Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
File:                     0Yx5_S1sxF7htYD5OgUFxZffbYk.mft (raw, json)
Hash identifier:          uS+HPA7V1SUaUx9LUQhzcKKuEGSpq5NQCcNGNcmU/yA=
Subject key identifier:   62:5C:CC:00:35:CC:90:F4:18:D1:5F:38:3A:B8:E6:B9:B3:95:89:89
Authority key identifier: D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
Certificate issuer:       /CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Certificate serial:       01A0016F548746AD3AE5110FCCAC4C101C8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
Manifest number:          0912
Signing time:             Fri 14 Aug 2026 18:01:08 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:08 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:08 +0000
Files and hashes:         1: 0Yx5_S1sxF7htYD5OgUFxZffbYk.crl (hash: dRtZ92aHgtDBzhi+l09E2h/tsKJ1lCpXwP0E1MQevxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:54:87:46:ad:3a:e5:11:0f:cc:ac:4c:10:1c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
        Validity
            Not Before: Aug 14 18:01:08 2026 GMT
            Not After : Aug 15 18:01:08 2026 GMT
        Subject: CN=625ccc0035cc90f418d15f383ab8e6b9b3958989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:21:95:e7:23:cf:15:3f:f2:8f:98:8a:b0:5c:
                    54:b1:57:98:a9:f9:94:8d:ab:16:69:bf:d0:6f:32:
                    cc:34:82:42:ea:50:3f:e4:d2:c8:81:d2:f6:b4:0b:
                    e8:91:1e:dd:4f:7c:17:52:aa:f7:43:73:4d:20:8d:
                    37:2e:92:5d:1d:8e:e8:82:c6:8a:db:22:5f:8a:0f:
                    e6:bb:33:16:87:d2:cc:f0:96:67:05:e3:f9:0e:ac:
                    ee:82:2d:06:d5:7b:f3:32:83:ac:ff:3b:bf:52:41:
                    fb:54:55:c7:26:ee:e4:fc:b6:9d:bc:bd:55:38:1f:
                    24:95:51:e8:35:e4:02:2d:39:db:a9:5a:ec:38:ef:
                    cb:2e:1c:86:75:54:a4:74:c7:b3:f8:f4:00:f9:ee:
                    84:96:d1:d9:d2:fa:a9:fe:0f:0c:b8:8d:1d:d9:0c:
                    31:d6:95:7b:c5:16:c0:4f:9c:71:10:9d:62:98:1c:
                    0c:38:cc:92:d5:f6:62:97:61:ae:20:85:a2:3d:ff:
                    8e:1b:c8:1d:98:80:5f:56:85:e6:03:79:7c:a1:91:
                    a3:57:1e:6b:cc:1b:08:87:ca:b0:cc:26:e4:9e:fd:
                    e7:55:60:d5:7a:10:03:7b:25:f0:2b:a3:e5:32:62:
                    e1:60:4b:8c:00:8e:15:59:62:00:4a:a0:ec:d7:46:
                    cc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5C:CC:00:35:CC:90:F4:18:D1:5F:38:3A:B8:E6:B9:B3:95:89:89
            X509v3 Authority Key Identifier:
                keyid:D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:7f:00:9d:7d:36:98:e2:58:5e:fa:b0:02:1d:45:d6:07:74:
         73:be:c3:7e:cd:fc:71:a8:9a:b3:57:fc:23:cf:83:1f:0e:53:
         33:43:f2:d9:50:f6:72:1b:94:9a:07:2b:e3:6d:39:f3:58:80:
         88:69:1f:b4:cd:03:e8:23:46:6e:ee:79:31:45:16:a0:88:7f:
         4d:1d:0f:2b:ce:d8:04:03:1c:8c:86:34:75:ab:ae:93:c0:8f:
         09:43:85:e9:2b:22:c5:32:e5:3c:32:e5:66:aa:70:d0:7e:67:
         6f:df:68:43:2a:f9:80:11:9d:32:cc:8a:99:43:74:f7:bf:de:
         f0:08:12:11:8f:84:0b:ef:dd:f1:2c:5c:ae:fe:ca:35:42:7e:
         cd:a5:49:f9:61:4e:68:6b:2d:c4:c7:c9:25:81:72:97:5c:22:
         a6:6b:35:29:e2:83:9d:e4:10:f2:42:31:ac:d7:e2:01:c1:89:
         a1:50:fd:53:03:15:81:d2:6d:6e:ee:f3:a5:92:ff:6d:86:a2:
         1c:d9:ae:74:1c:e0:90:74:3b:69:5f:66:f6:ee:c4:60:17:c6:
         eb:7f:c0:e2:3b:6c:ed:72:7c:10:a0:9c:1d:53:2e:86:42:27:
         dd:94:ba:63:e9:48:85:cc:24:e6:95:0f:3a:1f:0d:7d:88:67:
         25:a8:a4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:09 2026 by rpki-client