Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
File:                     ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft (raw, json)
Hash identifier:          zLzJJXCbgZ4t0clVHwknEkhpicz8gqDD1556x/tV330=
Subject key identifier:   52:F3:5C:B0:43:60:7A:EB:16:B8:86:71:C1:96:28:E8:50:C5:60:C4
Authority key identifier: CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
Certificate issuer:       /CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Certificate serial:       019E1F10B9127AB336CE4E54569B923256A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
Manifest number:          1906
Signing time:             Wed 13 May 2026 02:00:50 +0000
Manifest this update:     Wed 13 May 2026 02:00:50 +0000
Manifest next update:     Thu 14 May 2026 02:00:50 +0000
Files and hashes:         1: vrzaOZyt0yuGmEkZWTfpBfvU0FM.roa (hash: wM8w9UXwnJwWC//EoV2cIpFlr+CCNnYEJvvmregOsvI=)
                          2: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl (hash: R+hQiQoqtjR2pCeSHnlUh7apav4CFXZSUezNERxaXOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:b9:12:7a:b3:36:ce:4e:54:56:9b:92:32:56:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
        Validity
            Not Before: May 13 02:00:50 2026 GMT
            Not After : May 14 02:00:50 2026 GMT
        Subject: CN=52f35cb043607aeb16b88671c19628e850c560c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d0:1d:b7:08:72:54:ce:40:6d:19:01:a2:1b:
                    52:3c:ab:0d:f1:fe:4a:8d:05:cb:36:c9:b1:06:76:
                    5e:0a:2b:d7:0c:9b:93:b1:34:1d:94:75:e0:fa:1d:
                    fc:22:69:79:47:13:f2:06:01:38:4a:b4:58:c8:04:
                    c9:95:94:b8:29:ed:79:31:a1:1d:09:02:e2:ba:36:
                    00:cf:1a:8d:32:c6:af:2f:bf:62:3b:68:00:75:a5:
                    97:a9:99:38:fd:b3:9f:87:41:f5:8d:13:e7:f8:0e:
                    25:c3:f9:55:85:d2:d5:33:64:06:33:a1:e9:37:c4:
                    89:6d:b8:e9:77:80:06:96:ac:b9:40:7d:51:c7:00:
                    55:3c:ab:a8:aa:95:36:4f:56:ea:25:9e:a7:31:7e:
                    06:84:2f:bb:4e:eb:37:11:20:fb:6c:59:da:c8:fe:
                    ed:9e:37:f6:d9:47:88:ef:49:65:c6:d7:05:73:5f:
                    82:ed:93:90:1f:c0:88:4b:9c:f1:3d:2c:9c:c6:9e:
                    ec:56:90:59:50:54:a9:63:c4:56:30:39:33:e7:87:
                    21:75:57:36:e9:42:0b:75:be:82:e1:31:11:53:44:
                    5f:73:08:9b:79:b9:a1:96:79:a0:0e:fb:ca:6c:30:
                    11:9f:77:78:32:0a:c8:51:1a:00:fe:32:d5:15:2c:
                    79:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F3:5C:B0:43:60:7A:EB:16:B8:86:71:C1:96:28:E8:50:C5:60:C4
            X509v3 Authority Key Identifier:
                keyid:CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:5e:25:56:9e:29:7c:6c:d4:07:d5:5d:57:4a:80:17:ed:55:
         71:2b:97:d2:4e:c5:43:f4:c1:a8:64:09:75:9f:2a:f9:b0:6d:
         d6:68:a4:03:92:6a:76:41:e8:e4:e2:db:c0:66:fd:d4:e9:a5:
         01:9c:8c:f4:73:89:e9:3f:16:4e:74:97:65:77:4d:ca:0b:4b:
         49:3c:5f:d1:af:40:30:c2:ae:98:56:c7:97:63:71:a1:9e:e6:
         1a:a4:d5:47:53:3c:3b:e6:e0:6f:90:f1:00:1f:37:b1:8d:71:
         18:f0:a8:ff:4e:71:85:35:9a:ca:b2:63:17:c1:35:e1:0a:88:
         c9:64:3f:10:4c:25:db:c1:d6:18:47:8a:cf:b1:31:07:80:75:
         fd:c8:84:54:d8:bf:3d:74:a1:a6:9a:ca:41:08:94:66:dc:f8:
         46:9b:08:5b:56:53:55:d6:3b:45:00:46:e0:97:7a:56:6c:ff:
         00:43:41:09:6e:7b:3c:bc:98:39:60:ea:8b:cd:a7:a9:8d:37:
         4e:59:14:57:be:02:cd:c5:8b:a2:22:c5:2b:14:f2:2c:87:c3:
         7a:55:1f:03:09:eb:81:96:d2:c5:b5:de:46:bd:51:6d:8b:d2:
         39:bd:f1:ba:82:00:d7:81:d7:52:45:e4:90:22:56:fb:da:f2:
         f0:2f:bf:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:45:30 2026 by rpki-client