Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
File:                     YuXk_tXMr2A7RmhKIVU86GJu-cE.mft (raw, json)
Hash identifier:          5bKBKC+lejNFpuUBiyAQe1TLdT0fwsioOh88Kt5gXw4=
Subject key identifier:   51:52:12:96:59:5A:AB:2E:9E:F0:5A:C0:5B:E8:62:7A:D6:F6:F8:C2
Authority key identifier: 62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1
Certificate issuer:       /CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1
Certificate serial:       019CB6938D2DAFB51A769C8F79B3E99D0F9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
Manifest number:          053A
Signing time:             Wed 04 Mar 2026 02:00:49 +0000
Manifest this update:     Wed 04 Mar 2026 02:00:49 +0000
Manifest next update:     Thu 05 Mar 2026 02:00:49 +0000
Files and hashes:         1: XM22lUkUyDJ8Y3AGGlOkUpDIClc.roa (hash: j+lZ3JP7tJ/OyRDzGpaBVcn4tscvRA8KWejUZg/xsIM=)
                          2: YuXk_tXMr2A7RmhKIVU86GJu-cE.crl (hash: 9W+daGYhbeGv4qCT77Tzk07qbjD4SGPEZwGvbnmbRKc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Mar 2026 22:42:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b6:93:8d:2d:af:b5:1a:76:9c:8f:79:b3:e9:9d:0f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1
        Validity
            Not Before: Mar  4 02:00:49 2026 GMT
            Not After : Mar  5 02:00:49 2026 GMT
        Subject: CN=51521296595aab2e9ef05ac05be8627ad6f6f8c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:90:7e:88:93:45:ac:d5:ba:9e:ee:40:7f:13:
                    02:ec:77:d8:c4:4f:1c:c8:b3:78:56:42:e9:e7:f0:
                    c7:44:0f:b9:88:39:f4:84:71:7c:22:da:d3:a5:85:
                    86:70:d4:8e:ad:9d:83:65:70:42:0b:60:b8:69:19:
                    3e:59:83:40:83:aa:8a:e8:22:fe:26:69:be:d3:23:
                    27:2d:1e:e0:43:42:bc:71:4d:38:9e:87:2b:08:93:
                    03:79:46:67:9e:3d:9c:7e:7e:20:e0:de:a5:d9:3f:
                    5c:f7:f7:68:fc:da:3f:6e:ea:af:89:39:f3:d5:40:
                    88:68:f8:13:11:ff:13:43:4b:16:d5:dc:58:64:e7:
                    1a:c1:c1:43:dc:a2:ae:6b:7e:e8:ec:a6:22:cb:23:
                    bf:68:ac:b5:62:0b:d4:02:68:9b:f6:8b:6d:59:13:
                    96:4a:f9:88:b6:8f:a9:ef:ad:58:2e:3c:42:8e:5e:
                    36:64:47:3f:28:d1:27:ef:7a:c9:7c:0e:1c:f9:43:
                    6f:1d:ac:94:11:0c:1c:9a:5c:97:5d:a1:7e:87:b0:
                    47:c0:fc:bc:27:12:9e:f1:52:46:85:fb:34:bd:c9:
                    7c:37:14:a5:0f:2d:27:f0:c4:68:e8:58:dc:a7:b7:
                    a2:3a:ae:55:dc:d0:ba:e8:5b:ea:81:12:91:8e:ab:
                    da:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:52:12:96:59:5A:AB:2E:9E:F0:5A:C0:5B:E8:62:7A:D6:F6:F8:C2
            X509v3 Authority Key Identifier:
                keyid:62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:3e:5b:70:fe:19:22:f2:cc:fb:27:36:fe:51:4f:2b:73:40:
         33:ae:54:31:4f:80:0d:48:3b:10:64:ae:56:21:1a:bf:09:0b:
         96:61:ef:4e:47:ae:5e:88:53:10:7f:0f:78:15:b8:7b:98:de:
         11:47:fb:11:ae:02:91:22:bc:0e:6c:4a:31:9a:71:96:fb:d4:
         f6:3f:0b:44:6f:2b:66:87:07:b5:c7:5c:f8:72:76:9b:a5:f1:
         40:17:27:6d:b9:43:cb:0e:1b:d7:c0:e9:91:28:be:cd:18:de:
         af:08:33:e7:0f:0f:a6:d5:50:2e:04:f0:b2:f7:65:c8:c5:8f:
         e5:fe:b0:bd:f3:54:7f:ee:dd:f6:11:a0:ce:41:d2:b4:37:ff:
         0f:a7:b7:de:a7:77:14:0f:86:4d:ce:58:85:f5:b0:76:19:a4:
         c0:9d:1d:cb:d9:ea:d6:f0:10:65:f6:32:0b:49:f8:07:29:23:
         a2:62:7c:44:57:a3:17:9f:46:0d:d4:45:19:32:7c:6f:23:ba:
         2f:27:9c:66:c1:85:96:11:27:86:b3:a4:2c:81:6d:d0:39:02:
         25:5b:36:5d:49:db:af:d7:86:ce:90:24:0e:30:b1:7d:6c:da:
         88:05:ef:e9:ae:41:4d:cc:0f:c6:25:1e:b8:a0:db:0c:b2:2c:
         d1:d1:78:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 06:39:31 2026 by rpki-client