Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
File:                     ygBGolNBzREDtgzOC5nqN1S6XEE.mft (raw, json)
Hash identifier:          Xn9DAw3VSOQj4KRNzig0ibUBv/7/vuXVsx2afTObaik=
Subject key identifier:   C9:53:15:BA:A4:FD:63:06:BF:BA:8E:06:76:11:F8:5F:11:75:5B:AD
Authority key identifier: CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41
Certificate issuer:       /CN=ca0046a25341cd1103b60cce0b99ea3754ba5c41
Certificate serial:       019FA14D33685EB1143801EBE5A275E9B4E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
Manifest number:          06C8
Signing time:             Mon 27 Jul 2026 02:00:18 +0000
Manifest this update:     Mon 27 Jul 2026 02:00:18 +0000
Manifest next update:     Tue 28 Jul 2026 02:00:18 +0000
Files and hashes:         1: stNqzIw6qQRyW22hrj_jya1vgPM.roa (hash: R7iZW3oZGdaZLmvsasGhYvRkXeTvpYwH54Of8otwpTw=)
                          2: ygBGolNBzREDtgzOC5nqN1S6XEE.crl (hash: WVI7dNqpt4xrNwc4I1pMVNCqlgNqnfhq1WIAz6nKLX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4d:33:68:5e:b1:14:38:01:eb:e5:a2:75:e9:b4:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca0046a25341cd1103b60cce0b99ea3754ba5c41
        Validity
            Not Before: Jul 27 02:00:18 2026 GMT
            Not After : Jul 28 02:00:18 2026 GMT
        Subject: CN=c95315baa4fd6306bfba8e067611f85f11755bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:17:a9:a1:51:b1:29:58:db:81:e2:4f:21:e5:
                    a1:7b:73:d1:b2:e2:55:07:93:08:93:05:4a:55:c2:
                    bb:f1:d2:98:d0:ce:85:1d:e0:fd:45:a6:9c:b4:e0:
                    3f:9d:08:45:a9:15:59:06:be:60:cb:cc:3b:3c:b1:
                    29:57:45:17:54:87:7c:ba:c4:7f:95:58:14:9a:e4:
                    7d:fc:3c:08:90:2f:a9:8d:6d:d9:e7:a7:ae:5e:12:
                    42:65:45:57:3e:5a:db:eb:ea:6d:85:d7:b3:8e:d8:
                    94:85:a0:53:52:93:34:14:84:5f:17:4b:1b:51:ce:
                    d7:b6:0e:da:48:d3:ae:81:4d:73:76:32:e4:f7:e1:
                    89:23:15:68:80:d0:72:eb:42:86:26:01:06:50:89:
                    fb:a5:11:5a:d7:0f:6e:05:3c:b8:c1:71:dc:4e:c6:
                    c8:d6:71:84:b8:94:36:ed:c1:a2:75:c5:0c:67:9d:
                    a6:ea:0b:7d:38:69:1b:9d:6d:53:3b:41:a1:2f:09:
                    8f:1b:11:b0:dc:4f:d4:cc:68:b2:8a:cc:52:15:00:
                    68:43:e9:61:23:e3:c6:67:d6:64:18:59:15:ee:9e:
                    34:80:7e:1a:6f:19:19:99:2f:1a:85:68:f0:f1:06:
                    ff:e1:7d:88:7c:09:d1:2f:c5:d4:bd:f2:0b:10:b1:
                    80:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:53:15:BA:A4:FD:63:06:BF:BA:8E:06:76:11:F8:5F:11:75:5B:AD
            X509v3 Authority Key Identifier:
                keyid:CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ed:e3:8f:51:b9:3f:3f:14:e0:c9:b7:c3:89:a4:56:15:b4:
         1f:27:e2:a2:a3:12:06:84:27:fb:50:4d:29:5c:28:15:90:a6:
         d8:e0:f6:5c:f6:f2:63:a2:7d:06:f9:0d:ac:bf:5f:c3:4a:62:
         9e:51:47:8b:e2:52:dd:5b:10:ce:8c:b5:ae:51:e1:8c:7e:8a:
         0c:a4:21:ea:69:81:9b:9a:94:1f:21:16:5b:9c:61:91:f9:6a:
         db:1a:ad:66:ea:55:20:a8:a7:7d:0a:24:7c:99:e0:c5:05:50:
         00:59:08:7d:66:54:ed:34:ba:85:1f:4a:1c:3b:e1:39:8b:07:
         c0:48:88:a4:6b:a6:15:a4:f8:b0:94:96:e4:da:db:0a:cf:9e:
         f0:18:c2:9d:9e:cb:44:de:98:9d:02:3e:dd:23:d8:83:cc:25:
         c4:59:c2:c2:7c:e2:5a:7d:e4:ce:8b:24:fa:31:0e:f7:8a:68:
         74:9e:3c:e9:5b:e9:78:ae:d8:da:de:ef:f4:08:69:a9:2d:24:
         98:2e:a6:31:27:d1:1f:95:14:92:e3:0d:00:ea:3b:31:68:18:
         6c:66:a3:22:8b:91:28:ab:11:da:37:ec:bf:88:7d:36:11:63:
         48:0c:69:44:40:c9:e0:38:20:22:b1:25:fa:07:14:bc:07:07:
         68:75:bb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:05:45 2026 by rpki-client