Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
File:                     YsX8533eTi7k_WU1EAUpwvRE15o.mft (raw, json)
Hash identifier:          WYmTvL3mg5tEJsx01xMmoGnKR4fI5CkN/Z+/jUZ+DDY=
Subject key identifier:   58:9B:40:09:96:37:02:02:DD:CB:D7:3E:00:4C:AB:CA:43:FD:24:1D
Authority key identifier: 62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
Certificate issuer:       /CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Certificate serial:       019F3B619CAC7AB9E776722B79E0EAFDF11D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
Manifest number:          199D
Signing time:             Tue 07 Jul 2026 07:01:20 +0000
Manifest this update:     Tue 07 Jul 2026 07:01:20 +0000
Manifest next update:     Wed 08 Jul 2026 07:01:20 +0000
Files and hashes:         1: GYvctFRB0vL8CZ5WGPseD7TX41k.asa (hash: FEPj7H6wY/hkKzVpHOSMzB1AZDSrZKxs+Mx7brcM7YM=)
                          2: M-O71STwS8Kp5niFGIFQhYvdlWo.roa (hash: yLzi9tjJQyrnPyV+LD1bidPc5F2jwLqmN1OObhiODg4=)
                          3: Xco1tcKWr3OJsK2GRTGEy3uXjCI.roa (hash: MmiJmWSzx/Ap053j4ROh2ZTks4oLbkSzRhXee+eiqmg=)
                          4: YsX8533eTi7k_WU1EAUpwvRE15o.crl (hash: H8s+h9/LdG/gl653kPxnstcSJZ+jPiYOky+YQrp9UqM=)
                          5: kVbtdxl5r7rl44HYKA5sht2hTPA.roa (hash: pDR06QMON/0Rz4oTXhPHJgXDsLVRiWPUPc+NTcHziwk=)
                          6: opYh8BW3Px-SsN2AJRky4WXGDvE.asa (hash: 6XAoprCBdoN1kf4Hkc9CL/33HHtfBuc4951sqVW/spg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Jul 2026 07:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:3b:61:9c:ac:7a:b9:e7:76:72:2b:79:e0:ea:fd:f1:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
        Validity
            Not Before: Jul  7 07:01:20 2026 GMT
            Not After : Jul  8 07:01:20 2026 GMT
        Subject: CN=589b400996370202ddcbd73e004cabca43fd241d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:30:13:e4:11:64:3f:ff:e8:13:c5:f3:1a:6c:
                    fc:f8:bc:79:93:b0:41:0a:79:54:04:c9:fa:fc:0e:
                    33:54:da:32:40:66:5c:68:6d:6c:0e:7b:59:b3:11:
                    a0:ad:27:a2:cb:dc:74:d1:16:10:b8:e4:a8:57:3f:
                    75:f8:7f:00:82:0c:e2:8c:e8:36:cc:29:4c:6e:fd:
                    1f:7b:0b:0f:83:39:08:ba:a3:30:8e:ae:a6:ca:c9:
                    0c:2c:60:71:00:ea:cb:ac:15:1d:e9:6e:d6:b7:a5:
                    60:b9:de:ea:d7:9c:27:2c:38:f2:77:7e:71:38:92:
                    0a:e6:da:f4:26:96:5d:ef:db:05:48:ad:97:06:d2:
                    7f:be:0e:bf:33:04:16:24:6b:00:34:44:ed:24:ad:
                    26:0f:5d:1d:4f:9e:4b:a5:0a:7c:90:87:a8:84:50:
                    cb:1e:23:bf:c7:fa:7a:bd:23:04:8d:c3:3d:5a:c7:
                    b7:ef:cf:74:fe:97:02:0d:c0:03:ba:57:bf:96:02:
                    0f:06:74:01:fa:75:5d:33:22:f8:46:ef:a4:c0:06:
                    ab:73:4d:d5:46:47:85:cd:97:82:a5:85:e3:85:a1:
                    05:15:39:ae:52:72:af:43:92:d9:af:be:09:18:b1:
                    12:51:03:97:77:d3:ff:01:5c:f0:c1:32:9b:cf:9d:
                    34:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9B:40:09:96:37:02:02:DD:CB:D7:3E:00:4C:AB:CA:43:FD:24:1D
            X509v3 Authority Key Identifier:
                keyid:62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:8b:11:40:b0:25:c1:0b:ad:7a:17:18:19:17:3e:58:20:bd:
         53:57:4e:4d:e2:c1:45:3e:51:4f:ba:6c:5b:9c:7a:06:bd:dd:
         2e:53:ef:98:b5:94:89:8a:e0:13:75:88:85:22:83:e8:16:65:
         bd:58:ac:ce:04:33:41:ab:b5:d3:dd:5c:3a:2b:32:b6:d8:e2:
         b0:d1:8f:df:42:27:20:4a:98:9c:20:0d:32:42:08:ca:e1:aa:
         fa:5f:47:8c:5b:06:f6:6c:49:c7:ad:ad:01:e8:5f:84:7c:4b:
         77:71:dc:13:7c:55:1e:4d:0b:4c:c1:50:73:2d:22:81:df:b4:
         03:92:e6:6a:9e:a1:ad:93:86:c2:85:52:2f:56:1e:ae:9a:2b:
         a4:e9:3f:fd:25:4f:ff:1c:a1:f0:9d:29:43:bd:c4:2a:59:d4:
         4f:bd:4c:01:b8:5d:b8:e5:2c:5d:54:82:97:88:fb:3b:e7:fb:
         41:5b:63:73:13:60:1d:78:c6:ab:cf:09:40:b6:e1:80:33:b9:
         7b:ee:2f:53:fa:b5:1d:5c:f2:bc:e3:f5:d7:10:8d:a0:17:ab:
         13:f2:36:d5:ac:87:13:6b:3c:f7:b7:89:d4:06:7c:d0:7b:ed:
         0a:5b:b6:a4:4e:74:7e:e0:c7:e6:80:7b:d1:7c:c5:c9:89:64:
         f7:3d:f1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:51:20 2026 by rpki-client