Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
File:                     yYuCXzbpzDMDFclA3oAMurzjOXs.mft (raw, json)
Hash identifier:          qPV0okanAzDpmEpbgwJDG8OeNudn5HKyrrSxj0K1src=
Subject key identifier:   45:FC:E5:19:EB:54:93:4C:93:4B:CD:D5:D2:D3:58:E6:92:21:3F:E8
Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Certificate issuer:       /CN=c98b825f36e9cc330315c940de800cbabce3397b
Certificate serial:       019E3117D5853FE6069DADDF1978A5377715
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
Manifest number:          1522
Signing time:             Sat 16 May 2026 14:01:45 +0000
Manifest this update:     Sat 16 May 2026 14:01:45 +0000
Manifest next update:     Sun 17 May 2026 14:01:45 +0000
Files and hashes:         1: BIg9g8urjWzblnNO_lVEgCU_0L4.roa (hash: Zkf0cuxdTPBJNDfyoYR/TqE/qjZVNjVMgcTyzgopEr0=)
                          2: Iphm7z7updBWRc2PNItoZmhVxuU.roa (hash: ld3zzmRGDXodfmUypvYiol82dEtF61c0SzZg6YzCfrA=)
                          3: T0TpEfENHz0bxlptxB0nFINW90A.roa (hash: TVxTNouu1BfDbucKooEPdLrXN8aLRFVGM4/IuDaxZE0=)
                          4: hRup2JJMWBOF-WiIMoiCnCzzApo.roa (hash: /227YrF7k3BWfB+D58mu+onRUSZxRqZuv9vNnJFuS4M=)
                          5: tSkM6kNefyzWcq-Fe_mE4IRCVaE.roa (hash: 2epHrxdOpaEpNiQeQg138M3TB4rHHEC4AOBSXw7Qyrk=)
                          6: yYuCXzbpzDMDFclA3oAMurzjOXs.crl (hash: Sr8hYSUXx1m/bRCMih6Ck9g37DFtNDmk6GI6z0A6uU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:d5:85:3f:e6:06:9d:ad:df:19:78:a5:37:77:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b
        Validity
            Not Before: May 16 14:01:45 2026 GMT
            Not After : May 17 14:01:45 2026 GMT
        Subject: CN=45fce519eb54934c934bcdd5d2d358e692213fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:78:a8:69:4d:97:cf:e4:4b:fb:84:d4:c8:45:
                    20:b4:04:90:cc:9a:49:2f:97:de:5b:ef:b1:36:61:
                    3d:5d:82:6b:df:4c:a4:a0:60:cf:55:43:ed:3d:34:
                    92:18:1b:6b:57:6b:ad:8f:b0:2d:36:04:03:8e:cd:
                    84:6d:9f:67:e9:e5:e8:20:29:ee:79:89:85:70:8c:
                    f5:6a:58:c6:7d:47:3b:01:ba:44:ce:ee:f1:a2:ea:
                    8e:87:e7:a5:99:b0:0f:c3:f7:bb:4b:68:e5:a5:73:
                    fc:c9:d8:f7:08:d0:fe:50:0f:97:19:9a:00:94:95:
                    6d:5b:be:c1:b0:79:9a:f1:b8:98:13:5a:1f:16:39:
                    8e:09:d1:db:d9:7b:6f:6a:e1:f7:53:6f:f0:51:e1:
                    d7:28:63:78:86:6d:40:78:91:55:6f:45:ea:9d:be:
                    48:a7:3a:ee:28:24:24:28:d3:e9:e2:90:50:f8:96:
                    ca:40:8c:87:3e:ff:9c:ec:c2:4b:b2:8c:b0:42:0a:
                    f2:e7:63:25:d7:99:3a:f4:d9:cb:0f:ea:a0:3d:e7:
                    99:a5:28:08:8f:bf:a6:20:cc:df:fa:9d:2c:38:7c:
                    6e:e1:ce:eb:da:6a:25:f3:e9:64:3a:7c:2c:11:e7:
                    8f:f1:a7:2f:e6:ff:8b:0a:ad:5b:24:a4:15:2f:e7:
                    e1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FC:E5:19:EB:54:93:4C:93:4B:CD:D5:D2:D3:58:E6:92:21:3F:E8
            X509v3 Authority Key Identifier:
                keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:1c:c0:c8:58:7f:0f:cb:2b:9f:1c:d1:e7:51:a2:dd:09:e5:
         ff:01:c6:bf:76:1d:75:ad:3a:bb:3e:5b:39:fd:db:61:2c:61:
         48:05:06:25:da:e4:1b:24:ab:38:05:5c:ce:f1:03:78:25:4b:
         1a:f5:31:a1:3c:a0:cc:f0:10:d7:d5:fa:f8:12:68:f7:c7:37:
         75:a4:3c:26:a8:c1:56:67:5e:59:bb:b5:7b:b6:22:25:d5:24:
         71:03:01:9f:92:c5:d1:91:3b:33:57:fd:a3:6c:61:21:c4:8e:
         05:73:bc:bf:5a:7b:3e:71:35:2a:ae:55:e5:66:16:0f:e4:bf:
         e2:a0:e1:e8:4c:48:e7:d9:57:2b:6b:e6:eb:74:38:0f:d4:f5:
         e9:7a:54:7f:93:74:b0:05:8d:05:36:40:d5:53:5d:d2:88:94:
         a0:67:e1:a9:eb:97:53:f6:64:48:02:59:57:41:08:14:30:a5:
         e0:ab:7f:35:2d:af:37:dd:1c:42:34:cb:be:54:6c:d0:b4:68:
         99:b2:ca:93:db:94:6c:1e:d7:67:12:ce:87:06:82:42:6c:85:
         27:46:68:1b:ab:3f:99:8d:3e:99:30:29:50:7e:cb:5b:36:bc:
         29:92:b6:61:ea:c1:18:99:5c:91:5b:ab:a0:b4:6c:83:1b:68:
         a5:14:4d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:12:50 2026 by rpki-client