Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft
File:                     YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft (raw, json)
Hash identifier:          vS1/FRXdUqdVDVYmrMpwd+3oY8Cbm2FX0xeKZsX8JNU=
Subject key identifier:   D0:94:4E:54:6E:1D:A7:32:DC:25:3A:CE:25:E1:B3:24:8A:0A:27:2B
Authority key identifier: 62:23:F5:64:16:3F:64:EA:F1:E1:AD:A6:D6:68:CA:D5:9D:5A:B0:A3
Certificate issuer:       /CN=6223f564163f64eaf1e1ada6d668cad59d5ab0a3
Certificate serial:       019FFE004525A3C7265EFB54C4FD8CD6CBD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft
Manifest number:          027A
Signing time:             Fri 14 Aug 2026 02:00:57 +0000
Manifest this update:     Fri 14 Aug 2026 02:00:57 +0000
Manifest next update:     Sat 15 Aug 2026 02:00:57 +0000
Files and hashes:         1: YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl (hash: QZGBtZzPtRL14TBkOh9QcVC8kPa4fbTd2DMoa7vQjks=)
                          2: nURomofbDgSrxYM0O1_tcq9RI08.roa (hash: tbGTgdyklPOm5IjmielhkBjtWa6HmczItFnGfm4z+A8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 00:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fe:00:45:25:a3:c7:26:5e:fb:54:c4:fd:8c:d6:cb:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6223f564163f64eaf1e1ada6d668cad59d5ab0a3
        Validity
            Not Before: Aug 14 02:00:57 2026 GMT
            Not After : Aug 15 02:00:57 2026 GMT
        Subject: CN=d0944e546e1da732dc253ace25e1b3248a0a272b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e9:e8:dd:c7:ff:23:cd:ca:f6:5c:cf:c0:4a:
                    70:2b:0b:59:80:17:99:f0:0d:da:1f:a3:ac:a2:0e:
                    2b:fa:8c:2e:e5:c6:c7:31:96:bb:72:0f:34:8f:a8:
                    69:64:aa:fc:16:f2:f9:31:76:3a:db:00:41:9e:9d:
                    ff:37:61:40:e9:7e:b9:69:df:c7:ab:0e:55:db:27:
                    4c:ee:45:2c:da:42:91:65:78:84:4d:45:c5:f6:ce:
                    ca:e4:f6:61:90:1e:f5:eb:32:d8:e0:a0:50:83:3f:
                    3a:5c:74:94:04:e1:f9:c5:36:ed:13:30:08:60:ac:
                    09:71:40:f4:90:5c:06:44:5d:2c:df:50:ce:64:1e:
                    2e:dd:60:ab:ee:ea:44:c1:0b:2b:c9:e1:29:6e:25:
                    19:e9:73:dd:d7:9d:b2:b8:04:16:e0:94:ef:d8:51:
                    23:77:e3:e8:6d:f8:1e:9b:94:34:79:f8:74:9b:ab:
                    0a:71:42:27:c9:97:ac:76:8d:a5:5f:ec:3e:35:ff:
                    ea:f4:91:fd:4a:ef:af:32:ca:29:a4:0f:2d:67:3e:
                    ad:0b:d6:27:4d:02:4a:22:e2:36:a4:38:3f:80:9e:
                    76:98:2c:45:63:51:8a:8e:b3:54:c3:86:ff:d2:28:
                    99:19:55:44:d4:e9:6b:bb:96:d5:94:a4:79:8c:2e:
                    d0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:94:4E:54:6E:1D:A7:32:DC:25:3A:CE:25:E1:B3:24:8A:0A:27:2B
            X509v3 Authority Key Identifier:
                keyid:62:23:F5:64:16:3F:64:EA:F1:E1:AD:A6:D6:68:CA:D5:9D:5A:B0:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:d9:07:50:d8:76:be:e9:94:f6:db:67:10:8e:fb:0d:8d:0f:
         a2:8c:c8:e1:0d:9e:1f:d8:9d:39:2e:fa:4e:f9:49:1a:4e:4d:
         d8:be:9d:db:2f:59:03:75:0d:7a:69:37:db:98:45:be:3d:00:
         c2:a7:e7:5f:80:1e:81:1a:1c:50:c2:1b:0f:97:06:58:02:b5:
         0f:5f:42:f4:82:19:0a:4f:ed:77:ac:13:59:5d:3c:36:8a:97:
         bd:6f:7c:ed:8c:42:5d:2d:3d:51:79:5f:5f:df:d2:91:e4:ae:
         0d:1c:9a:a4:21:11:3f:d3:66:bd:e1:04:dc:f4:5d:d6:e8:2f:
         73:6d:55:5a:36:ce:17:12:61:be:4c:95:08:f9:c1:9f:ea:04:
         b2:cd:51:3a:a7:d2:4b:ef:c7:bd:39:21:4f:bf:4a:a6:95:df:
         de:e9:d1:2c:98:0e:d6:d9:75:c2:2d:3f:91:b8:c4:65:af:87:
         e3:18:15:95:81:66:80:6a:c2:d0:c5:47:70:67:ed:6b:39:f0:
         a6:84:f9:07:d6:c9:09:2f:39:6b:69:94:7e:24:c6:0e:79:12:
         5d:6a:99:6d:4a:96:55:2b:8f:a0:a7:d5:f2:d8:95:4e:d2:de:
         c2:7d:fb:02:84:03:13:94:9e:24:a9:3e:14:a1:1e:b3:20:e7:
         2b:6f:d2:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/+AEUlo8cmXvtUxP2M1svVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjNmNTY0MTYzZjY0ZWFmMWUxYWRhNmQ2NjhjYWQ1OWQ1
YWIwYTMwHhcNMjYwODE0MDIwMDU3WhcNMjYwODE1MDIwMDU3WjAzMTEwLwYDVQQD
EyhkMDk0NGU1NDZlMWRhNzMyZGMyNTNhY2UyNWUxYjMyNDhhMGEyNzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOno3cf/I83K9lzPwEpwKwtZgBeZ
8A3aH6Osog4r+owu5cbHMZa7cg80j6hpZKr8FvL5MXY62wBBnp3/N2FA6X65ad/H
qw5V2ydM7kUs2kKRZXiETUXF9s7K5PZhkB716zLY4KBQgz86XHSUBOH5xTbtEzAI
YKwJcUD0kFwGRF0s31DOZB4u3WCr7upEwQsryeEpbiUZ6XPd152yuAQW4JTv2FEj
d+Pobfgem5Q0efh0m6sKcUInyZesdo2lX+w+Nf/q9JH9Su+vMsoppA8tZz6tC9Yn
TQJKIuI2pDg/gJ52mCxFY1GKjrNUw4b/0iiZGVVE1Olru5bVlKR5jC7QwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCUTlRuHacy3CU6ziXhsySKCicrMB8GA1UdIwQY
MBaAFGIj9WQWP2Tq8eGtptZoytWdWrCjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlQMVpCWV9aT3J4NGEybTFtaksxWjFhc0tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9kNmViZjgtOWMzNS00ZGQzLWFiZjUt
ZTk3YjY1Nzk0NDM5LzEvWWlQMVpCWV9aT3J4NGEybTFtaksxWjFhc0tNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9kNmViZjgtOWMzNS00ZGQzLWFiZjUtZTk3YjY1Nzk0NDM5
LzEvWWlQMVpCWV9aT3J4NGEybTFtaksxWjFhc0tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9kHUNh2
vumU9ttnEI77DY0PoozI4Q2eH9idOS76TvlJGk5N2L6d2y9ZA3UNemk325hFvj0A
wqfnX4AegRocUMIbD5cGWAK1D19C9IIZCk/td6wTWV08NoqXvW987YxCXS09UXlf
X9/SkeSuDRyapCERP9NmveEE3PRd1ugvc21VWjbOFxJhvkyVCPnBn+oEss1ROqfS
S+/HvTkhT79KppXf3unRLJgO1tl1wi0/kbjEZa+H4xgVlYFmgGrC0MVHcGftaznw
poT5B9bJCS85a2mUfiTGDnkSXWqZbUqWVSuPoKfV8tiVTtLewn37AoQDE5SeJKk+
FKEesyDnK2/SUg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 03:37:11 2026 by rpki-client