Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
File:                     YbU0Q3UDZogVrdk80X0K0-GxqHc.mft (raw, json)
Hash identifier:          zQdTAxK6r/rclVwzZzFqzcBiD9Z+DI4gNMqorMgWfwg=
Subject key identifier:   BC:BB:25:1B:D9:4F:6C:5E:9F:76:FF:D3:0A:7E:F9:26:3E:CF:59:FB
Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
Certificate issuer:       /CN=61b534437503668815add93cd17d0ad3e1b1a877
Certificate serial:       019E205AB5E66E1B8A1C2EF8B23C5385915D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
Manifest number:          191C
Signing time:             Wed 13 May 2026 08:01:16 +0000
Manifest this update:     Wed 13 May 2026 08:01:16 +0000
Manifest next update:     Thu 14 May 2026 08:01:16 +0000
Files and hashes:         1: 2v3v91RFQjN6l9mWptJO680RMkc.roa (hash: JpKAIgf5dUOG27b3V6ypmirRGf/czS7D9Bc0AguM208=)
                          2: 7eIzHvINnFqHZBOWvru0J6FjDb8.roa (hash: Dv2FZyAGPdsQN62gOmL7jMpfdjwxeMKFTL1oAf/BKfc=)
                          3: 8l0-rbUJJ5yl_F5t1WGOySUsQOI.roa (hash: 065Qj+kRYJW5mj1KN/1Un/hhPcBtSTaJS6BwFg5mPWw=)
                          4: QTFye-32ZtubZYZVN0cCrwUzz_s.roa (hash: Ou06XDdFUhQ2dykgxmyAA0EVBWVZBiN7PQ/FvfPl2a0=)
                          5: UsJrUy2UuzGGDnQa-en_vet84IU.roa (hash: anygphX/NHAj2pg72RtTsBDk/dlZBM2mWyxRgOxxXzo=)
                          6: YbU0Q3UDZogVrdk80X0K0-GxqHc.crl (hash: K7YFH3gSfcqjfEl03QeamOoeStf1IZ30L6SP6PB0I64=)
                          7: o2wMPqpUwKK3k92hqD5HvK3oiiI.roa (hash: 0YGmH3GBpSNDcIwjVr7t8Bv7qy4ZPt0Vk2HKaZcbgtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:b5:e6:6e:1b:8a:1c:2e:f8:b2:3c:53:85:91:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877
        Validity
            Not Before: May 13 08:01:16 2026 GMT
            Not After : May 14 08:01:16 2026 GMT
        Subject: CN=bcbb251bd94f6c5e9f76ffd30a7ef9263ecf59fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8f:89:be:82:73:4a:98:2d:59:a8:e6:dc:d7:
                    4b:d9:f9:3c:da:f6:aa:f3:e8:f8:74:b8:1e:1f:04:
                    b1:59:ed:dd:42:ad:7c:8f:e0:0f:6b:c4:48:8e:78:
                    a2:9f:d9:6a:d0:81:c1:51:31:bc:a5:32:d8:cf:c9:
                    2b:79:96:d7:63:d2:1d:16:d9:9c:dc:6f:f3:25:08:
                    8a:63:1c:31:a9:c4:96:c7:5a:77:5c:5f:db:26:1e:
                    b6:45:b1:bf:cd:57:30:57:15:5d:fa:7c:4a:34:b7:
                    e6:6c:9b:9a:71:2e:e3:ed:00:9e:6d:82:a1:25:37:
                    8b:63:cd:bc:4f:b8:ce:5e:5f:a7:91:e2:15:ec:3d:
                    1f:41:54:24:8b:85:b9:b1:d7:d8:a3:95:1c:c5:6a:
                    85:1e:b6:ee:a0:7b:82:f9:fc:85:c7:2f:40:36:d8:
                    7f:aa:eb:9c:00:c8:d0:b4:f8:82:b9:54:9f:91:72:
                    a4:dd:a9:79:ef:11:88:cc:fd:f3:e6:ec:eb:dd:9e:
                    67:8e:7d:db:34:d0:ee:50:f1:12:f1:08:a1:3d:be:
                    c5:b1:28:68:dd:fe:ed:81:6e:d0:37:8b:ff:48:dc:
                    d6:85:1b:07:7f:c3:52:05:4e:1e:7b:87:dc:9e:63:
                    11:67:51:26:55:17:22:00:dc:7e:34:78:5c:fb:be:
                    8f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BB:25:1B:D9:4F:6C:5E:9F:76:FF:D3:0A:7E:F9:26:3E:CF:59:FB
            X509v3 Authority Key Identifier:
                keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:93:4d:d3:49:8e:ec:85:d5:4a:e4:0e:86:fa:11:d4:85:8d:
         68:79:8d:5e:95:f0:4b:35:1d:9f:53:96:8f:f6:6c:b9:ab:e5:
         eb:92:a9:3a:6a:81:13:74:3c:33:29:47:0f:46:ef:91:bd:46:
         e9:28:7a:01:9a:08:cd:43:60:6d:42:e2:25:d6:37:12:56:4d:
         e8:3d:3a:f8:cf:8a:87:6e:08:83:b1:8d:7b:b4:70:0c:2a:8a:
         e5:ea:60:14:d7:86:67:47:2d:ee:97:13:df:4d:34:b3:76:fc:
         99:55:35:df:8a:e8:74:99:d3:e2:0d:86:6c:1a:40:ef:44:b1:
         28:cb:36:69:60:15:69:bb:da:d8:b3:bb:51:f9:67:18:ea:b3:
         05:2a:b6:1d:3f:87:02:64:91:b4:c1:de:2a:2b:48:a6:2f:58:
         94:32:b7:80:a4:11:ec:23:ab:9f:59:ec:4f:e0:cc:00:6e:e5:
         ca:b3:e2:5f:3c:b1:71:e8:1f:42:ab:fb:85:97:61:ce:b4:82:
         58:4b:97:77:0c:f2:16:87:62:51:91:d6:ed:e2:5d:d4:85:bb:
         07:c0:79:bb:ac:bb:01:1f:ac:c3:23:40:e4:5b:91:d7:27:f6:
         10:0d:51:45:bd:44:25:45:8f:12:22:f4:09:da:02:7d:56:2c:
         35:f3:bb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:47 2026 by rpki-client