Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
File:                     YRBtLf9xFvNat_oQJ1pF44O85SM.mft (raw, json)
Hash identifier:          EYEeaQt/SG7o0MjcDiUwo6odXgojcJfOXcXzHAUq4eg=
Subject key identifier:   E3:B3:0B:CE:85:67:E4:42:32:0C:FE:E6:6F:51:5A:F9:E9:F9:82:58
Authority key identifier: 61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
Certificate issuer:       /CN=61106d2dff7116f35ab7fa10275a45e383bce523
Certificate serial:       01A08DC44DA5138B3E3A8E385EB390A3B970
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
Manifest number:          191E
Signing time:             Fri 11 Sep 2026 00:00:47 +0000
Manifest this update:     Fri 11 Sep 2026 00:00:47 +0000
Manifest next update:     Sat 12 Sep 2026 00:00:47 +0000
Files and hashes:         1: YRBtLf9xFvNat_oQJ1pF44O85SM.crl (hash: gqg2vnfnKQ1cT0D2VpJMdnf0SNUqY+rbqCLZHVEX2Mw=)
                          2: ds0HwgnE1wK4tusqij2iDAo4C4w.roa (hash: AV7GAfjJkTxxVqb/RhgxTIb2SMDdBmXXWKpB5XXq9g8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:c4:4d:a5:13:8b:3e:3a:8e:38:5e:b3:90:a3:b9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61106d2dff7116f35ab7fa10275a45e383bce523
        Validity
            Not Before: Sep 11 00:00:47 2026 GMT
            Not After : Sep 12 00:00:47 2026 GMT
        Subject: CN=e3b30bce8567e442320cfee66f515af9e9f98258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:45:ec:14:4b:85:84:71:92:78:67:d6:70:07:
                    3c:c3:bd:04:a3:4c:52:0a:b2:ac:93:68:b9:04:73:
                    48:e7:06:00:44:6a:6d:79:e2:6c:a9:ba:a8:19:fc:
                    01:d1:3d:99:02:47:96:40:82:fa:56:d5:cf:e5:d2:
                    7f:b4:d9:b0:59:81:25:33:6b:b8:76:32:70:53:6e:
                    ab:04:13:0c:e5:02:f3:71:62:26:12:3c:43:31:7c:
                    b8:c9:fb:51:40:e0:7e:23:3e:00:aa:28:36:23:10:
                    4f:b3:22:4d:9a:a9:78:02:9d:c2:2e:7e:97:8c:69:
                    a3:8f:f3:d3:d6:7d:84:82:a6:ce:08:86:a9:60:3c:
                    14:63:1f:47:8b:dd:a2:e4:43:a6:9d:11:2b:6b:bc:
                    f1:86:5e:0d:23:24:ee:83:8c:89:62:d7:19:87:bc:
                    a3:f6:6a:25:4d:b9:4e:bd:fa:a2:87:5c:20:48:4c:
                    a7:ac:aa:75:96:52:b3:50:e5:f4:74:1a:a3:9e:69:
                    58:03:63:7a:e1:37:95:04:34:47:ab:a2:7d:a5:dc:
                    74:f4:ac:53:17:69:84:4a:bd:98:dd:cb:d3:92:66:
                    01:48:c7:3b:4f:ff:e4:df:39:ce:77:e7:6f:5e:e3:
                    f4:e8:bd:0a:26:f2:49:d1:92:7e:ef:44:0a:ce:7c:
                    bf:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B3:0B:CE:85:67:E4:42:32:0C:FE:E6:6F:51:5A:F9:E9:F9:82:58
            X509v3 Authority Key Identifier:
                keyid:61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:b3:78:b3:b5:cb:1b:24:07:54:08:bc:6f:3c:e6:d6:52:ff:
         a2:b4:44:61:64:8b:a4:ef:9b:ad:e5:af:bd:f0:d1:42:f2:b5:
         2f:d4:1c:a3:76:58:91:a0:66:2f:6d:5f:a1:ba:72:39:73:9b:
         cb:a4:8e:6b:bf:d9:a8:d1:af:c7:2b:ac:ad:c7:4b:04:fa:7c:
         dc:fc:66:f7:89:3c:5e:5b:69:40:cd:1d:c3:4a:f8:08:29:30:
         1b:da:91:35:b4:68:e4:7d:be:64:2e:92:8e:86:f5:36:77:26:
         6f:76:27:21:95:b6:64:3b:5e:93:01:c8:3a:30:ed:20:2b:cc:
         b2:00:2b:7b:85:ef:ab:5e:fb:ba:2a:58:6b:86:fb:69:80:5b:
         4d:ea:cb:2c:16:82:27:ef:2b:00:af:e9:42:6e:2c:73:1c:c1:
         f6:4b:d3:74:f7:d0:7c:af:4d:0a:92:40:d5:db:4e:bd:0f:0b:
         1b:69:2f:e6:38:32:67:e6:1c:1b:c4:94:49:73:41:aa:0c:d7:
         a1:62:c7:f9:5b:f8:56:f8:5e:8a:df:9c:ef:6d:a1:ae:d1:de:
         16:bb:05:91:a8:cf:c2:98:37:f5:95:20:f4:25:4e:5c:8d:9d:
         11:1e:15:ff:97:23:7e:7d:40:e5:e7:89:6f:b4:42:53:77:69:
         8e:b2:2d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:58:18 2026 by rpki-client