Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5f810d-b2dc-4cc0-8f8a-87e52f2933ad/1/YmzaiC-KLTqUZufABPVEEO-Dras.mft
File:                     YmzaiC-KLTqUZufABPVEEO-Dras.mft (raw, json)
Hash identifier:          dsNdjS2Z27Af88B7tPx4I/9zBGtGVVGeWSy/eQTmw6g=
Subject key identifier:   34:EF:AE:8F:29:EC:04:B4:C5:33:1D:BD:69:AA:D4:19:D1:4E:09:C8
Authority key identifier: 62:6C:DA:88:2F:8A:2D:3A:94:66:E7:C0:04:F5:44:10:EF:83:AD:AB
Certificate issuer:       /CN=626cda882f8a2d3a9466e7c004f54410ef83adab
Certificate serial:       019FF7FF169C4BF8C13E45C6DA4D65CE45C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YmzaiC-KLTqUZufABPVEEO-Dras.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/5f810d-b2dc-4cc0-8f8a-87e52f2933ad/1/YmzaiC-KLTqUZufABPVEEO-Dras.mft
Manifest number:          15
Signing time:             Wed 12 Aug 2026 22:01:57 +0000
Manifest this update:     Wed 12 Aug 2026 22:01:57 +0000
Manifest next update:     Thu 13 Aug 2026 22:01:57 +0000
Files and hashes:         1: TaPTcaQHtpTiKk6L3LVp5BFOkXc.asa (hash: +3830vvKwcHUa2vT9pDGLDHYnV9hdJPoJoELEDn5XPg=)
                          2: YmzaiC-KLTqUZufABPVEEO-Dras.crl (hash: lcn6KJcqEJ0+sma4LOsqwh7ZDz6NQRlKrGtHBvpg6Oc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/5f810d-b2dc-4cc0-8f8a-87e52f2933ad/1/YmzaiC-KLTqUZufABPVEEO-Dras.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/5f810d-b2dc-4cc0-8f8a-87e52f2933ad/1/YmzaiC-KLTqUZufABPVEEO-Dras.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YmzaiC-KLTqUZufABPVEEO-Dras.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 22:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f7:ff:16:9c:4b:f8:c1:3e:45:c6:da:4d:65:ce:45:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=626cda882f8a2d3a9466e7c004f54410ef83adab
        Validity
            Not Before: Aug 12 22:01:57 2026 GMT
            Not After : Aug 13 22:01:57 2026 GMT
        Subject: CN=34efae8f29ec04b4c5331dbd69aad419d14e09c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:27:9d:b2:aa:8f:64:32:d3:46:61:ac:68:32:
                    b2:8c:e7:52:91:9a:7c:66:25:2b:8f:cf:d1:f5:63:
                    17:cc:f5:69:1a:f7:0b:57:62:2a:03:f6:76:2a:fa:
                    2e:28:6c:93:db:15:84:88:2c:4b:33:e2:cf:0d:1e:
                    c9:55:8f:bb:81:62:b6:4c:8e:21:b6:41:d5:b6:13:
                    21:d1:06:46:32:24:18:c3:eb:2c:31:fa:87:b4:f0:
                    64:35:56:13:20:00:62:67:5b:dc:d7:b3:7d:5b:24:
                    20:18:21:3c:55:19:76:16:37:54:5b:6e:15:f8:c1:
                    3d:d2:42:5f:0f:8d:50:ae:61:de:7a:a5:b1:71:4f:
                    04:0a:57:52:09:cb:42:35:c0:2e:5c:60:59:e4:58:
                    67:08:9e:bf:64:26:55:ac:fa:0c:90:3e:d3:4b:0e:
                    93:a8:ae:82:b7:78:65:cd:36:1c:99:86:0a:7d:3a:
                    b1:6c:51:29:c4:b6:a8:cb:89:d8:b4:67:68:cb:25:
                    29:e9:43:08:fd:84:9c:87:65:61:54:1e:86:af:f2:
                    ce:68:7f:d6:d5:4a:e2:75:5f:be:f4:d6:f6:17:d8:
                    7e:53:b6:34:94:f5:c8:ab:06:b4:31:6a:b2:40:a6:
                    aa:6e:9c:6b:69:9e:85:3e:85:2c:0d:ba:cd:1e:5a:
                    3b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EF:AE:8F:29:EC:04:B4:C5:33:1D:BD:69:AA:D4:19:D1:4E:09:C8
            X509v3 Authority Key Identifier:
                keyid:62:6C:DA:88:2F:8A:2D:3A:94:66:E7:C0:04:F5:44:10:EF:83:AD:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmzaiC-KLTqUZufABPVEEO-Dras.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5f810d-b2dc-4cc0-8f8a-87e52f2933ad/1/YmzaiC-KLTqUZufABPVEEO-Dras.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5f810d-b2dc-4cc0-8f8a-87e52f2933ad/1/YmzaiC-KLTqUZufABPVEEO-Dras.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:93:f9:9d:1a:ab:aa:51:a9:6d:ba:b0:72:a1:91:19:ec:98:
         3a:dd:a4:d1:cb:b6:93:1f:b9:e9:b3:ac:6b:91:5f:7f:13:7c:
         ad:b4:a9:e6:86:02:60:1d:e5:d1:90:91:c5:66:bd:f4:9d:bb:
         80:e9:3f:22:d4:ca:16:bb:7a:54:2d:22:3e:bd:7c:d5:66:70:
         d2:1f:ae:74:b1:2e:74:a8:b9:b7:1b:2d:b9:f1:02:91:6a:09:
         6e:b8:3f:d6:36:d4:50:a4:08:59:ce:c3:60:8d:97:31:ce:40:
         df:8d:72:ee:8e:5d:ff:da:6d:22:6e:60:04:55:36:7d:93:2d:
         ac:d8:a1:f8:d5:7d:08:61:cf:16:7f:7e:c3:c4:b4:8a:a5:d3:
         81:4f:de:7c:53:3d:71:46:7b:fb:ae:d0:81:cb:2d:b6:fa:9a:
         9a:9f:1f:84:38:89:e4:eb:93:f2:b0:7a:5e:a5:35:49:38:bf:
         55:43:7c:69:73:96:d5:04:24:78:e5:3d:de:ae:e1:e0:c5:32:
         7f:f4:1b:07:d4:fa:21:d5:6b:a2:d5:f1:60:fb:a3:c2:26:c2:
         84:5f:a2:04:60:5e:fc:e5:78:f3:a9:d8:6a:6f:48:57:e5:65:
         1d:2b:be:81:81:bf:56:21:15:6c:3f:4d:ea:d3:5b:7b:5c:e8:
         db:a7:f0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:46:18 2026 by rpki-client