Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
File:                     yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json)
Hash identifier:          2SyG/YkGKvBr45kaQo3kz2LzR7mSYxYJr2TJjFcoo0k=
Subject key identifier:   E1:75:A4:4B:3C:CC:6B:88:98:D1:99:AE:B4:81:D7:EB:72:54:A7:BD
Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
Certificate issuer:       /CN=c8184a4505b0576058fd333059bff153ae6ead5b
Certificate serial:       01A08F44E8D0B0A3CB0A20D3E0748A1E5E57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
Manifest number:          117F
Signing time:             Fri 11 Sep 2026 07:00:52 +0000
Manifest this update:     Fri 11 Sep 2026 07:00:52 +0000
Manifest next update:     Sat 12 Sep 2026 07:00:52 +0000
Files and hashes:         1: WZPWcS6HaU2HzVdr7DRxZ-pjOJE.roa (hash: F58q4gWz10PJi3pePWbZTjvTAbHmgaZfqkLlGVghmM0=)
                          2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: daSTl4sNGCd1nfiP5lL3jXWcqgTZUcvNwmdqeDlNykA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 07:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8f:44:e8:d0:b0:a3:cb:0a:20:d3:e0:74:8a:1e:5e:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b
        Validity
            Not Before: Sep 11 07:00:52 2026 GMT
            Not After : Sep 12 07:00:52 2026 GMT
        Subject: CN=e175a44b3ccc6b8898d199aeb481d7eb7254a7bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3b:02:18:a8:8b:e4:ca:e1:cb:af:c4:6e:aa:
                    0e:a2:0a:f2:45:9f:88:39:a8:b0:d5:d6:f7:26:ca:
                    11:1c:fd:68:ff:64:1b:ac:69:cb:c5:74:a8:24:6b:
                    48:91:c2:f1:bf:5f:38:d4:fa:ab:db:f4:70:54:8b:
                    6e:7f:06:8d:fa:73:a7:42:3d:aa:e7:52:2f:10:02:
                    08:e9:d9:2f:1f:86:ba:10:9c:0d:b4:7b:53:fe:3a:
                    af:87:ca:71:69:e5:3f:75:38:c8:a5:0b:92:52:65:
                    a3:e5:68:27:60:0e:79:b9:1a:b0:ff:db:f9:b9:69:
                    6d:92:95:0a:0b:cc:16:72:18:8b:d2:cd:41:ee:86:
                    77:b7:9b:09:b1:6f:ac:c6:6c:9d:4f:b0:b9:8e:aa:
                    7d:af:0f:21:c3:6c:80:c4:09:c7:f6:d4:1d:3a:ed:
                    b0:a0:89:f4:ca:1f:e7:b6:4f:b2:d9:77:48:72:97:
                    b3:34:f7:40:c7:d6:1e:50:4f:ae:38:65:1f:01:25:
                    56:bb:41:b8:ec:ba:2c:f6:06:7b:c5:1b:7a:cc:71:
                    1d:a0:94:09:e0:37:50:3f:05:14:88:ee:60:19:6d:
                    c5:cd:38:a8:d2:81:8a:ee:b0:16:8a:2d:62:fe:7f:
                    62:72:84:72:6f:eb:a8:01:0d:2e:9a:aa:93:64:8e:
                    2c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:75:A4:4B:3C:CC:6B:88:98:D1:99:AE:B4:81:D7:EB:72:54:A7:BD
            X509v3 Authority Key Identifier:
                keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:11:00:52:81:89:37:65:7e:dc:fd:05:79:44:ef:15:72:67:
         93:4e:3b:e3:6a:ad:53:b3:38:9a:8b:fb:2b:8d:ea:30:89:1e:
         0b:ed:31:f1:c0:85:3a:a8:d5:26:14:08:ed:8f:fd:c3:80:51:
         6d:81:22:60:78:03:93:cc:c9:3c:be:f1:08:ef:9e:11:9a:2b:
         b5:43:be:0c:58:c9:1b:bd:9b:30:01:e8:e7:17:61:1f:72:77:
         cd:9f:33:23:99:12:7e:d4:eb:0f:b4:3c:8e:94:2a:bd:05:ed:
         24:a3:85:25:ec:7b:80:39:f3:48:07:a6:ad:e4:1e:06:09:a3:
         db:9d:14:ea:73:35:b6:e2:b2:d9:34:27:68:3e:ce:87:32:7e:
         02:47:27:21:c2:cf:9d:9f:ef:4e:1f:52:20:cf:93:86:31:3f:
         bf:a4:e2:5c:8d:77:58:5e:62:6c:29:22:78:d7:6a:c1:55:3c:
         cf:7d:b1:35:77:ff:c3:ef:45:c6:4b:74:49:1e:d9:84:1a:2e:
         7e:b1:05:c5:bb:ef:10:cf:90:4c:47:59:bf:a2:4c:d4:cf:c4:
         00:d9:b3:ad:65:2f:4b:ac:cc:99:df:3a:32:a8:0a:75:b9:0f:
         2c:fe:02:19:74:ee:16:d8:9a:de:cf:ac:bd:78:b2:01:69:60:
         42:72:be:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCPROjQsKPLCiDT4HSKHl5XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MTg0YTQ1MDViMDU3NjA1OGZkMzMzMDU5YmZmMTUzYWU2
ZWFkNWIwHhcNMjYwOTExMDcwMDUyWhcNMjYwOTEyMDcwMDUyWjAzMTEwLwYDVQQD
EyhlMTc1YTQ0YjNjY2M2Yjg4OThkMTk5YWViNDgxZDdlYjcyNTRhN2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDsCGKiL5Mrhy6/EbqoOogryRZ+I
Oaiw1db3JsoRHP1o/2QbrGnLxXSoJGtIkcLxv1841Pqr2/RwVItufwaN+nOnQj2q
51IvEAII6dkvH4a6EJwNtHtT/jqvh8pxaeU/dTjIpQuSUmWj5WgnYA55uRqw/9v5
uWltkpUKC8wWchiL0s1B7oZ3t5sJsW+sxmydT7C5jqp9rw8hw2yAxAnH9tQdOu2w
oIn0yh/ntk+y2XdIcpezNPdAx9YeUE+uOGUfASVWu0G47Los9gZ7xRt6zHEdoJQJ
4DdQPwUUiO5gGW3FzTio0oGK7rAWii1i/n9icoRyb+uoAQ0umqqTZI4sCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOF1pEs8zGuImNGZrrSB1+tyVKe9MB8GA1UdIwQY
MBaAFMgYSkUFsFdgWP0zMFm/8VOubq1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lYWRhZDMtY2VkOS00MWZhLThlNWYt
NWZiZjMzYWNkODNlLzEveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9lYWRhZDMtY2VkOS00MWZhLThlNWYtNWZiZjMzYWNkODNl
LzEveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJREAUoGJ
N2V+3P0FeUTvFXJnk04742qtU7M4mov7K43qMIkeC+0x8cCFOqjVJhQI7Y/9w4BR
bYEiYHgDk8zJPL7xCO+eEZortUO+DFjJG72bMAHo5xdhH3J3zZ8zI5kSftTrD7Q8
jpQqvQXtJKOFJex7gDnzSAemreQeBgmj250U6nM1tuKy2TQnaD7OhzJ+AkcnIcLP
nZ/vTh9SIM+ThjE/v6TiXI13WF5ibCkieNdqwVU8z32xNXf/w+9Fxkt0SR7ZhBou
frEFxbvvEM+QTEdZv6JM1M/EANmzrWUvS6zMmd86MqgKdbkPLP4CGXTuFtia3s+s
vXiyAWlgQnK+KQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 10:37:10 2026 by rpki-client