Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
File:                     y9dF6_zsOC3yUsL3UNtkj08DSr8.mft (raw, json)
Hash identifier:          6P9qy6OesYixoySYzjdz7MeQHdD4xPsK/YuGj2WnwX0=
Subject key identifier:   00:E6:23:EB:5A:C4:9C:03:5D:D3:BB:C6:B3:7C:37:E1:C4:4F:20:F7
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Certificate issuer:       /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial:       019FA11667975E773A8B824EE377C00DAAED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
Manifest number:          1355
Signing time:             Mon 27 Jul 2026 01:00:27 +0000
Manifest this update:     Mon 27 Jul 2026 01:00:27 +0000
Manifest next update:     Tue 28 Jul 2026 01:00:27 +0000
Files and hashes:         1: EpTBQMmX_i98nrHenbAZIilledc.roa (hash: Mmlh/uw7vdVSt2pl5ZQV5w5RtXcHFW6Nm/2ktZMB/gY=)
                          2: qnYWJnu7gDjyMxkFI7kZdjJxDKg.asa (hash: zefrDIFHWwKYZMYE/LvGlSTFwHDJ72INmt0VL/GYS4E=)
                          3: y9dF6_zsOC3yUsL3UNtkj08DSr8.crl (hash: 1ZStjGiHupgQGwgo3m3logBzN/BjxE800EVndHdGEzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:16:67:97:5e:77:3a:8b:82:4e:e3:77:c0:0d:aa:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
        Validity
            Not Before: Jul 27 01:00:27 2026 GMT
            Not After : Jul 28 01:00:27 2026 GMT
        Subject: CN=00e623eb5ac49c035dd3bbc6b37c37e1c44f20f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:60:c1:fd:07:29:f9:17:ba:b7:d3:fe:ed:49:
                    4a:bd:1a:d8:3a:a8:2e:44:37:39:87:93:42:5b:65:
                    4e:4c:25:17:87:e1:b2:be:0f:91:fe:31:86:18:ea:
                    91:f8:db:76:7c:a5:73:48:c3:1d:09:20:ad:5c:14:
                    2a:bc:60:0d:3d:c4:58:25:0e:1f:6f:e4:a1:7c:11:
                    75:a3:ef:4d:85:8a:ae:ae:8c:68:18:ea:77:e9:ca:
                    f3:b1:3f:4f:ee:e5:e1:3d:49:d1:8f:88:85:6a:51:
                    a1:6b:3f:d3:2d:16:b4:94:03:44:dd:95:26:13:49:
                    56:d3:1f:f6:1b:18:59:ac:c0:bd:fa:18:33:49:20:
                    64:d2:db:72:6a:85:1c:a2:40:fd:3d:9b:f6:e4:bf:
                    7c:12:23:e3:45:33:a1:ea:81:a3:63:ca:36:7a:8a:
                    a3:1a:40:79:21:40:96:97:76:6d:1c:a7:d8:d1:a0:
                    1b:72:c9:c6:80:6a:7f:db:d8:1b:49:b2:9f:78:a6:
                    66:ac:ad:8c:2e:16:90:09:76:bf:c9:13:e0:28:24:
                    7c:86:30:57:54:ea:07:86:aa:7d:d9:65:97:49:3d:
                    46:da:d9:7f:36:9b:d1:e4:38:66:1e:a0:5b:56:2a:
                    c2:f4:af:c4:e5:a3:71:50:03:92:bc:64:22:05:c0:
                    f9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E6:23:EB:5A:C4:9C:03:5D:D3:BB:C6:B3:7C:37:E1:C4:4F:20:F7
            X509v3 Authority Key Identifier:
                keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:bc:94:7c:d4:08:25:23:c0:1e:14:e2:22:35:6f:af:ba:82:
         19:f9:08:b1:3e:bb:7f:be:6c:1e:a6:0c:83:c2:2f:28:0c:69:
         d0:c2:27:dc:bd:96:89:b0:22:c1:52:dc:c0:e0:ec:07:04:db:
         98:65:02:2a:2b:93:5d:6a:0a:9c:fe:ce:e9:c8:ac:51:54:8f:
         1a:a4:ad:68:21:62:ef:5c:59:67:e2:56:3d:90:ad:6b:35:1c:
         4d:bb:f8:82:12:24:3d:d6:27:29:c8:83:6c:05:fc:e9:e0:86:
         d0:f4:40:ac:d9:a1:a0:d6:71:7c:cc:2f:04:1c:3f:d6:62:90:
         08:b8:02:a8:70:00:60:f9:11:77:69:82:20:0c:90:75:a8:a9:
         a6:cf:04:e1:12:a2:6f:bb:9f:03:56:fe:64:bc:b6:a5:64:76:
         d1:e4:63:55:77:3b:ba:a9:86:93:3e:45:66:17:15:d9:0c:02:
         73:d6:f1:8f:4a:2a:2b:00:52:d1:2a:11:88:73:25:be:bf:3e:
         6a:86:b8:81:c7:22:1a:2b:dd:05:c2:82:06:36:2b:94:6d:47:
         34:ec:f9:3d:c7:7d:97:0e:11:a3:e1:11:f2:71:36:10:2f:86:
         49:ab:78:9e:a1:ce:25:cb:00:da:98:56:15:62:20:4e:08:4a:
         a2:22:df:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:29 2026 by rpki-client