Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
File:                     YGhXxDyh3wTLaaSgqshim98ydWs.mft (raw, json)
Hash identifier:          3ccJgD3JyhZRSnYaZCXw9qS+iO6R5PHszqobbfoazNI=
Subject key identifier:   78:73:29:C8:8C:C1:DA:F0:D7:20:04:74:91:39:58:AC:DD:73:3F:39
Authority key identifier: 60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
Certificate issuer:       /CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Certificate serial:       019E1F7E653B0959191B110BD9C55AE50E8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
Manifest number:          15BE
Signing time:             Wed 13 May 2026 04:00:37 +0000
Manifest this update:     Wed 13 May 2026 04:00:37 +0000
Manifest next update:     Thu 14 May 2026 04:00:37 +0000
Files and hashes:         1: YGhXxDyh3wTLaaSgqshim98ydWs.crl (hash: SsqpwhNczE7/aIuZSIfBP9/t+nNU0prxoh4d8U0HNzs=)
                          2: r07b59Kbc0tU4fUroKjDGDeksk4.roa (hash: VbjM5vBRkz4uK7ac3fSu6tjCMa1PBV229HM3K4xTekY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:65:3b:09:59:19:1b:11:0b:d9:c5:5a:e5:0e:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
        Validity
            Not Before: May 13 04:00:37 2026 GMT
            Not After : May 14 04:00:37 2026 GMT
        Subject: CN=787329c88cc1daf0d7200474913958acdd733f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:47:fd:ae:ab:6e:f4:f8:65:15:67:85:85:f6:
                    c2:24:3f:2f:b0:0e:52:05:20:9d:84:da:5e:35:b3:
                    d1:ee:aa:f8:e5:9c:fd:20:07:67:eb:e9:62:e7:86:
                    f3:88:4c:df:8d:25:af:01:b6:4f:e7:8f:e2:0c:0a:
                    21:94:7b:f8:06:0f:d6:0a:27:05:16:92:69:4d:68:
                    75:ca:6f:47:43:57:b3:23:0e:84:7e:b4:9b:86:2d:
                    55:a5:f2:09:47:f6:50:d7:31:f7:48:2a:ff:82:98:
                    d4:33:10:a4:58:d4:a6:69:5a:7e:8d:5e:e3:36:32:
                    05:0e:03:96:58:29:68:62:8e:bd:30:aa:2d:7a:be:
                    b1:e8:42:8d:93:79:75:a0:c6:e2:b5:95:b2:d8:b7:
                    23:01:6b:a1:31:72:6b:fb:07:22:05:1d:6f:d8:5e:
                    65:e2:94:24:ec:94:09:4b:ed:02:4c:d3:3e:30:2f:
                    a0:c2:18:04:7b:73:d3:b8:aa:8b:51:00:cc:d3:53:
                    c8:6c:2b:62:cd:eb:20:a9:19:08:75:12:01:14:3b:
                    99:76:8e:83:62:f3:e2:7e:4e:42:e2:6f:43:54:1a:
                    64:0f:b1:c5:7b:9c:8f:55:9c:e7:d7:a1:f8:3c:01:
                    0e:c9:76:e1:4d:d1:be:e3:eb:b7:fa:45:55:b0:1e:
                    aa:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:73:29:C8:8C:C1:DA:F0:D7:20:04:74:91:39:58:AC:DD:73:3F:39
            X509v3 Authority Key Identifier:
                keyid:60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ff:ef:d7:dc:04:8d:da:f6:95:2a:4f:7a:f5:40:6d:6a:2c:
         25:a5:bc:36:2b:99:75:88:fc:5e:42:ba:e6:0d:e6:5a:09:0e:
         0d:55:30:1e:ed:fa:e3:70:c3:09:56:65:6e:d7:e1:5f:62:45:
         bd:f8:66:0e:39:52:a5:2f:e0:f0:fa:5c:b0:ad:d8:32:40:ce:
         8b:13:a2:72:08:22:53:68:a2:85:a7:9d:24:22:e6:63:bc:5b:
         93:65:0d:45:7d:4d:ab:4f:d0:9d:51:7c:f7:04:1a:d3:cd:c4:
         55:47:aa:aa:be:93:32:9a:fa:5b:11:00:33:ff:ef:1b:64:d8:
         25:38:01:f9:25:3a:81:f4:0f:65:35:0b:a1:e5:89:56:44:69:
         b0:c0:d8:f3:21:f1:48:f5:c0:ea:92:a3:1f:0b:ce:8b:c3:68:
         f8:81:4b:f3:97:dd:48:7d:da:62:55:5a:71:fd:7f:71:de:58:
         10:be:d8:c9:29:a9:ef:da:59:5f:18:c1:9b:82:c5:63:a7:40:
         63:fc:28:9a:20:11:ac:ed:d3:b6:50:22:f4:f5:17:63:20:09:
         9e:dd:c9:10:78:ee:b7:d8:22:04:27:36:46:e8:65:2a:ef:aa:
         b5:e8:d4:91:68:60:6a:0d:58:54:00:bf:36:2d:d0:12:98:e4:
         7f:9b:de:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:19 2026 by rpki-client