Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
File:                     YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft (raw, json)
Hash identifier:          EfsKDUNWZS/DTdG+K1XNas/PYCjFBDZtPyoxxPv51LA=
Subject key identifier:   5D:A6:8F:C2:1B:82:6D:5D:92:5D:47:BA:7D:93:C6:0F:19:7B:9C:CF
Authority key identifier: 61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3
Certificate issuer:       /CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
Certificate serial:       01A00326717F1EFA39A8BF3943AAE4468D18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
Manifest number:          10C7
Signing time:             Sat 15 Aug 2026 02:00:46 +0000
Manifest this update:     Sat 15 Aug 2026 02:00:46 +0000
Manifest next update:     Sun 16 Aug 2026 02:00:46 +0000
Files and hashes:         1: I4n1Z5BQu1kmVPGStt7EINgtNQo.roa (hash: 92IJ0Usz+iM/W03HDiR4wCcyFbR1eoC3A00tDG+zs24=)
                          2: YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl (hash: rxquWyUImnLu2w62v5ftW67TeyHBcKPS4EovdDpWixk=)
                          3: ddYTOcOmB0o9lm0zE3zt2oO1U1g.roa (hash: hdKwDZDL26ytQwp0S8rV3Crlq4ka+0ODIpyfMgGOmSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:26:71:7f:1e:fa:39:a8:bf:39:43:aa:e4:46:8d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
        Validity
            Not Before: Aug 15 02:00:46 2026 GMT
            Not After : Aug 16 02:00:46 2026 GMT
        Subject: CN=5da68fc21b826d5d925d47ba7d93c60f197b9ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4b:48:3a:fe:c4:1a:6b:34:42:2b:f7:3f:db:
                    42:77:70:10:a2:00:f5:bd:6d:80:0b:16:db:42:82:
                    8d:23:23:16:03:cf:07:1f:42:a5:a9:96:a8:a9:47:
                    e7:26:2a:fd:52:8f:37:cd:77:70:80:29:b2:76:c6:
                    43:cd:43:90:f5:b5:b6:3b:80:ca:05:fa:77:3c:38:
                    55:30:33:d7:1a:38:36:a3:3f:e7:9f:8e:ab:d2:8d:
                    f9:eb:31:09:ac:8b:82:e5:61:83:4c:48:07:c4:b4:
                    7a:32:89:6e:be:f6:1a:3f:55:18:72:ef:1f:b2:d6:
                    cf:f5:5f:4b:5e:8a:9c:99:84:83:6d:29:af:fb:95:
                    01:ad:ff:42:de:7e:c4:d0:9f:42:81:b0:9a:66:18:
                    e2:35:d8:52:3c:66:fe:7f:4d:05:03:cd:da:d6:c1:
                    1d:0d:28:8d:9c:91:90:55:dd:90:e0:b9:e0:89:4c:
                    f4:da:9e:fc:7b:8c:c5:df:bb:04:b3:97:8b:3d:73:
                    15:65:a9:5f:53:f0:81:c3:c7:d2:30:94:36:1b:77:
                    3f:17:b2:93:57:fa:f7:86:30:a6:69:0e:12:9b:05:
                    f3:a4:2d:b9:da:c3:bc:1d:b0:0a:48:86:75:ec:28:
                    1a:f9:0c:42:6e:05:c8:42:c9:79:3e:5a:32:51:c8:
                    9a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A6:8F:C2:1B:82:6D:5D:92:5D:47:BA:7D:93:C6:0F:19:7B:9C:CF
            X509v3 Authority Key Identifier:
                keyid:61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:2c:59:eb:4c:46:de:86:22:79:60:29:5a:48:a0:78:9f:53:
         59:30:36:00:f1:5a:e5:8f:b4:1e:5e:e6:f2:0f:ff:30:84:0f:
         9e:9c:40:04:c0:af:69:bb:14:c4:f7:35:2f:19:41:34:6f:9f:
         57:02:8c:6e:11:51:a6:b9:42:7e:31:cb:bb:08:b7:6c:33:70:
         c6:6a:bf:83:ad:12:d1:bf:4e:81:fc:33:26:aa:81:b6:8b:80:
         04:4f:29:e9:cf:5f:72:55:17:f8:43:54:d6:34:e6:0b:86:5c:
         36:37:57:44:c3:3c:c9:2e:7f:a2:c1:d0:17:e4:52:8b:ac:5c:
         47:84:5a:f4:9a:e1:4d:f3:7c:8e:b4:5f:5d:8f:11:17:65:73:
         fd:e1:71:11:36:34:c4:23:95:09:fb:cc:32:d5:35:a2:ac:d8:
         ba:b7:93:7c:3f:67:90:b7:6a:14:ae:59:1d:25:fa:e2:1e:32:
         83:c5:2d:27:a3:8a:49:d1:75:38:38:1a:84:e2:57:4a:31:60:
         28:0a:a4:ef:60:53:ce:8a:a6:5c:3d:7a:ca:55:2b:04:80:91:
         5e:75:dd:38:ba:10:aa:ad:f3:13:4e:a2:c5:58:99:bb:a2:e5:
         02:37:20:1b:5a:ec:e8:bf:78:e6:87:9b:a4:1b:24:f8:c0:4a:
         fd:3c:ed:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADJnF/Hvo5qL85Q6rkRo0YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMGY4Zjk5ZmNhNjlhYTczZjg4YTUzMWRiNDZkMjI4YTdl
MmMzZDMwHhcNMjYwODE1MDIwMDQ2WhcNMjYwODE2MDIwMDQ2WjAzMTEwLwYDVQQD
Eyg1ZGE2OGZjMjFiODI2ZDVkOTI1ZDQ3YmE3ZDkzYzYwZjE5N2I5Y2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ktIOv7EGms0Qiv3P9tCd3AQogD1
vW2ACxbbQoKNIyMWA88HH0KlqZaoqUfnJir9Uo83zXdwgCmydsZDzUOQ9bW2O4DK
Bfp3PDhVMDPXGjg2oz/nn46r0o356zEJrIuC5WGDTEgHxLR6MoluvvYaP1UYcu8f
stbP9V9LXoqcmYSDbSmv+5UBrf9C3n7E0J9CgbCaZhjiNdhSPGb+f00FA83a1sEd
DSiNnJGQVd2Q4LngiUz02p78e4zF37sEs5eLPXMVZalfU/CBw8fSMJQ2G3c/F7KT
V/r3hjCmaQ4SmwXzpC252sO8HbAKSIZ17Cga+QxCbgXIQsl5PloyUciaqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2mj8Ibgm1dkl1Hun2Txg8Ze5zPMB8GA1UdIwQY
MBaAFGEPj5n8ppqnP4ilMdtG0iin4sPTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVEtUG1meW1tcWNfaUtVeDIwYlNLS2ZpdzlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kOTQ2ODEtYWJlNi00ZTIzLTliOTgt
NzlhMGE1MjhlMGE0LzEvWVEtUG1meW1tcWNfaUtVeDIwYlNLS2ZpdzlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9kOTQ2ODEtYWJlNi00ZTIzLTliOTgtNzlhMGE1MjhlMGE0
LzEvWVEtUG1meW1tcWNfaUtVeDIwYlNLS2ZpdzlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEyxZ60xG
3oYieWApWkigeJ9TWTA2APFa5Y+0Hl7m8g//MIQPnpxABMCvabsUxPc1LxlBNG+f
VwKMbhFRprlCfjHLuwi3bDNwxmq/g60S0b9OgfwzJqqBtouABE8p6c9fclUX+ENU
1jTmC4ZcNjdXRMM8yS5/osHQF+RSi6xcR4Ra9JrhTfN8jrRfXY8RF2Vz/eFxETY0
xCOVCfvMMtU1oqzYureTfD9nkLdqFK5ZHSX64h4yg8UtJ6OKSdF1ODgahOJXSjFg
KAqk72BTzoqmXD16ylUrBICRXnXdOLoQqq3zE06ixViZu6LlAjcgG1rs6L945oeb
pBsk+MBK/Tzt4Q==
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:37:46 2026 by rpki-client