Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
File:                     YOdz2_t1lX8Mxchj_M52ylijkwg.mft (raw, json)
Hash identifier:          VaoPMwZCgJk5D/S0ulgiP06WWDhfitwQk8sO2MyAGgc=
Subject key identifier:   76:5B:EA:3F:B5:03:74:DB:59:2B:42:E3:99:E9:56:A9:A3:D7:74:E2
Authority key identifier: 60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
Certificate issuer:       /CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Certificate serial:       019DCF3E738E38135F42D98206D745FB5BFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
Manifest number:          0BAB
Signing time:             Mon 27 Apr 2026 14:01:09 +0000
Manifest this update:     Mon 27 Apr 2026 14:01:09 +0000
Manifest next update:     Tue 28 Apr 2026 14:01:09 +0000
Files and hashes:         1: 5Tv0CB1BQb-7j2hs5gKN63kboWY.roa (hash: rOsqhBLouEH03XQI21ig1uTPRO/qmeCRcopoN4oIqo0=)
                          2: FaiCCLCJ_22L37bTLhekiTS6xWk.roa (hash: 0rF76R7VaTqT7h2AWynmZ6U6C8XdF6nPrpTOFBQQBKw=)
                          3: O4AfeQRuIMAMeO6z8kLbpZ8Hvoo.roa (hash: MfH6CEUlmmWEGp0pDdZfESoeoH136H9ZL7h9lRJnDwk=)
                          4: YOdz2_t1lX8Mxchj_M52ylijkwg.crl (hash: F0Rqly1+kMx5HgHP1M82W2kCbTF/z7Xq7YJAcS5VxMc=)
                          5: yTTayTL41qHWL6gWmBRi6muRZKQ.roa (hash: KuHMdy+xEGLUNp8u6CFDJT5C7IHBOhf7emLTFyrBpUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 14:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:3e:73:8e:38:13:5f:42:d9:82:06:d7:45:fb:5b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
        Validity
            Not Before: Apr 27 14:01:09 2026 GMT
            Not After : Apr 28 14:01:09 2026 GMT
        Subject: CN=765bea3fb50374db592b42e399e956a9a3d774e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f4:37:75:56:9c:37:b7:75:97:15:d4:19:af:
                    ca:68:f9:9b:21:68:be:b3:a2:45:52:f8:b3:d1:25:
                    5e:f0:dc:e2:26:2f:b7:dc:66:4f:be:ec:f0:ff:a2:
                    dd:c5:25:f1:9a:b3:ce:96:3f:49:8e:23:66:4e:74:
                    4f:2b:fc:68:9c:ba:b1:db:df:2c:66:f0:0b:39:e6:
                    88:8c:1b:1a:45:99:50:42:60:15:68:61:8c:ab:08:
                    b4:bd:53:ed:8b:26:1e:ca:df:bc:ba:74:63:d4:f7:
                    cc:25:70:ff:8e:38:44:d7:ff:bb:42:9e:85:19:57:
                    d1:b5:55:77:d5:6a:a4:7c:f8:e8:6b:4e:ec:58:e3:
                    58:ca:9e:59:29:35:a6:70:84:97:d5:f9:32:63:9f:
                    85:cb:18:f7:8b:dd:6f:f4:e7:5c:01:80:34:fb:1b:
                    a6:29:12:30:72:3e:ea:58:00:a4:b6:54:70:f7:b9:
                    aa:be:a0:70:c9:94:b1:11:7b:67:f5:0b:43:b1:b6:
                    2e:d4:98:06:23:64:95:6b:63:b5:cc:f2:eb:75:bc:
                    97:ee:a1:e9:08:0e:94:d0:71:c7:01:40:be:1c:2e:
                    5d:24:3f:f8:2c:fc:5e:f2:c2:7d:fc:76:e3:ba:8d:
                    70:b2:6f:c4:70:76:9f:04:f8:f7:41:9f:29:00:f4:
                    9c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5B:EA:3F:B5:03:74:DB:59:2B:42:E3:99:E9:56:A9:A3:D7:74:E2
            X509v3 Authority Key Identifier:
                keyid:60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:1d:d7:22:5a:16:5c:5a:34:4b:37:a5:ae:d3:ed:3e:ee:07:
         b3:1c:e7:43:69:61:05:56:bc:e4:3d:8a:84:33:4e:c0:8b:73:
         f2:01:a9:01:0b:b0:2a:5c:0f:fc:19:7c:c7:a8:c8:6a:ab:42:
         7c:a1:71:84:be:6e:20:fb:2e:d5:d2:b3:be:46:0c:d3:89:70:
         5f:97:20:8e:10:2c:6b:63:39:57:e1:ca:92:cb:a3:c5:81:6f:
         a9:36:71:3c:58:78:42:20:67:2a:2a:76:4a:e5:a3:eb:5b:b9:
         1f:fd:71:90:f1:5e:9c:4e:ce:f5:80:d4:9a:53:8e:7a:01:0f:
         51:32:22:b3:ef:4e:1b:9d:6b:3c:cc:17:93:78:6a:84:17:08:
         8d:18:a6:13:0b:eb:7a:8f:6b:16:55:80:a2:a8:79:2c:44:74:
         f3:29:c4:7c:1b:26:e1:60:37:1b:93:6e:c5:c7:a1:fc:5f:77:
         fc:97:e5:ad:f2:43:b6:c7:d2:21:a8:79:49:09:b6:59:af:e9:
         09:0a:27:a3:f7:02:48:7c:37:90:bb:e5:d6:5d:32:2d:6a:ad:
         17:1f:ad:5d:94:05:5c:a7:6d:45:86:4e:04:db:80:ef:11:6b:
         ab:21:eb:bc:70:69:14:01:58:26:fe:59:ef:8b:ba:8c:9e:05:
         08:b5:a3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:43:35 2026 by rpki-client