Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
File:                     ryNYW_zdBhypRuLZ6ouX5FucMdY.mft (raw, json)
Hash identifier:          gRlN08Of+W1vHbpZf6JtgS9PbQZyrNc7tgwiEhAPPQI=
Subject key identifier:   DB:5F:A4:FA:98:5D:9A:D6:C0:F4:7A:72:E0:42:C6:DA:92:0A:A2:33
Authority key identifier: AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
Certificate issuer:       /CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Certificate serial:       019E3184DD1B118476B5958D8932C1B31C4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
Manifest number:          1876
Signing time:             Sat 16 May 2026 16:00:51 +0000
Manifest this update:     Sat 16 May 2026 16:00:51 +0000
Manifest next update:     Sun 17 May 2026 16:00:51 +0000
Files and hashes:         1: ECi1vnqUM-fxIfMgxs6Z6zPn5G8.roa (hash: vGQVzQW6eOz/ocuImvFOzh/r1Lw9xkrPt/351GBE1Vg=)
                          2: ryNYW_zdBhypRuLZ6ouX5FucMdY.crl (hash: KfBRmni4b6vuM4tVdtLE2+fzmVnk1NyTVdKMzyISc2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:84:dd:1b:11:84:76:b5:95:8d:89:32:c1:b3:1c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
        Validity
            Not Before: May 16 16:00:51 2026 GMT
            Not After : May 17 16:00:51 2026 GMT
        Subject: CN=db5fa4fa985d9ad6c0f47a72e042c6da920aa233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7a:ec:a2:d5:4a:78:f2:cf:d1:2b:fb:75:b7:
                    6c:f1:14:71:72:7d:0d:51:77:a6:48:88:df:85:72:
                    c4:cb:93:32:71:68:85:cc:a0:4e:5f:89:29:17:61:
                    f4:31:3b:af:fe:dc:9b:24:93:2a:e9:bc:6c:90:7b:
                    e3:8e:27:46:22:0a:c2:5e:7f:90:ff:85:2b:16:82:
                    4e:27:67:aa:6e:9f:b1:1a:8b:2f:41:8e:36:4b:48:
                    49:81:40:53:1a:23:36:d1:94:dc:9c:17:07:ee:26:
                    57:63:09:40:55:5d:ba:81:46:98:26:c3:3f:15:fa:
                    34:7a:08:2a:45:51:6f:6e:c1:d7:ac:b1:97:9a:e5:
                    ba:0c:98:b4:7c:8a:3b:f8:0e:44:5f:b9:eb:83:b6:
                    29:5e:0c:cd:06:56:74:a5:41:74:f3:06:45:ab:35:
                    10:28:53:b0:21:73:f0:0d:99:d6:11:06:b7:04:a3:
                    64:1b:fa:b8:d0:41:c3:9f:21:96:29:a9:d2:ba:3f:
                    b0:cf:39:17:e2:92:15:c6:fc:7a:2b:52:b5:f8:ed:
                    22:3a:8f:1f:a7:4c:82:0a:5c:82:09:8e:ec:cc:a7:
                    79:a7:d4:08:72:46:8b:10:83:38:03:e2:84:c4:0f:
                    da:c4:17:a2:b2:55:70:38:ea:9d:39:ee:f2:53:47:
                    27:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5F:A4:FA:98:5D:9A:D6:C0:F4:7A:72:E0:42:C6:DA:92:0A:A2:33
            X509v3 Authority Key Identifier:
                keyid:AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:be:24:5e:62:57:4c:f7:ef:a5:5b:76:42:5d:60:b9:34:8c:
         ab:1f:d1:82:26:e7:04:3a:f5:dd:90:07:2b:7e:67:d6:68:30:
         4a:d4:f9:de:d7:bd:49:0f:93:23:fb:e3:27:17:22:5a:a3:cf:
         55:f4:19:60:32:f1:eb:ea:a1:67:46:1f:04:ec:16:59:14:4a:
         2a:03:cf:8b:04:93:82:78:d8:5e:f3:f6:02:c7:5d:b1:f1:39:
         74:e4:5d:09:77:c7:2c:f6:db:5e:f4:e6:6d:10:71:b3:d3:61:
         c7:69:10:22:02:e5:25:21:b8:e4:66:54:6b:58:3e:aa:6f:9d:
         6f:c3:3d:d2:10:27:0d:aa:31:8a:ba:72:64:40:8d:9c:77:46:
         b3:b5:86:4d:66:cd:b5:28:47:7a:8b:8a:a6:8e:00:c7:09:e5:
         41:61:56:b4:20:c8:ed:fd:92:25:cc:15:50:d9:e9:e4:99:5a:
         4c:d9:5a:dc:cb:6c:61:f2:0b:95:a7:46:3c:1a:fc:8e:4c:ef:
         46:a8:b4:38:5c:61:d2:64:f4:6c:65:14:46:ac:48:68:c0:c5:
         af:cc:9d:12:c6:54:61:c3:62:d4:0e:8e:41:70:f3:f3:56:9f:
         63:f7:06:36:7e:32:58:d7:29:45:0b:6f:7e:45:57:11:71:b3:
         12:5c:10:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:40:20 2026 by rpki-client