Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
File:                     yudPzOQZM_QnxTfTZdXnYdJlXrY.mft (raw, json)
Hash identifier:          IvtjoGQHmE32V+LHDfVWv2CnMWCCf11E/xS4L30yq2A=
Subject key identifier:   87:33:E6:99:9F:E5:CE:AB:91:6C:5B:FD:7C:B0:64:60:44:4D:F8:80
Authority key identifier: CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
Certificate issuer:       /CN=cae74fcce41933f427c537d365d5e761d2655eb6
Certificate serial:       019D2A047378A196731828F5B0193222E685
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
Manifest number:          0FC1
Signing time:             Thu 26 Mar 2026 12:00:27 +0000
Manifest this update:     Thu 26 Mar 2026 12:00:27 +0000
Manifest next update:     Fri 27 Mar 2026 12:00:27 +0000
Files and hashes:         1: QSn62LM0lzdVFTae3oXlcnSJBrM.roa (hash: 1Kyh630uZcpfXJcHCHBYOXiuPYvcumJJUvLTjPHNEfg=)
                          2: yudPzOQZM_QnxTfTZdXnYdJlXrY.crl (hash: 31FzOwTAq59OJAIOR/m5xs/mBQOmWjBwHUCWKMaE/9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:04:73:78:a1:96:73:18:28:f5:b0:19:32:22:e6:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cae74fcce41933f427c537d365d5e761d2655eb6
        Validity
            Not Before: Mar 26 12:00:27 2026 GMT
            Not After : Mar 27 12:00:27 2026 GMT
        Subject: CN=8733e6999fe5ceab916c5bfd7cb06460444df880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:75:39:db:74:f7:1e:38:6d:9d:f3:f5:19:95:
                    df:57:95:96:55:14:91:59:ae:0d:1b:8a:e4:69:ba:
                    f1:5e:e2:b5:20:00:eb:39:66:4c:46:60:e9:de:34:
                    76:98:b8:21:88:c6:5d:df:49:72:65:03:8b:54:c4:
                    0d:ea:e7:5a:a0:ca:1c:53:5b:6b:33:4e:18:d9:42:
                    5b:5d:f2:f6:45:78:b0:46:33:05:5c:a5:fa:9a:9d:
                    64:48:d3:56:78:8d:f7:25:0a:75:a0:85:10:11:93:
                    2c:54:b2:e6:0f:89:62:63:a0:a1:cf:aa:59:b6:27:
                    47:57:d4:c7:04:58:52:e6:ce:62:7e:79:a9:3d:96:
                    1d:c4:72:85:bc:b0:cf:12:7b:67:60:3e:60:d7:ac:
                    20:2a:f3:32:65:d0:b4:93:dc:5f:32:ff:bf:6e:c5:
                    cf:8a:e3:29:1d:bb:4e:23:a5:d7:11:00:d5:65:1a:
                    22:48:ba:26:dd:13:cc:f1:f1:f0:a9:ae:00:4b:72:
                    c9:35:67:9c:5c:8d:d0:4e:c7:e2:e9:e8:3f:2e:8a:
                    32:b9:cc:4a:01:cd:e0:fe:b5:b5:e8:02:22:3e:32:
                    17:85:90:6f:1d:0f:65:04:7d:d2:5d:94:fa:58:0d:
                    55:ba:90:00:79:fe:f4:a4:ae:65:3c:4f:6e:0d:6c:
                    01:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:33:E6:99:9F:E5:CE:AB:91:6C:5B:FD:7C:B0:64:60:44:4D:F8:80
            X509v3 Authority Key Identifier:
                keyid:CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:55:4b:90:14:12:80:c4:d1:be:9b:ba:07:7d:84:3d:34:ec:
         eb:7b:85:21:35:27:45:de:76:10:89:d5:23:2b:ff:08:c6:32:
         74:8e:be:50:26:f5:b9:5c:e9:0b:2d:49:21:d3:86:cc:65:a4:
         ff:23:e2:96:15:a1:e0:94:74:31:f8:a5:19:54:d3:89:05:38:
         3f:bf:6b:22:3f:02:92:3f:3e:7a:72:16:21:59:91:57:f8:fa:
         63:d4:56:42:4e:ea:7f:1d:7c:3c:b9:8d:4a:2e:85:ac:d8:6d:
         d0:3d:ba:78:97:b4:0a:84:e0:55:05:97:b6:8c:4d:01:2e:00:
         f0:98:6b:13:c4:7a:37:87:e9:2e:e3:5d:fd:ea:18:d4:56:7e:
         bd:94:c1:78:85:ae:a3:1d:f2:d1:96:e4:ff:99:0d:38:24:2e:
         24:17:c3:4a:9f:28:62:61:a1:e5:41:e7:bb:a6:8b:5e:60:7c:
         d0:c9:b4:40:c4:82:02:3b:9a:b6:aa:64:59:2f:3e:26:88:8c:
         67:6a:f9:00:7e:6b:a7:ff:92:44:00:57:7b:ac:36:b7:aa:f0:
         e1:47:5b:89:d9:55:2c:49:4a:7d:99:a6:ec:27:b1:7e:60:0b:
         2e:05:10:4a:86:54:71:a4:50:97:c4:bd:5c:46:c4:3a:1e:76:
         84:76:73:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:02:11 2026 by rpki-client