Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft
File:                     YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft (raw, json)
Hash identifier:          ZIFhwadynQSdF8ebWnfQqwZ0rBIgUc9g0kkUDsZQxFY=
Subject key identifier:   19:C1:15:D6:07:AE:04:93:28:BF:68:74:C1:46:AA:1B:CC:5C:98:56
Authority key identifier: 62:23:F5:64:16:3F:64:EA:F1:E1:AD:A6:D6:68:CA:D5:9D:5A:B0:A3
Certificate issuer:       /CN=6223f564163f64eaf1e1ada6d668cad59d5ab0a3
Certificate serial:       019E2C9545B8D878A1E431FC60F399B5927A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft
Manifest number:          0189
Signing time:             Fri 15 May 2026 17:00:40 +0000
Manifest this update:     Fri 15 May 2026 17:00:40 +0000
Manifest next update:     Sat 16 May 2026 17:00:40 +0000
Files and hashes:         1: YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl (hash: jZIjakV/bDvLSiYJ6EbPb9+EYxwO0OsGdfsThHx3Xvg=)
                          2: nURomofbDgSrxYM0O1_tcq9RI08.roa (hash: tbGTgdyklPOm5IjmielhkBjtWa6HmczItFnGfm4z+A8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2c:95:45:b8:d8:78:a1:e4:31:fc:60:f3:99:b5:92:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6223f564163f64eaf1e1ada6d668cad59d5ab0a3
        Validity
            Not Before: May 15 17:00:40 2026 GMT
            Not After : May 16 17:00:40 2026 GMT
        Subject: CN=19c115d607ae049328bf6874c146aa1bcc5c9856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:80:1b:9b:e7:af:b8:bd:57:75:11:b3:1d:79:
                    06:4c:79:55:6b:19:3e:f5:ad:61:ac:f4:9b:23:90:
                    99:83:f0:90:56:41:6c:2d:07:9f:0a:e0:59:17:98:
                    bc:c2:9d:a4:91:34:ff:ab:26:b6:f3:7f:6d:21:c2:
                    c3:df:0b:ac:2d:fe:ce:ac:68:f4:3c:11:24:c3:b5:
                    0c:68:34:10:20:aa:e8:2a:71:46:92:b4:0c:0b:c6:
                    50:8b:ad:e2:bc:d2:61:87:d5:43:c0:48:c6:4d:ef:
                    2d:ce:1e:c9:a9:01:6a:4b:6b:80:c2:69:3e:f3:29:
                    bc:84:e5:ca:31:c1:b6:a4:63:12:5d:95:6e:ee:93:
                    6d:93:7c:93:8a:9a:10:a8:36:e0:c9:84:ae:95:0f:
                    1e:ae:c5:af:8b:39:de:28:b7:b0:f5:c4:ec:13:02:
                    45:c6:1d:38:6e:d7:9e:2d:52:b2:0d:33:dd:f3:31:
                    fc:15:83:44:f2:93:4a:53:3f:3e:2e:ef:21:2c:97:
                    c4:c4:b8:fa:fc:be:6b:bb:39:91:5c:a7:b1:2a:40:
                    67:65:cf:31:a9:7a:d3:00:13:e3:44:39:4f:26:02:
                    b3:92:fa:00:b0:10:fe:57:31:c8:6c:6a:c7:fd:4b:
                    4b:55:66:05:fc:02:9e:a7:13:8d:3b:ef:5c:17:fe:
                    8a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C1:15:D6:07:AE:04:93:28:BF:68:74:C1:46:AA:1B:CC:5C:98:56
            X509v3 Authority Key Identifier:
                keyid:62:23:F5:64:16:3F:64:EA:F1:E1:AD:A6:D6:68:CA:D5:9D:5A:B0:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:f7:f5:34:63:3b:ba:3d:db:43:ca:82:fd:95:6d:f3:15:26:
         75:d2:cb:15:fe:73:14:f8:05:bb:fe:8e:3f:15:80:c1:b1:1a:
         cf:59:94:1e:cf:cb:59:0d:e4:db:ee:ca:d6:16:80:f4:3f:e7:
         9a:a9:e8:17:93:13:65:69:fa:f2:b8:40:ef:d5:9a:a7:65:0b:
         61:5c:26:20:47:cb:8f:8a:29:f0:2d:cd:b6:c4:5c:9b:8c:07:
         0a:6b:7c:96:05:19:e9:a0:45:2f:5d:2b:89:7c:35:aa:2e:14:
         68:a1:92:ad:cd:27:b0:04:d1:1a:38:6c:49:30:80:e4:fe:ce:
         0c:b8:03:23:bd:1c:3c:85:c2:46:71:8b:46:62:58:3c:b3:47:
         d0:85:23:c8:72:82:10:46:67:44:a9:13:72:4b:78:3b:d2:d7:
         79:53:86:58:c1:1d:ce:a1:29:1f:37:ed:ff:7d:08:f0:5d:dc:
         86:80:2b:b5:d7:1b:82:2f:f5:79:b6:20:1a:ae:06:19:05:dc:
         0f:03:00:b7:3e:1a:b6:5e:ef:d4:6d:60:0f:4f:94:10:82:d8:
         92:6b:90:61:17:4a:51:96:72:27:33:d0:b2:5c:53:4b:18:20:
         ff:ec:b1:16:d2:e6:07:b3:0c:4f:a8:4e:0c:f1:18:26:5b:be:
         e1:1a:93:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 21:07:14 2026 by rpki-client