Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
File:                     YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft (raw, json)
Hash identifier:          qcanXIgLb4HEsfUcPLqlmhYKddBfNZuJwlJgh6wMQpE=
Subject key identifier:   4C:0C:EB:6D:E0:91:C3:75:1F:B0:B1:C1:F0:54:AF:8D:43:52:16:A4
Authority key identifier: 63:06:23:02:B4:38:59:23:76:C4:26:4F:49:DC:5E:67:3E:DB:2C:FB
Certificate issuer:       /CN=63062302b438592376c4264f49dc5e673edb2cfb
Certificate serial:       01A181874E6CA3C9F68BA988AA3B84743F70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
Manifest number:          0EB2
Signing time:             Wed 28 Oct 2026 08:01:30 +0000
Manifest this update:     Wed 28 Oct 2026 08:01:30 +0000
Manifest next update:     Thu 29 Oct 2026 08:01:30 +0000
Files and hashes:         1: MIQkIHdhTszjAc1iDyqPsWr05vI.asa (hash: q47vAO9a9jNCz72lMsICdLEfl+TVo350DLcpbspUzro=)
                          2: YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl (hash: MHbMqtaCGRSbCKNiEkY/XaNSZ6sKD1wyLMy6GwxfSMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 08:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:81:87:4e:6c:a3:c9:f6:8b:a9:88:aa:3b:84:74:3f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63062302b438592376c4264f49dc5e673edb2cfb
        Validity
            Not Before: Oct 28 08:01:30 2026 GMT
            Not After : Oct 29 08:01:30 2026 GMT
        Subject: CN=4c0ceb6de091c3751fb0b1c1f054af8d435216a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:90:5b:94:44:d7:93:07:aa:92:8c:29:d1:2a:
                    c4:96:67:99:25:6d:97:0c:fc:5d:61:47:78:74:4d:
                    ad:77:67:89:f6:1f:95:dc:1c:ad:89:46:e0:e2:99:
                    0a:9a:c4:26:81:f4:cc:5e:49:7d:bb:e1:04:2b:34:
                    1c:8e:86:e6:70:1d:10:43:f0:3b:d5:c8:d9:7f:61:
                    ad:ec:17:02:2c:ed:b7:2a:d9:de:ab:1a:b0:68:8a:
                    7a:cf:51:85:69:28:a5:fd:1f:42:a7:5d:0f:5e:eb:
                    60:3d:e4:46:c6:93:8b:4e:96:0f:91:9c:9c:91:b5:
                    8e:2a:23:20:b6:9b:90:18:4c:89:81:7d:60:23:bf:
                    92:a0:c4:72:1a:2b:40:67:44:7c:50:2d:d2:f8:16:
                    90:ca:f5:70:cc:a4:c5:b7:ea:84:df:43:7c:bb:77:
                    24:25:9d:2e:c2:0d:15:25:4b:7d:6d:9c:0d:b1:24:
                    e4:b0:bc:83:39:c0:57:1f:f8:04:e6:d6:ff:95:99:
                    da:a3:b1:54:5e:eb:24:fb:c7:5f:0b:8c:b2:c6:19:
                    2d:99:08:53:5a:40:1b:1b:9c:41:d8:30:67:c7:f7:
                    e9:cf:41:e1:98:a6:7f:62:9b:a0:9c:86:77:ed:1f:
                    a6:a4:f6:bf:2f:fd:90:50:52:6a:ac:ff:f4:ec:24:
                    15:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0C:EB:6D:E0:91:C3:75:1F:B0:B1:C1:F0:54:AF:8D:43:52:16:A4
            X509v3 Authority Key Identifier:
                keyid:63:06:23:02:B4:38:59:23:76:C4:26:4F:49:DC:5E:67:3E:DB:2C:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:1e:04:26:e3:67:21:41:1a:d9:ca:63:9e:cf:36:9d:b9:ed:
         b8:f7:e8:a4:57:c5:fe:04:09:ff:f7:bd:c3:f0:86:e4:96:e8:
         07:ed:3f:c9:c3:bc:91:0e:32:86:ba:f2:f8:1a:b8:01:ef:5a:
         a3:aa:a0:06:4e:8b:a4:ec:88:de:7c:b7:8d:d7:c0:c6:e5:b0:
         aa:a4:fa:6f:16:39:96:e1:2c:1d:2a:c2:3a:13:98:4f:e1:59:
         99:e2:4a:b2:e9:8b:93:25:16:c0:3e:c5:2c:98:a7:4c:25:67:
         c5:b6:b1:d9:f6:1f:bf:4b:7e:8f:6a:71:8f:40:63:e3:6e:b0:
         d8:4f:95:5d:ba:95:bc:9b:83:2a:3e:e6:43:0e:30:5b:5c:f6:
         57:a4:4c:04:cc:63:28:ca:8a:2a:83:5d:cb:62:6d:26:d1:f6:
         e0:0e:51:9c:81:dd:35:0b:81:b0:05:de:c1:17:32:fe:bf:e5:
         3e:73:d1:54:ba:b6:88:83:27:3c:25:f4:74:97:56:59:6d:83:
         bb:ff:cf:9b:ca:96:ee:5c:40:49:05:a7:57:2a:a1:15:47:3b:
         d4:a0:97:77:55:24:ff:b5:9c:cd:cc:f1:bc:5d:9d:a8:78:84:
         ee:4b:4b:fb:2b:b1:3d:a8:3a:99:71:6f:67:17:15:17:9a:d2:
         80:5b:37:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGBh05so8n2i6mIqjuEdD9wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMDYyMzAyYjQzODU5MjM3NmM0MjY0ZjQ5ZGM1ZTY3M2Vk
YjJjZmIwHhcNMjYxMDI4MDgwMTMwWhcNMjYxMDI5MDgwMTMwWjAzMTEwLwYDVQQD
Eyg0YzBjZWI2ZGUwOTFjMzc1MWZiMGIxYzFmMDU0YWY4ZDQzNTIxNmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5BblETXkweqkowp0SrElmeZJW2X
DPxdYUd4dE2td2eJ9h+V3BytiUbg4pkKmsQmgfTMXkl9u+EEKzQcjobmcB0QQ/A7
1cjZf2Gt7BcCLO23KtneqxqwaIp6z1GFaSil/R9Cp10PXutgPeRGxpOLTpYPkZyc
kbWOKiMgtpuQGEyJgX1gI7+SoMRyGitAZ0R8UC3S+BaQyvVwzKTFt+qE30N8u3ck
JZ0uwg0VJUt9bZwNsSTksLyDOcBXH/gE5tb/lZnao7FUXusk+8dfC4yyxhktmQhT
WkAbG5xB2DBnx/fpz0HhmKZ/YpugnIZ37R+mpPa/L/2QUFJqrP/07CQV2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwM623gkcN1H7CxwfBUr41DUhakMB8GA1UdIwQY
MBaAFGMGIwK0OFkjdsQmT0ncXmc+2yz7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXdZakFyUTRXU04yeENaUFNkeGVaejdiTFBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84YmRkMDAtNzk0My00NTg0LTg0ZjMt
M2IyNDJkNTRlNzg4LzEvWXdZakFyUTRXU04yeENaUFNkeGVaejdiTFBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi84YmRkMDAtNzk0My00NTg0LTg0ZjMtM2IyNDJkNTRlNzg4
LzEvWXdZakFyUTRXU04yeENaUFNkeGVaejdiTFBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJB4EJuNn
IUEa2cpjns82nbntuPfopFfF/gQJ//e9w/CG5JboB+0/ycO8kQ4yhrry+Bq4Ae9a
o6qgBk6LpOyI3ny3jdfAxuWwqqT6bxY5luEsHSrCOhOYT+FZmeJKsumLkyUWwD7F
LJinTCVnxbax2fYfv0t+j2pxj0Bj426w2E+VXbqVvJuDKj7mQw4wW1z2V6RMBMxj
KMqKKoNdy2JtJtH24A5RnIHdNQuBsAXewRcy/r/lPnPRVLq2iIMnPCX0dJdWWW2D
u//Pm8qW7lxASQWnVyqhFUc71KCXd1Uk/7WczczxvF2dqHiE7ktL+yuxPag6mXFv
ZxcVF5rSgFs3vA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 18:48:10 2026 by rpki-client