Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
File:                     yZE15YfLs4vh63tt6cSAKdBF0nM.mft (raw, json)
Hash identifier:          kM+jL/wV3mHeyG52VAeQ9GF0jKOGj/14aRBdzFNijOs=
Subject key identifier:   5A:D3:B3:BE:AF:89:51:38:5B:8D:42:27:46:C7:5D:E5:D5:32:89:43
Authority key identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
Certificate issuer:       /CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Certificate serial:       019CE55A83C5BBCC8A9E97485F982798CD3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
Manifest number:          05B8
Signing time:             Fri 13 Mar 2026 04:00:40 +0000
Manifest this update:     Fri 13 Mar 2026 04:00:40 +0000
Manifest next update:     Sat 14 Mar 2026 04:00:40 +0000
Files and hashes:         1: Y5vED9_-DcGMaaxbEGOZus8MwVQ.roa (hash: G2iq16qjDO2AmE19u6Mdnenb3I/Kvxji/seB7NO5CFY=)
                          2: gKtjzQMB06yDauEd9zVELt-Geqk.roa (hash: ON0aCx2enNugObjEPugyFFI494d+5BTaKTrArKDjsJI=)
                          3: sLC5YO5xONWk4v-wyFAtQfaIubc.roa (hash: RnXdiuhlkryBeMlrPXhg5Tc0W7BvyjnuvWyXURl030k=)
                          4: yZE15YfLs4vh63tt6cSAKdBF0nM.crl (hash: 3L1F6LUV5l1acborszeYFMtJSstFGkWgTRzWzTaddVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:5a:83:c5:bb:cc:8a:9e:97:48:5f:98:27:98:cd:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c99135e587cbb38be1eb7b6de9c48029d045d273
        Validity
            Not Before: Mar 13 04:00:40 2026 GMT
            Not After : Mar 14 04:00:40 2026 GMT
        Subject: CN=5ad3b3beaf8951385b8d422746c75de5d5328943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:95:82:74:47:64:f2:9f:76:38:82:16:09:c1:
                    17:65:53:ec:dd:5d:52:df:7a:28:a5:7e:ac:79:bd:
                    32:77:26:ec:13:ee:97:51:32:c7:c1:c7:23:f7:d7:
                    85:45:a0:1c:da:b9:4c:11:5b:71:fc:70:27:98:2b:
                    24:ac:58:17:a9:db:da:0f:7d:cb:5a:43:81:76:9d:
                    46:8e:74:5c:fe:ba:5f:e4:0f:1e:7a:a7:ca:c5:a6:
                    6c:9a:e7:e6:b7:3f:1d:d0:ef:14:a7:46:3c:12:2c:
                    bc:7e:1d:ca:42:3a:f9:2c:a4:7e:a7:6c:10:b6:bb:
                    ea:4c:a5:e3:8d:76:14:d8:a5:99:59:14:22:61:00:
                    19:49:5b:46:af:69:53:52:57:ba:30:bc:cf:76:df:
                    d8:b9:38:50:ba:21:8b:d9:96:22:9d:48:a6:37:a4:
                    ea:79:23:9f:59:d3:eb:67:77:72:70:ec:2c:e0:a9:
                    c5:d2:f3:09:d7:ce:f4:70:08:be:ba:49:39:b9:d0:
                    3a:5e:05:54:09:82:cf:f8:1f:24:99:2e:c6:51:62:
                    fd:71:13:fe:e8:f9:1b:11:ea:51:e3:2d:88:19:1d:
                    a7:b7:24:9e:c6:aa:9c:98:64:5e:ae:6b:c9:42:b9:
                    50:2f:65:f7:19:30:98:0b:69:c2:04:b0:01:91:eb:
                    1f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D3:B3:BE:AF:89:51:38:5B:8D:42:27:46:C7:5D:E5:D5:32:89:43
            X509v3 Authority Key Identifier:
                keyid:C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:3f:7a:09:12:1b:25:78:79:fa:b3:c9:e2:38:78:52:de:6d:
         fb:d6:67:4d:17:82:b9:e6:d1:b1:a0:79:c6:3e:2c:21:7c:80:
         9c:df:9b:c2:3d:97:2a:94:9c:f8:34:41:35:a9:29:c6:21:1c:
         af:54:46:c5:31:68:e8:9b:c7:d1:72:cb:ed:9f:ad:0f:dc:b2:
         3b:8f:41:dd:3b:a5:2d:74:c5:56:0e:da:35:a0:33:70:24:75:
         e2:74:8b:25:81:12:c1:67:f1:b8:41:b1:e4:ee:59:2a:ee:88:
         27:de:87:f0:a6:af:96:5d:b6:de:7c:9b:fc:11:5b:14:0a:c2:
         b9:69:0e:b0:4e:68:59:54:6e:28:00:3f:be:03:df:36:fd:64:
         f9:d4:1f:38:2a:f6:d9:af:21:3c:53:06:7e:3c:5b:b8:84:38:
         80:f1:9b:96:2d:d4:30:a1:5d:17:31:95:61:dd:10:09:05:b6:
         59:6a:dd:07:62:93:e6:82:49:92:78:3f:a7:d0:c9:0f:23:06:
         4a:18:3b:39:df:03:a1:84:c7:e7:7f:f6:d6:e5:1e:d2:40:3b:
         94:0b:b5:4b:b4:3f:e8:8d:0f:87:e7:70:ad:00:13:f4:f4:ba:
         13:1c:e5:50:42:d9:e8:5f:7b:64:82:60:08:d2:83:e5:4d:5a:
         2a:20:b8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:57:00 2026 by rpki-client