Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
File:                     ycAtQjT0vE6HVV5BwDd51WIKUVU.mft (raw, json)
Hash identifier:          iQgvUQhLdLa5V9qIqp+RSMTJhMlbJZtnbN4DVOGoPX4=
Subject key identifier:   DA:E0:33:57:AA:5A:3B:49:F6:6D:2D:4E:AC:5E:27:B9:CB:D8:ED:4D
Authority key identifier: C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55
Certificate issuer:       /CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
Certificate serial:       01A11907067EE2E74DFF416942169970FA83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
Manifest number:          0D18
Signing time:             Thu 08 Oct 2026 01:00:53 +0000
Manifest this update:     Thu 08 Oct 2026 01:00:53 +0000
Manifest next update:     Fri 09 Oct 2026 01:00:53 +0000
Files and hashes:         1: FMQ4xU5rGzBy9XfN6xkHNPPuK2w.roa (hash: VpW8Q4PIVbHWidRFeTd9pn+aHZWxpeF2VrUK329P7b4=)
                          2: OJY6iE54MT93V4GP2ZSvbOq5K4Y.roa (hash: 4QTAC5eFNbrr/GKOsA3KxkrPE1SA8Il65VwGfi0JgLQ=)
                          3: sP3xxrP16BVYtRejuodDQfjDjnY.roa (hash: rhdnZt+TyfSBG9e9GLDjxat3cDe+UxxerHxAqaJJWko=)
                          4: ycAtQjT0vE6HVV5BwDd51WIKUVU.crl (hash: PEko8POBNxzHJVKFhA6dnMWoRWAumRrB00V0emHZmNk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 22:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:19:07:06:7e:e2:e7:4d:ff:41:69:42:16:99:70:fa:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
        Validity
            Not Before: Oct  8 01:00:53 2026 GMT
            Not After : Oct  9 01:00:53 2026 GMT
        Subject: CN=dae03357aa5a3b49f66d2d4eac5e27b9cbd8ed4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a0:44:09:74:10:b6:05:82:a8:8f:23:2f:44:
                    0a:3a:eb:38:06:a3:7b:69:b2:d3:f6:d7:8e:44:ab:
                    cb:c9:21:7c:11:6b:14:d5:c8:63:cb:c1:d3:a7:da:
                    4c:d4:e9:14:6b:39:e7:a8:82:4d:ec:6e:ba:de:6c:
                    f9:95:89:f3:58:65:83:3c:be:28:38:e9:cc:eb:06:
                    da:97:74:14:dd:fe:86:1e:87:1b:7f:60:aa:c3:c1:
                    74:58:7e:1a:19:c9:9d:b4:34:74:47:ee:b1:fc:5a:
                    93:55:c3:38:d1:06:56:20:4c:e4:65:91:05:0d:34:
                    eb:be:46:de:e3:88:6b:47:a4:0e:82:a7:f7:2c:3e:
                    a4:41:b9:1b:4f:60:0c:8c:04:04:38:fd:6e:e1:4c:
                    60:f3:63:ec:87:46:72:11:1c:4c:8f:70:50:d3:5b:
                    58:57:01:3d:96:37:5c:da:43:55:6a:4b:61:af:a1:
                    5a:5b:90:fe:4c:86:b6:ce:b1:3d:9e:0b:be:5f:9e:
                    78:bc:74:2d:70:4a:23:e9:64:7e:ec:2e:da:53:7c:
                    18:ee:d8:85:3c:8f:d1:fe:d5:a5:11:e7:f9:79:de:
                    cf:27:eb:10:d3:89:5f:8a:9f:f3:84:61:a8:34:83:
                    86:f0:0b:e5:86:41:6f:aa:55:44:39:e6:07:90:e8:
                    a0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E0:33:57:AA:5A:3B:49:F6:6D:2D:4E:AC:5E:27:B9:CB:D8:ED:4D
            X509v3 Authority Key Identifier:
                keyid:C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f2:b1:83:f8:66:12:ae:7a:20:15:25:d0:f2:9b:cb:c2:b3:
         b5:d8:cb:9d:a4:00:70:d3:1c:0a:50:04:34:9e:45:43:20:3f:
         3c:e7:6c:87:9b:85:b5:f5:f5:72:93:fd:a4:51:63:c5:7e:85:
         dc:50:ea:8f:6d:63:1a:24:04:ae:ed:5e:27:64:b9:e8:d4:d1:
         04:6d:3f:49:72:ce:d3:a4:4e:c4:a0:5c:c6:fa:01:12:86:e4:
         f5:2f:6f:d0:5f:8b:9d:57:47:03:46:7e:69:69:de:56:04:ea:
         55:c8:75:56:54:bf:51:73:30:16:9b:58:da:f7:8d:51:55:ff:
         be:67:d1:aa:49:a9:8e:73:1f:8e:98:c2:ea:1f:17:cc:d7:d5:
         cd:e1:c4:92:db:2b:af:21:29:45:af:2d:0f:68:b8:ab:8a:d6:
         bf:eb:ae:64:6c:c8:0b:1a:65:04:80:9f:11:fb:8a:3a:da:46:
         76:06:b0:a5:ab:7b:b4:a2:35:4f:5f:70:62:f3:a2:aa:71:f9:
         4c:97:b4:dd:bd:07:1a:74:58:76:b8:2b:69:2b:30:61:71:dc:
         ef:85:1e:ce:2e:bd:8c:32:16:dd:41:08:b2:38:68:f8:e1:32:
         ea:7c:19:03:f0:2a:15:54:49:b5:a6:0b:a6:1a:74:8a:f5:aa:
         7e:d9:bd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:17:29 2026 by rpki-client