Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
File:                     YTIzl9blKd_wbHzxTRdg1ucGqm8.mft (raw, json)
Hash identifier:          KMCT+iORu97HTJXXT0yrdlDS3opMGC4YRgtMTqDowqw=
Subject key identifier:   63:E7:C8:E5:9D:C9:E7:E2:9F:F6:FE:B5:F4:4A:C6:2E:DF:83:04:7E
Authority key identifier: 61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
Certificate issuer:       /CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Certificate serial:       01A04160CEA7DD9FC6428D251B3D3F54A86C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
Manifest number:          06E0
Signing time:             Thu 27 Aug 2026 04:00:58 +0000
Manifest this update:     Thu 27 Aug 2026 04:00:58 +0000
Manifest next update:     Fri 28 Aug 2026 04:00:58 +0000
Files and hashes:         1: TVT4_OBKA-2I4FrIkhh2iW24oPw.roa (hash: U1OVtJgMOPc/4XYbv8bLSVgA0GMg+CX+suR8Va/RqoY=)
                          2: YTIzl9blKd_wbHzxTRdg1ucGqm8.crl (hash: J6Tnb71PjpbRmbKWNvQw6JnBEKIjB1KhMnEM+ezpEI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:41:60:ce:a7:dd:9f:c6:42:8d:25:1b:3d:3f:54:a8:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
        Validity
            Not Before: Aug 27 04:00:58 2026 GMT
            Not After : Aug 28 04:00:58 2026 GMT
        Subject: CN=63e7c8e59dc9e7e29ff6feb5f44ac62edf83047e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7b:94:c4:e7:4c:63:8c:0c:40:cc:18:71:e0:
                    1b:7c:e3:b5:10:ac:2d:aa:8f:25:52:f3:6b:07:b4:
                    9d:03:4e:1a:92:fb:6b:06:1d:73:1a:82:4a:6c:61:
                    d3:11:47:72:bc:09:27:6b:06:32:56:33:88:d0:ff:
                    5b:9f:f0:5d:be:56:a3:60:96:cc:52:b3:61:3e:f7:
                    ab:24:04:77:02:d4:d7:ee:ec:06:e2:6a:80:54:6a:
                    9e:d7:1f:69:ce:61:8b:e6:9c:26:71:4b:39:1c:2b:
                    16:cc:be:c3:32:98:10:cf:66:d5:a2:ae:82:12:b1:
                    79:cf:88:38:dd:1c:19:0f:6d:56:f0:ec:5f:77:88:
                    2a:7b:b1:59:eb:ce:d6:07:58:db:0a:cd:0b:58:21:
                    5f:1c:af:18:6a:bb:4e:c7:56:77:df:c3:3f:8e:92:
                    8e:44:01:02:44:e8:6a:62:99:02:2f:6f:6f:f3:f4:
                    f8:45:c1:4b:f2:db:d7:91:ef:b7:dd:51:31:df:23:
                    3d:cf:37:c2:81:96:92:38:1c:30:bd:e2:98:de:3b:
                    ad:08:51:42:ac:fd:d3:96:ec:4f:5e:64:e6:34:5c:
                    31:17:36:e4:7d:b2:80:3f:f1:94:ef:02:4d:89:41:
                    8a:f6:f2:9f:c7:0b:ac:51:a9:f8:32:13:ca:a5:d0:
                    2f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E7:C8:E5:9D:C9:E7:E2:9F:F6:FE:B5:F4:4A:C6:2E:DF:83:04:7E
            X509v3 Authority Key Identifier:
                keyid:61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:ef:cc:07:0f:8b:f1:b7:13:b7:33:46:27:70:58:f7:d4:5b:
         4f:01:2f:aa:7c:44:29:df:3e:56:6c:a2:46:3e:95:b8:68:63:
         2d:21:0d:e9:7e:1d:1a:3d:08:dc:cd:90:4b:4a:07:2c:97:5f:
         64:da:b1:5f:43:2b:85:75:e7:8c:06:95:86:61:5f:c4:f5:25:
         5d:2e:43:10:2b:f5:70:cf:36:7f:d4:61:4e:5a:e3:41:6c:34:
         2c:df:ab:19:d9:44:24:82:03:7d:22:ab:c8:6a:d4:c9:24:2b:
         a0:4c:e5:61:77:29:ba:5d:58:70:a5:de:16:f4:23:fe:25:27:
         2b:aa:9b:d6:ea:be:cf:f9:e4:f9:6c:80:79:eb:e2:e2:b2:74:
         91:76:2c:c0:49:5a:dd:e0:7e:dd:0f:12:c8:f6:24:e7:ce:d1:
         c3:ac:94:8c:d0:83:2e:f9:05:bd:b7:d6:67:8b:e8:c6:cc:a3:
         d5:c9:11:2f:4b:49:a3:bd:b3:2f:36:16:b2:da:fb:6e:7b:ee:
         75:a5:fc:f2:fb:13:16:b6:b7:d2:de:ef:9e:e1:ea:1d:72:c8:
         2d:9d:0a:04:7f:17:7c:4b:63:9d:07:fd:f2:bf:5f:81:d7:30:
         a3:34:1a:90:b1:d4:a4:3a:bc:c7:97:1f:6c:2d:81:b7:76:dd:
         ce:98:85:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:56:07 2026 by rpki-client