Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft
File:                     Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft (raw, json)
Hash identifier:          MH+0sKVWNK1Rj9GbSGmAIRuSGO+QfxxYSQRWDO/RLKA=
Subject key identifier:   3A:2E:EC:77:8A:AA:2E:08:BC:B7:54:70:E4:48:90:74:F1:7E:73:2F
Authority key identifier: 62:BB:1C:6E:5E:88:65:88:CD:47:61:6B:AC:BD:7C:CB:64:AB:F4:78
Certificate issuer:       /CN=62bb1c6e5e886588cd47616bacbd7ccb64abf478
Certificate serial:       019D389C3788252542CE4F969D6BF099F99B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 08:00:54 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:54 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:54 +0000
Files and hashes:         1: Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl (hash: 1uv0oo5M0PTFazqL+KwSQuYVPINpmsmncJ0lxqNdz5M=)
                          2: inCR3eFEyTL7jghyDh1WvEPXeKA.roa (hash: ejthjyHSduvput3CocjdA0Eo0asNaU9wCge8BSjS0K0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:37:88:25:25:42:ce:4f:96:9d:6b:f0:99:f9:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62bb1c6e5e886588cd47616bacbd7ccb64abf478
        Validity
            Not Before: Mar 29 08:00:54 2026 GMT
            Not After : Mar 30 08:00:54 2026 GMT
        Subject: CN=3a2eec778aaa2e08bcb75470e4489074f17e732f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fa:7e:56:d7:55:ce:6c:07:73:84:9f:aa:52:
                    47:b7:47:27:ea:ce:b9:cd:83:97:8e:d0:78:da:b0:
                    42:c2:40:77:85:f4:82:9b:65:c3:0c:eb:dc:f9:d8:
                    01:98:42:8e:69:ed:e4:47:42:c9:70:c8:82:ca:85:
                    e0:6d:26:00:61:28:1f:7d:70:e2:0a:8a:a3:2a:de:
                    e1:1e:f2:6a:33:d2:68:c5:f4:11:0b:0f:6d:2f:ce:
                    4d:bd:77:10:e9:ce:7d:1c:84:a9:da:07:07:29:70:
                    cd:5c:9e:98:3b:86:9a:15:00:8e:3b:f6:8c:5b:20:
                    cb:db:4d:d0:c1:f2:32:90:50:a1:b7:b5:59:13:8d:
                    d5:f0:5b:d6:e3:52:7e:c1:9b:a8:02:51:92:67:20:
                    78:f2:9d:96:dc:62:35:a6:e2:45:8e:06:e0:17:63:
                    fd:b7:8c:ec:9a:27:44:35:61:5d:fe:e4:53:f2:34:
                    1c:56:f7:a6:33:12:08:85:4f:37:cb:6b:ea:33:e1:
                    44:49:08:ac:fa:7e:3f:76:95:09:67:18:f7:c6:58:
                    eb:80:a0:8f:14:6e:9a:5e:46:b1:22:76:d4:b9:46:
                    f4:ea:8d:ab:a1:b8:5e:59:c4:24:ed:53:67:13:98:
                    4d:dc:54:1b:00:ef:46:6c:05:cb:79:f4:ec:63:37:
                    0e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2E:EC:77:8A:AA:2E:08:BC:B7:54:70:E4:48:90:74:F1:7E:73:2F
            X509v3 Authority Key Identifier:
                keyid:62:BB:1C:6E:5E:88:65:88:CD:47:61:6B:AC:BD:7C:CB:64:AB:F4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ee:cb:21:a9:01:1d:e0:82:33:62:2a:b5:72:e2:b9:9f:5c:
         a8:e0:1e:f4:db:bf:5c:01:03:6f:d2:02:5b:ef:45:24:31:f6:
         4a:ff:7b:aa:4d:9c:44:59:3c:b8:85:ba:b2:b9:7d:29:cc:79:
         c8:b3:98:99:f0:22:68:bb:80:eb:59:ee:14:95:1e:d0:d4:34:
         b6:c8:55:84:5a:32:0c:08:35:f5:d4:0b:d2:33:0b:4c:1d:35:
         7e:bf:9e:98:10:f7:a4:bf:84:4d:4e:90:80:c2:84:53:68:20:
         78:53:ba:2c:fb:b9:70:46:d7:50:f8:72:ea:24:50:1c:22:e3:
         45:bb:c8:68:6e:a3:45:c8:c3:49:60:72:88:2d:bc:08:f8:bf:
         23:3e:b5:63:e2:cb:39:58:5a:50:96:17:f9:32:8e:5a:09:d9:
         ec:90:60:a4:f4:74:b6:d7:8e:8b:b5:91:05:22:10:67:a4:d5:
         ce:43:40:b3:92:f8:51:95:88:86:7b:cf:02:61:af:fb:bc:39:
         9a:70:ce:a3:49:a4:25:36:57:51:26:d5:50:d5:ae:fe:67:eb:
         3a:55:2c:23:27:31:48:5d:38:c3:94:a4:2c:34:b4:aa:63:00:
         6e:e0:11:9e:b9:62:9c:2f:ed:77:18:58:45:b8:33:fb:96:27:
         c5:d8:f0:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nDeIJSVCzk+WnWvwmfmbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYmIxYzZlNWU4ODY1ODhjZDQ3NjE2YmFjYmQ3Y2NiNjRh
YmY0NzgwHhcNMjYwMzI5MDgwMDU0WhcNMjYwMzMwMDgwMDU0WjAzMTEwLwYDVQQD
EygzYTJlZWM3NzhhYWEyZTA4YmNiNzU0NzBlNDQ4OTA3NGYxN2U3MzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Pp+VtdVzmwHc4SfqlJHt0cn6s65
zYOXjtB42rBCwkB3hfSCm2XDDOvc+dgBmEKOae3kR0LJcMiCyoXgbSYAYSgffXDi
CoqjKt7hHvJqM9JoxfQRCw9tL85NvXcQ6c59HISp2gcHKXDNXJ6YO4aaFQCOO/aM
WyDL203QwfIykFCht7VZE43V8FvW41J+wZuoAlGSZyB48p2W3GI1puJFjgbgF2P9
t4zsmidENWFd/uRT8jQcVvemMxIIhU83y2vqM+FESQis+n4/dpUJZxj3xljrgKCP
FG6aXkaxInbUuUb06o2robheWcQk7VNnE5hN3FQbAO9GbAXLefTsYzcO1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDou7HeKqi4IvLdUcORIkHTxfnMvMB8GA1UdIwQY
MBaAFGK7HG5eiGWIzUdha6y9fMtkq/R4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXJzY2JsNklaWWpOUjJGcnJMMTh5MlNyOUhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85Zjk0NDAtNTkxYi00NGQzLTg3ZDYt
N2M0NDViM2Y5ZmMzLzEvWXJzY2JsNklaWWpOUjJGcnJMMTh5MlNyOUhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85Zjk0NDAtNTkxYi00NGQzLTg3ZDYtN2M0NDViM2Y5ZmMz
LzEvWXJzY2JsNklaWWpOUjJGcnJMMTh5MlNyOUhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+7LIakB
HeCCM2IqtXLiuZ9cqOAe9Nu/XAEDb9ICW+9FJDH2Sv97qk2cRFk8uIW6srl9Kcx5
yLOYmfAiaLuA61nuFJUe0NQ0tshVhFoyDAg19dQL0jMLTB01fr+emBD3pL+ETU6Q
gMKEU2ggeFO6LPu5cEbXUPhy6iRQHCLjRbvIaG6jRcjDSWByiC28CPi/Iz61Y+LL
OVhaUJYX+TKOWgnZ7JBgpPR0tteOi7WRBSIQZ6TVzkNAs5L4UZWIhnvPAmGv+7w5
mnDOo0mkJTZXUSbVUNWu/mfrOlUsIycxSF04w5SkLDS0qmMAbuARnrlinC/tdxhY
Rbgz+5Ynxdjwzg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:19 2026 by rpki-client