Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
File:                     YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft (raw, json)
Hash identifier:          dcBNNp6hSvB9gJz4Nn8wkxRne9SzQGF+a9TdcsnQggg=
Subject key identifier:   7C:49:18:BD:6B:44:43:AC:2D:66:0B:5F:D4:16:C2:A6:FA:29:04:39
Authority key identifier: 60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
Certificate issuer:       /CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Certificate serial:       019FF8DABD06B105A74C8A3F68DB9EBA13BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
Manifest number:          19FB
Signing time:             Thu 13 Aug 2026 02:01:52 +0000
Manifest this update:     Thu 13 Aug 2026 02:01:52 +0000
Manifest next update:     Fri 14 Aug 2026 02:01:52 +0000
Files and hashes:         1: YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl (hash: qEQNZKcwduafKlZHvyL6SuOpXcsLLHOcXz3wIvcZlzE=)
                          2: gGpmcsWE1eZyNMee1NRlA1nhhvY.roa (hash: /R+1mDGIJPwiUjgMqzEayU7QgZR187J1ACp6m3yLtqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:da:bd:06:b1:05:a7:4c:8a:3f:68:db:9e:ba:13:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60077f22c6428bc889b365b006cb5248d4bf61cf
        Validity
            Not Before: Aug 13 02:01:52 2026 GMT
            Not After : Aug 14 02:01:52 2026 GMT
        Subject: CN=7c4918bd6b4443ac2d660b5fd416c2a6fa290439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1e:5f:bd:a7:48:a6:2e:da:b1:33:5d:39:8a:
                    1c:e7:21:65:04:4c:41:29:a0:e2:fa:e0:99:78:d0:
                    35:a2:a9:0a:81:75:a1:ce:a5:a6:6e:d8:e7:29:af:
                    82:cb:58:94:f9:f0:98:67:aa:2a:91:75:5e:a7:9d:
                    40:0d:54:7a:8e:a4:59:d1:6a:31:68:de:6e:0a:ef:
                    63:af:53:6d:a3:e9:42:8b:47:d0:d7:79:13:dc:34:
                    b6:f0:0c:ab:28:ec:a3:69:45:36:ff:15:6b:11:e3:
                    82:c1:aa:59:5a:81:4a:36:64:ce:96:1b:ee:da:a7:
                    bf:a4:22:76:fa:cd:28:21:9a:f6:09:35:9b:b8:c6:
                    cb:d0:3e:00:19:83:51:2f:f2:cb:ad:44:02:d3:3a:
                    6b:db:b1:8d:16:ae:5f:02:03:ab:29:d3:78:29:82:
                    8d:74:a4:59:da:9b:53:61:19:35:d5:59:d4:36:38:
                    14:ee:9c:12:64:3f:80:c2:bf:a1:41:db:75:aa:cb:
                    8f:8a:bb:ad:dd:88:7d:00:1f:b6:dc:0f:b2:bd:2d:
                    53:f2:24:85:ef:ee:fa:61:45:b1:2b:b2:2c:e0:75:
                    c4:67:78:62:68:84:a4:96:90:34:d8:cc:4d:ad:75:
                    3c:45:e9:cd:b2:22:e2:72:39:f8:11:90:06:f7:0b:
                    64:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:49:18:BD:6B:44:43:AC:2D:66:0B:5F:D4:16:C2:A6:FA:29:04:39
            X509v3 Authority Key Identifier:
                keyid:60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:59:d6:77:bb:3f:cc:90:3a:60:9a:11:af:07:ff:59:b4:31:
         60:91:9c:a7:22:a8:10:2e:65:c0:3a:e3:1f:a8:72:e2:c1:3d:
         5b:46:19:cc:f1:03:31:f6:c2:b0:3a:1c:44:d0:f8:50:56:dc:
         3b:57:d8:71:b7:a4:76:46:87:04:3f:da:d6:cb:31:aa:fe:44:
         e8:74:cf:3b:55:c0:32:5f:03:87:d9:d8:51:b8:50:17:4f:c1:
         a7:65:e8:61:75:14:91:24:2c:e9:c0:58:4c:e4:23:49:99:ec:
         4a:55:30:2e:32:20:8e:c0:93:ed:55:06:c0:03:5b:ad:a0:90:
         19:92:af:c7:e1:ba:2c:f5:a3:84:ef:df:87:9c:ce:63:6d:13:
         43:f5:df:a2:ab:40:02:44:da:ed:ab:48:c3:f5:4e:3f:8f:d6:
         2c:39:33:99:36:b1:a3:73:5d:f1:ce:28:fd:fb:08:6a:3a:59:
         0f:bc:b9:03:d0:30:56:3a:c5:8e:ad:e6:b6:cc:ae:55:f3:3f:
         da:89:63:6b:73:12:a6:bb:59:81:5b:a9:51:7d:a1:a7:e6:48:
         d9:a8:5b:77:23:c8:73:fe:64:00:e0:56:b2:23:6a:84:48:64:
         1a:7c:4e:59:46:ab:49:25:13:d8:cd:99:02:73:b8:c5:f4:63:
         85:14:4f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:49:15 2026 by rpki-client