQLv7uOVYz32Fa-HCYFsduryaUY.roa (hash: msrPJ+vS8iPsGg0xQfm9cnyh8JOxajlO3J5ownd6l7I=)
                          3: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: iRW2Adf1jkXDlGlvfUuHxdymP/kU1nQ9osjH5siB/vE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:82:96:fa:69:57:0e:0e:6c:d3:97:24:95:3f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
        Validity
            Not Before: May 12 21:01:19 2026 GMT
            Not After : May 13 21:01:19 2026 GMT
        Subject: CN=3dcc23813651f88db740f8926c624257acff9243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1b:de:5d:1c:89:0b:70:b0:e2:ed:5e:65:a5:
                    a1:f0:e1:64:fc:94:e9:b4:df:5f:54:7c:c4:bb:d0:
                    13:b6:14:2a:7e:f3:81:f2:5e:f1:be:48:a0:53:7e:
                    2c:f1:24:13:50:81:37:e9:6c:3a:ef:ee:db:3a:46:
                    1e:78:68:12:2c:6d:d4:c4:ab:53:2e:85:2e:f5:d0:
                    31:b9:d4:a0:dd:bf:68:9d:e5:42:bf:07:21:cb:80:
                    1f:6a:f0:7b:77:11:9e:46:42:6d:22:1a:50:ef:86:
                    05:c0:20:fa:e7:e8:a4:85:91:5a:fd:83:03:2c:23:
                    b1:71:f0:67:bc:b5:05:d0:0d:d1:70:8f:72:00:49:
                    5b:e6:e4:a0:4c:0f:80:8f:09:12:c8:e7:51:f3:65:
                    d1:37:7e:9f:80:fe:e8:f3:de:19:c4:ac:c9:23:6a:
                    82:37:e5:c9:1f:13:d7:c8:8b:1b:e5:49:bd:b4:8d:
                    e0:7f:49:10:b8:b3:33:93:d7:47:b9:cf:11:7b:36:
                    6f:60:15:bf:9f:a1:ff:31:1e:1b:9c:ee:a6:bb:a8:
                    5a:b4:23:a0:ee:1b:e8:11:79:29:b1:95:1d:b1:25:
                    ce:c1:fb:71:1f:84:df:17:03:c7:45:5c:ba:17:3a:
                    a1:ec:01:49:43:65:9c:61:fa:c6:7f:f9:d1:fe:cc:
                    66:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CC:23:81:36:51:F8:8D:B7:40:F8:92:6C:62:42:57:AC:FF:92:43
            X509v3 Authority Key Identifier:
                keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d2:93:1a:10:08:6a:c6:5f:c1:52:d6:f1:65:93:a6:0f:1a:
         65:b3:67:4f:54:cf:22:84:1f:e2:cb:f5:73:33:fc:7c:45:63:
         11:b1:88:44:a4:c1:10:32:72:0f:61:5f:05:eb:a1:b1:d5:3f:
         54:17:30:44:c1:0d:2c:c8:7c:4c:63:ae:42:1d:c9:d6:30:ca:
         97:a5:de:1f:ce:c0:11:4c:3f:64:0f:6d:d6:6f:e4:0d:8e:46:
         1f:dc:48:fb:53:80:72:64:30:49:85:6c:8a:9a:51:78:2b:e8:
         d1:3c:dd:0c:ae:b4:8f:ef:cc:19:be:e7:24:96:8f:68:a1:f0:
         3d:ca:6e:88:cb:69:ed:4d:04:af:b8:83:7e:02:49:3d:cf:1c:
         2f:2e:4e:6b:39:64:ea:8f:fa:ab:34:02:42:53:b7:58:a0:27:
         55:bd:c6:45:7f:e4:88:6b:4f:3f:89:14:c6:92:c8:ab:ab:5f:
         70:1c:91:5f:c3:b4:da:ee:b0:88:9a:69:dc:8d:fc:db:d2:00:
         65:b7:31:8e:cd:5b:0a:67:32:32:8d:4b:fe:85:dc:65:3e:24:
         9a:b4:27:41:5c:06:7c:f0:26:b2:6f:4f:a0:5d:d1:cd:4c:29:
         2d:40:6e:16:14:26:a5:3d:98:a3:ac:e1:33:3b:b4:54:5e:a8:
         e0:de:ab:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:27:55 2026 by rpki-client