Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
File:                     YYzEbXHnhIl4SIlh17UauhVB88Q.mft (raw, json)
Hash identifier:          rAyUeuWHQEHTMup62FrtyJUZJlkuy1F1YJ7Nhs5Ntqc=
Subject key identifier:   A6:2F:77:4C:38:39:AE:80:A8:5B:8E:B7:1B:94:B2:05:C5:4F:EC:03
Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
Certificate issuer:       /CN=618cc46d71e7848978488961d7b51aba1541f3c4
Certificate serial:       019D2960E5123730D2AFEA628671F185C65B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
Manifest number:          0791
Signing time:             Thu 26 Mar 2026 09:01:49 +0000
Manifest this update:     Thu 26 Mar 2026 09:01:49 +0000
Manifest next update:     Fri 27 Mar 2026 09:01:49 +0000
Files and hashes:         1: 6rOwkiiwPMSDxttw83Oe03eKzrw.roa (hash: TUFJPMQ+agFJKUgYR8BN1zSkPDdsC9rfa9hlgnJj66I=)
                          2: NXzgYU-C6vYUH9piPE5IVfQUDws.roa (hash: 7H+XPAkztFsa8CV9iN0q4tQ4EIhX9svKu9hI+JunkN0=)
                          3: YYzEbXHnhIl4SIlh17UauhVB88Q.crl (hash: aHEXK3EFAKUXw3saqf3Iwz5ygHw1KsdsnPmG38+qi/Q=)
                          4: q5tcHMC53hVldl9vmJfxMoSPLXw.roa (hash: iSEcJDYplK+Xu/KP8Xlxc71CNA1iyM93A92Fn+WGFtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:60:e5:12:37:30:d2:af:ea:62:86:71:f1:85:c6:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4
        Validity
            Not Before: Mar 26 09:01:49 2026 GMT
            Not After : Mar 27 09:01:49 2026 GMT
        Subject: CN=a62f774c3839ae80a85b8eb71b94b205c54fec03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1c:34:d6:1f:bd:60:dd:d4:e3:62:57:be:5f:
                    8a:4d:47:34:f3:b1:ff:c5:5b:d7:cc:7e:3b:8b:a8:
                    16:85:9a:60:5f:98:16:7a:ad:d4:30:61:fe:28:2e:
                    82:e7:ba:38:48:3f:1e:74:1c:5b:02:a9:1b:92:c8:
                    1c:72:b6:b9:da:d6:30:c0:7c:dc:7a:e9:94:ed:d5:
                    bf:13:35:d1:62:50:05:f9:81:b1:3e:03:d3:26:c5:
                    d2:81:fa:62:8b:3f:ec:eb:99:1d:4d:92:5a:c9:61:
                    7b:77:e7:00:71:2c:b1:dc:a2:56:80:73:2f:b3:bc:
                    44:61:7a:50:39:df:f5:ae:b6:ee:39:19:dc:e6:df:
                    ea:1e:66:e5:03:bd:12:0e:7b:2c:ce:68:07:be:e7:
                    d2:b4:4c:f7:0a:46:4a:0e:24:fe:d4:fb:d1:59:26:
                    cc:a3:a0:b4:d3:7e:98:f2:ae:9b:e1:f0:be:d3:69:
                    02:6f:f9:dc:38:a1:68:b8:89:06:89:cf:13:75:2c:
                    fc:65:28:d2:e4:31:ae:f9:39:3c:a7:45:c4:80:2a:
                    82:55:2f:3f:4e:97:37:3e:13:87:98:d2:ff:18:6b:
                    95:f4:7f:24:37:89:99:12:e0:01:23:23:f0:53:fc:
                    63:63:ac:83:f1:91:68:29:12:45:03:66:98:09:70:
                    55:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2F:77:4C:38:39:AE:80:A8:5B:8E:B7:1B:94:B2:05:C5:4F:EC:03
            X509v3 Authority Key Identifier:
                keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:2b:ad:c1:cc:6e:39:ca:99:41:d6:56:8d:29:77:b2:1c:6f:
         c1:52:74:06:b4:dd:0b:8f:d7:b7:67:48:4c:dc:77:79:ee:1e:
         51:77:ad:57:13:c8:fb:40:85:9c:1e:03:04:ad:60:78:49:fb:
         0d:02:90:fe:71:43:20:20:00:0b:23:b2:27:a1:e0:48:b8:2b:
         4b:4a:89:52:55:23:16:9d:fe:31:c3:f9:ee:eb:b5:7a:d0:22:
         5f:a5:a7:cc:ea:f7:57:9d:ed:cc:5f:b5:23:89:39:70:9c:05:
         a5:a0:80:1d:03:9e:3b:b4:e8:9a:a1:c8:f6:d3:58:a3:8b:e5:
         13:b0:59:b6:50:f6:7c:00:22:02:85:b3:c7:ea:af:7e:ac:5e:
         d2:ba:6d:76:d5:01:89:de:04:83:fe:bc:32:be:7c:b1:d6:9e:
         73:29:15:45:78:6a:97:e9:e3:e2:cb:1c:74:7f:c0:11:7b:0b:
         65:4f:6d:f0:ed:41:3d:b6:24:2b:53:e1:07:02:bb:f6:da:09:
         bf:50:00:41:87:43:3a:6b:ee:a2:ae:10:23:16:e9:b8:d1:7f:
         0a:76:ff:99:dd:60:a2:51:1c:fc:19:10:c4:4b:5f:d4:4e:90:
         73:b1:28:a4:c1:39:d9:71:a6:8f:8f:e8:d0:df:1a:e2:a7:6f:
         79:f5:9a:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYOUSNzDSr+pihnHxhcZbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxOGNjNDZkNzFlNzg0ODk3ODQ4ODk2MWQ3YjUxYWJhMTU0
MWYzYzQwHhcNMjYwMzI2MDkwMTQ5WhcNMjYwMzI3MDkwMTQ5WjAzMTEwLwYDVQQD
EyhhNjJmNzc0YzM4MzlhZTgwYTg1YjhlYjcxYjk0YjIwNWM1NGZlYzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhw01h+9YN3U42JXvl+KTUc087H/
xVvXzH47i6gWhZpgX5gWeq3UMGH+KC6C57o4SD8edBxbAqkbksgccra52tYwwHzc
eumU7dW/EzXRYlAF+YGxPgPTJsXSgfpiiz/s65kdTZJayWF7d+cAcSyx3KJWgHMv
s7xEYXpQOd/1rrbuORnc5t/qHmblA70SDnsszmgHvufStEz3CkZKDiT+1PvRWSbM
o6C0036Y8q6b4fC+02kCb/ncOKFouIkGic8TdSz8ZSjS5DGu+Tk8p0XEgCqCVS8/
Tpc3PhOHmNL/GGuV9H8kN4mZEuABIyPwU/xjY6yD8ZFoKRJFA2aYCXBVtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYvd0w4Oa6AqFuOtxuUsgXFT+wDMB8GA1UdIwQY
MBaAFGGMxG1x54SJeEiJYde1GroVQfPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVl6RWJYSG5oSWw0U0lsaDE3VWF1aFZCODhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xMjc0MzAtZDRlOC00ZGEzLWJlYTIt
NGVmMTljY2M1N2QwLzEvWVl6RWJYSG5oSWw0U0lsaDE3VWF1aFZCODhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xMjc0MzAtZDRlOC00ZGEzLWJlYTItNGVmMTljY2M1N2Qw
LzEvWVl6RWJYSG5oSWw0U0lsaDE3VWF1aFZCODhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCutwcxu
OcqZQdZWjSl3shxvwVJ0BrTdC4/Xt2dITNx3ee4eUXetVxPI+0CFnB4DBK1geEn7
DQKQ/nFDICAACyOyJ6HgSLgrS0qJUlUjFp3+McP57uu1etAiX6WnzOr3V53tzF+1
I4k5cJwFpaCAHQOeO7TomqHI9tNYo4vlE7BZtlD2fAAiAoWzx+qvfqxe0rptdtUB
id4Eg/68Mr58sdaecykVRXhql+nj4sscdH/AEXsLZU9t8O1BPbYkK1PhBwK79toJ
v1AAQYdDOmvuoq4QIxbpuNF/Cnb/md1golEc/BkQxEtf1E6Qc7EopME52XGmj4/o
0N8a4qdvefWa4A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:39 2026 by rpki-client