Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
File:                     yUcK5Bju3dazna6eehd6Gcd5nEE.mft (raw, json)
Hash identifier:          5Z3CMdK54iDbIr9LT2xYP9DcidQTchKRDiJ6icT48D8=
Subject key identifier:   CE:CA:73:28:47:E3:D9:4E:FE:CF:E0:D3:2A:33:AB:AA:76:B5:92:22
Authority key identifier: C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
Certificate issuer:       /CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Certificate serial:       019F38299D07503041EC0DB67584CD27AC87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
Manifest number:          1999
Signing time:             Mon 06 Jul 2026 16:01:18 +0000
Manifest this update:     Mon 06 Jul 2026 16:01:18 +0000
Manifest next update:     Tue 07 Jul 2026 16:01:18 +0000
Files and hashes:         1: CSaWGPAuSxGyvK0vYNlwHF6hyLk.roa (hash: /XZl1WB2nbiNcL9b2RlvpS4iBe26ZsfShmWMbksslmc=)
                          2: R7rOqqQV9FpDCZLBm9QH6KbRejI.roa (hash: mcqImNWLjpTecGkgufT+Ix02VEv/VipznJBswQOZYeo=)
                          3: S3ly6OpAOrIt_7luoCILOFS7SJ0.roa (hash: MI6S4+JLe7VwJwm81yAr9HyDfPieJGPwWA3IVqKAm4s=)
                          4: yUcK5Bju3dazna6eehd6Gcd5nEE.crl (hash: mv4R/xkcbsvJc6j+Egx1gq2wEKr9E162ilQlvo3Lbms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 14:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:38:29:9d:07:50:30:41:ec:0d:b6:75:84:cd:27:ac:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
        Validity
            Not Before: Jul  6 16:01:18 2026 GMT
            Not After : Jul  7 16:01:18 2026 GMT
        Subject: CN=ceca732847e3d94efecfe0d32a33abaa76b59222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:05:fa:c2:07:fb:f4:cc:30:6c:98:45:fa:bd:
                    49:22:bc:a6:09:e5:e0:41:e1:21:70:67:f5:5b:ad:
                    f6:bd:d1:4a:36:09:49:b8:1e:2d:7e:ef:c2:b0:5e:
                    b7:0e:bc:9b:a0:a1:e0:b6:03:fe:b6:14:7b:67:a3:
                    1d:cb:cc:78:5f:d0:a3:ce:55:e0:31:df:8a:d4:19:
                    78:8d:82:e2:e2:2e:ad:00:ac:90:fa:92:2c:15:ce:
                    bc:0b:42:04:8f:de:17:a2:d0:7f:eb:24:92:53:7b:
                    56:59:7c:ec:77:36:06:3d:ec:d8:e3:a3:97:44:a9:
                    e1:12:67:df:52:84:7d:df:92:14:f1:73:16:b6:08:
                    70:7f:37:24:4c:27:fa:e1:c8:bc:92:fc:70:39:c1:
                    6f:28:3a:0e:5f:d8:52:db:02:27:70:65:30:f1:83:
                    29:e6:93:44:bd:d2:0e:07:01:1a:f2:21:41:4a:02:
                    e4:35:c5:95:da:98:59:b5:d0:39:e1:fe:b8:c0:b2:
                    6a:e8:f3:87:0e:d9:7f:6c:54:d2:87:ac:a5:a8:bc:
                    bd:a7:c0:52:c6:87:b5:93:ba:b1:ca:38:0c:ba:f8:
                    4d:22:c3:ad:d9:42:6e:4c:28:45:ff:99:1d:81:92:
                    34:fc:37:1d:c5:f6:b6:71:14:28:38:d2:ef:d8:22:
                    72:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CA:73:28:47:E3:D9:4E:FE:CF:E0:D3:2A:33:AB:AA:76:B5:92:22
            X509v3 Authority Key Identifier:
                keyid:C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:82:81:0f:06:c5:56:c2:0f:4b:b8:47:f1:32:8e:c9:d0:85:
         1e:0b:12:a0:02:99:aa:17:e4:3d:6c:26:e1:d3:1c:8d:91:c8:
         21:ad:c6:3a:3f:1d:83:15:24:03:e4:ae:68:32:51:d3:00:43:
         60:87:47:0d:00:3f:95:8e:4d:7f:d5:cd:65:73:ca:c2:c1:b1:
         3c:a7:59:fd:12:78:cb:5d:67:b5:ca:83:26:fd:96:29:0c:b7:
         a8:2a:cd:67:68:7e:a3:e1:12:76:a7:78:f7:ef:29:4b:44:3c:
         2a:11:4f:a3:3a:a6:42:02:32:23:8a:99:4c:04:5e:51:5f:06:
         8a:e2:a8:65:f4:e6:48:be:52:a3:3c:f9:00:39:31:33:7e:47:
         99:a1:a1:48:7f:31:44:8a:88:37:82:1b:01:56:24:6d:27:79:
         8e:c2:6d:80:3b:c4:82:b6:0a:8f:37:9e:83:7e:4f:69:35:a4:
         2d:1e:3f:2b:82:ec:b7:60:94:1f:fc:50:88:aa:a9:4b:c2:74:
         78:01:d0:85:37:3b:1b:b3:37:cc:4b:dc:6e:03:a2:6e:f9:83:
         e7:c0:c2:f9:a2:0a:bd:f1:53:ae:7b:7e:28:4b:a5:c9:14:54:
         94:5a:0a:b9:9f:0b:50:e9:25:3f:25:ba:c8:cf:34:46:a1:e0:
         62:cf:76:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:06:51 2026 by rpki-client