Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
File:                     YLeUkCpc09J4P8wqpLB5H3mld6I.mft (raw, json)
Hash identifier:          5AK8e7ZvQK1yyPX64h32p8XomhG85isR343PNgl5JkA=
Subject key identifier:   76:70:01:62:30:05:AD:F4:E1:CE:3F:08:77:4F:B7:D3:E0:22:6F:B0
Authority key identifier: 60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
Certificate issuer:       /CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Certificate serial:       01A089796F8DAE9A3E60CA87467D6795ED81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
Manifest number:          19F2
Signing time:             Thu 10 Sep 2026 04:00:32 +0000
Manifest this update:     Thu 10 Sep 2026 04:00:32 +0000
Manifest next update:     Fri 11 Sep 2026 04:00:32 +0000
Files and hashes:         1: EQx1wUCuiGcSybnkD5TgNdIBeuo.roa (hash: +Isu6bVHjGg3xsr/3cAHcDSJ6upAxfIWHFQwmfRPNOw=)
                          2: YLeUkCpc09J4P8wqpLB5H3mld6I.crl (hash: sAjSPuZnGrtKK46CfGj/ruymJpXKF/1dbiY0c5cTLOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 04:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:79:6f:8d:ae:9a:3e:60:ca:87:46:7d:67:95:ed:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
        Validity
            Not Before: Sep 10 04:00:32 2026 GMT
            Not After : Sep 11 04:00:32 2026 GMT
        Subject: CN=767001623005adf4e1ce3f08774fb7d3e0226fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:6c:d7:ee:6c:e3:dd:b9:27:4c:63:e9:61:
                    93:7e:0a:01:94:94:f4:a7:41:4a:c0:c8:d0:f9:d9:
                    ca:0a:b3:c9:5b:ed:e0:91:37:40:a8:59:66:94:07:
                    67:0d:37:77:ef:c3:62:9d:ec:6e:0e:63:06:06:0d:
                    a3:68:83:39:dc:40:59:e6:44:d8:eb:3b:6f:3f:fe:
                    41:86:db:08:dc:a4:aa:f8:34:94:b7:31:98:81:7e:
                    10:69:5d:c4:6b:2a:d4:36:07:39:9f:97:54:a3:43:
                    58:77:1b:9b:77:2e:14:ce:d6:f9:2f:e1:62:d5:99:
                    d8:38:fa:25:6e:65:67:f4:55:e3:35:a5:e6:41:ee:
                    e0:9d:44:35:b5:44:56:0e:e9:f5:8b:26:f8:fe:c3:
                    be:86:33:e0:a9:00:89:d0:e6:a8:4c:6e:ea:f5:1f:
                    f9:18:cf:ab:f6:f5:cb:d6:4e:37:c3:60:db:f8:02:
                    89:3c:44:ff:cf:5e:26:c7:94:3e:df:76:49:44:64:
                    c6:7c:30:c2:a9:f0:12:29:fc:cc:7a:c7:f2:b0:a6:
                    58:40:67:c5:b4:b4:ac:11:92:d6:18:ad:fd:c0:17:
                    2c:fb:f2:c7:a5:d9:c0:24:05:46:10:be:af:fc:ab:
                    53:54:3b:01:f5:d7:57:29:cd:04:2b:09:a9:10:83:
                    39:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:70:01:62:30:05:AD:F4:E1:CE:3F:08:77:4F:B7:D3:E0:22:6F:B0
            X509v3 Authority Key Identifier:
                keyid:60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:45:c8:b7:19:14:bf:0b:aa:84:16:5b:a6:43:c5:6e:82:07:
         ee:b1:73:31:27:3b:fd:dc:97:cc:da:c5:59:f3:b9:0a:0e:09:
         fe:25:f0:cc:bc:8a:ed:3f:e6:98:14:7b:17:4a:37:a2:fd:55:
         62:24:f5:14:b8:56:85:33:22:31:18:c6:09:e9:6e:18:f6:f4:
         09:b1:6b:15:ae:1c:bd:b1:1c:b7:da:0e:22:f7:94:06:00:a5:
         89:58:44:3d:4c:c2:ec:d0:7d:f5:24:03:02:f8:f6:f9:38:43:
         41:a6:35:17:1a:8a:04:34:c8:78:dc:05:a0:95:3f:cc:80:79:
         6a:75:e9:f8:06:28:38:14:1f:8c:04:b5:a3:5c:af:73:d6:00:
         53:48:a4:d9:73:10:0c:1f:fd:62:3d:bc:f5:97:f7:6f:0d:25:
         68:0e:b5:ff:a5:32:97:aa:92:39:c2:02:88:50:b1:19:81:3e:
         b3:f9:85:c4:be:09:d9:1b:3b:57:09:1a:3f:e2:e5:3e:b0:ed:
         b3:1d:e6:a4:75:e1:d6:9e:eb:3f:7d:b8:9e:40:84:b4:ef:13:
         a1:93:1d:6b:c3:90:ef:d0:51:c7:49:9d:a5:a4:05:4c:be:3e:
         7f:d4:15:ba:15:73:3a:ac:b3:b2:0d:b8:09:89:21:13:21:d1:
         10:31:c5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:43:37 2026 by rpki-client