Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dfabbb-90c2-4952-863f-8a4e22c67c1b/1/ykYrWgu5S_tgEDzbR_j3P_hUvX8.mft
File:                     ykYrWgu5S_tgEDzbR_j3P_hUvX8.mft (raw, json)
Hash identifier:          6UYp9Vixc2sMMPVZbF8hz7AbCs7teoj9reDRhPRDoXU=
Subject key identifier:   09:01:22:B9:F1:DC:69:D5:3D:75:D2:20:B3:A8:1D:61:36:23:77:67
Authority key identifier: CA:46:2B:5A:0B:B9:4B:FB:60:10:3C:DB:47:F8:F7:3F:F8:54:BD:7F
Certificate issuer:       /CN=ca462b5a0bb94bfb60103cdb47f8f73ff854bd7f
Certificate serial:       019FF9484E6A8EF432F2AE8CBEA1BAC15D58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ykYrWgu5S_tgEDzbR_j3P_hUvX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/dfabbb-90c2-4952-863f-8a4e22c67c1b/1/ykYrWgu5S_tgEDzbR_j3P_hUvX8.mft
Manifest number:          19
Signing time:             Thu 13 Aug 2026 04:01:33 +0000
Manifest this update:     Thu 13 Aug 2026 04:01:33 +0000
Manifest next update:     Fri 14 Aug 2026 04:01:33 +0000
Files and hashes:         1: kreK31bWj9Kt73FWDrN8qoVfn88.asa (hash: vFd9hz4WotAoFupyA3QjozQYouc372Io1o8mIznJt0M=)
                          2: ykYrWgu5S_tgEDzbR_j3P_hUvX8.crl (hash: c9i5nSbk5H71LgU+eyfArQcdyUaloCpc1GkHKWbq5Ss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/dfabbb-90c2-4952-863f-8a4e22c67c1b/1/ykYrWgu5S_tgEDzbR_j3P_hUvX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/dfabbb-90c2-4952-863f-8a4e22c67c1b/1/ykYrWgu5S_tgEDzbR_j3P_hUvX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ykYrWgu5S_tgEDzbR_j3P_hUvX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:48:4e:6a:8e:f4:32:f2:ae:8c:be:a1:ba:c1:5d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca462b5a0bb94bfb60103cdb47f8f73ff854bd7f
        Validity
            Not Before: Aug 13 04:01:33 2026 GMT
            Not After : Aug 14 04:01:33 2026 GMT
        Subject: CN=090122b9f1dc69d53d75d220b3a81d6136237767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e4:20:36:e9:2e:90:ad:e0:fc:70:ca:f0:c1:
                    f7:4b:42:ec:ea:68:95:39:1b:a0:d9:7f:fa:ea:9d:
                    55:a2:2c:f9:cc:57:f4:ca:5d:d1:79:6a:bb:58:8b:
                    69:6f:b1:31:e0:d3:34:dd:2a:ce:85:4c:2d:18:ef:
                    91:36:91:56:6b:77:81:eb:eb:f4:a1:05:19:e8:95:
                    8e:5d:10:7f:a0:af:27:37:ae:15:6f:9b:76:12:27:
                    f7:73:24:dc:3a:e4:dc:b2:ef:89:43:5b:f9:73:a9:
                    9b:cc:75:1c:e1:e5:ea:0f:54:f8:7d:00:92:fe:5d:
                    03:a5:32:ae:ec:e9:46:c3:6d:61:67:6e:ca:3c:43:
                    97:c3:d7:da:39:c7:f5:95:ee:76:3c:1f:55:29:d6:
                    32:d1:69:b8:3b:6a:83:cc:07:6c:71:d5:02:56:87:
                    9e:f2:21:e4:a0:4f:d2:96:75:df:53:ef:e0:4b:93:
                    e4:55:8c:35:ed:f9:21:d3:1d:0e:e4:f5:f2:40:69:
                    61:e7:0b:fc:65:da:bc:db:3f:9b:75:53:fd:8b:52:
                    c1:d4:0d:3c:62:ca:f0:25:ff:fa:58:f0:ec:83:92:
                    d4:2d:cb:a9:f0:e4:50:ae:3e:c9:c3:b8:8a:32:db:
                    8b:89:24:e8:ee:16:8d:49:93:a4:0f:94:cd:09:42:
                    ee:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:01:22:B9:F1:DC:69:D5:3D:75:D2:20:B3:A8:1D:61:36:23:77:67
            X509v3 Authority Key Identifier:
                keyid:CA:46:2B:5A:0B:B9:4B:FB:60:10:3C:DB:47:F8:F7:3F:F8:54:BD:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykYrWgu5S_tgEDzbR_j3P_hUvX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dfabbb-90c2-4952-863f-8a4e22c67c1b/1/ykYrWgu5S_tgEDzbR_j3P_hUvX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dfabbb-90c2-4952-863f-8a4e22c67c1b/1/ykYrWgu5S_tgEDzbR_j3P_hUvX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:27:fb:be:80:40:10:9b:14:84:74:af:7c:ef:cb:be:39:e7:
         a1:31:fe:78:d5:01:8a:08:fd:2e:a3:1f:03:dd:b4:3a:54:fd:
         76:46:8a:54:51:17:69:3d:86:94:cf:68:c5:d4:4c:ba:db:eb:
         99:61:e5:88:c6:10:d0:a3:7c:8c:a3:69:62:0a:fb:cd:57:d2:
         db:1d:39:51:19:44:5c:36:45:00:f4:b6:b5:6b:b1:12:8a:64:
         a1:d0:80:29:ca:46:18:20:c3:c8:d8:3a:d9:3a:26:41:d1:48:
         80:88:3e:e9:d5:2c:95:98:9b:7f:77:b8:5d:92:23:33:dd:17:
         07:5a:61:36:30:4e:e1:be:0c:35:09:90:b6:54:43:82:85:d1:
         77:d5:0e:3e:ea:d8:8a:64:89:cd:fc:85:67:d0:41:82:ef:59:
         3a:52:c8:dd:2f:c7:4c:6e:ee:9e:c3:51:6b:bb:56:f2:04:a9:
         fb:cd:1e:a7:51:96:de:12:90:96:80:8f:80:30:ad:5e:a0:53:
         b5:04:31:ae:c2:c6:da:68:3c:08:02:ac:6b:fe:47:3e:d9:08:
         2c:06:cf:a7:7e:6c:53:02:ee:c2:df:3f:37:5b:ac:5a:35:8c:
         40:f0:6e:65:8b:5f:dc:05:19:5f:23:96:36:2b:8a:e0:56:69:
         5f:bb:67:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:45:42 2026 by rpki-client