Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
File:                     YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft (raw, json)
Hash identifier:          RTFG7Gc2Pk+yvzXV6+9qUVwamfqFSj/6/48Y7XTS/sQ=
Subject key identifier:   73:66:DA:97:98:0D:5A:85:CA:4F:5C:1E:36:26:8C:EF:5D:9E:DE:A4
Authority key identifier: 61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
Certificate issuer:       /CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Certificate serial:       01A1DF836EA105D9062219DCBB279C13F54B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
Manifest number:          08A0
Signing time:             Sun 15 Nov 2026 14:01:34 +0000
Manifest this update:     Sun 15 Nov 2026 14:01:34 +0000
Manifest next update:     Mon 16 Nov 2026 14:01:34 +0000
Files and hashes:         1: 0thyuBS-7i3aOK5iDtW2SD_9l5g.roa (hash: QgjGWqiX1+npCmoWmYzY48kBirMLlhP0MOtvPBXoWXc=)
                          2: YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl (hash: mMkz03OtfHf/0qupwhp0PNsN8ZJ9Duk35KBEFhcypd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:83:6e:a1:05:d9:06:22:19:dc:bb:27:9c:13:f5:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
        Validity
            Not Before: Nov 15 14:01:34 2026 GMT
            Not After : Nov 16 14:01:34 2026 GMT
        Subject: CN=7366da97980d5a85ca4f5c1e36268cef5d9edea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9d:39:00:88:7d:f2:3f:51:91:1e:ee:6f:34:
                    1e:64:49:bb:ac:73:53:c0:c9:ab:ad:2b:ce:d0:13:
                    78:b1:2e:3e:41:6d:d7:1e:c4:f3:79:91:c8:81:22:
                    38:82:10:d3:0a:94:31:9a:4a:6c:6e:f5:c6:a3:d2:
                    b5:a5:10:86:d9:6c:77:57:25:3d:64:0d:e2:3d:20:
                    2b:42:8d:4e:66:cd:ad:48:7f:0f:85:0e:c9:a8:03:
                    93:a0:c2:98:fa:97:4e:32:c2:09:ed:48:92:87:a7:
                    41:5c:a5:a9:d5:db:c6:01:41:31:0e:bb:a5:77:54:
                    e3:c0:44:99:90:94:c4:60:96:b8:35:43:2d:76:16:
                    39:db:d6:87:17:8b:81:91:e5:71:90:c1:e3:0a:8d:
                    f2:97:47:6d:08:34:8f:79:98:7e:27:dd:25:57:48:
                    26:ff:5f:d5:e6:dd:d1:9a:73:fd:db:81:4a:d0:0d:
                    c7:d4:48:2b:ea:9e:ca:6d:96:0a:e3:cb:b6:16:64:
                    38:f4:00:7d:ea:8d:39:2e:89:ad:64:29:88:c5:88:
                    11:2d:90:fe:af:cd:af:d4:bb:24:15:26:29:22:af:
                    f0:55:db:18:65:7c:bf:a0:55:49:9e:96:9e:6f:66:
                    28:65:6a:e7:c4:b1:6d:4a:b5:0c:eb:23:b9:27:9d:
                    51:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:66:DA:97:98:0D:5A:85:CA:4F:5C:1E:36:26:8C:EF:5D:9E:DE:A4
            X509v3 Authority Key Identifier:
                keyid:61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:43:8a:03:26:c4:aa:7e:64:a8:cc:59:dd:2d:60:67:3a:4d:
         d3:66:65:22:ff:18:c1:cc:f9:3a:f7:67:c8:48:88:aa:77:6f:
         c3:85:a7:a1:c0:b7:cc:b2:ac:16:49:ab:f0:9c:75:af:dd:e3:
         56:2c:5a:aa:7f:0e:1b:c6:af:83:98:4c:8f:43:17:ca:c4:46:
         ea:1f:f3:04:70:0a:4a:20:09:0b:5e:65:0d:5d:af:c3:7d:32:
         2e:02:6e:9e:82:ce:29:6e:8f:ac:64:4d:81:f1:61:ff:f1:37:
         2a:ec:b0:b2:b8:39:39:98:f0:6d:15:05:16:24:3a:ee:c1:e1:
         16:f9:5f:e7:57:78:3a:6d:f2:ba:56:39:04:4c:d6:ce:2a:1e:
         33:cd:ad:5a:29:98:20:b2:3e:82:97:22:59:97:4f:a4:19:bf:
         23:2b:94:24:b4:fe:70:98:ee:3f:ed:d9:59:dd:33:da:bb:57:
         cc:3d:4f:ea:cd:03:0a:b2:45:c8:bb:d7:cd:2e:5d:85:ec:d8:
         e7:d6:d1:92:d5:16:22:fa:f7:e4:58:fd:7b:9c:3c:ae:f9:62:
         78:52:30:bb:b3:ea:e8:93:0e:a4:2b:c0:e1:16:65:81:2a:b6:
         63:e4:5e:1f:02:59:fc:f6:bb:20:c9:21:90:cc:04:3c:9f:a3:
         e2:1e:2e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:47:47 2026 by rpki-client