Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
File:                     YEBzL9vKpSkA2yRiB1v07xUVlpU.mft (raw, json)
Hash identifier:          SGqNITJICVyOGsY7J/KmoXqgOX4X2+0AdOTw8Do7DNQ=
Subject key identifier:   79:2B:33:DE:E3:B5:6E:66:C2:8D:E5:7D:15:2F:B3:CA:E7:EA:39:22
Authority key identifier: 60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95
Certificate issuer:       /CN=6040732fdbcaa52900db2462075bf4ef15159695
Certificate serial:       019F97A5CDDB951C2729671FD3351BFC7BC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
Manifest number:          087A
Signing time:             Sat 25 Jul 2026 05:00:53 +0000
Manifest this update:     Sat 25 Jul 2026 05:00:53 +0000
Manifest next update:     Sun 26 Jul 2026 05:00:53 +0000
Files and hashes:         1: PUDvpR_aiNzuJCBLk51UIXHyhYI.roa (hash: Sq53LfucALVr4BVz660/k9ccPDQx9/Vh4c8LAplhshQ=)
                          2: YEBzL9vKpSkA2yRiB1v07xUVlpU.crl (hash: YzTOuCnjXFXp2qxD69TjzzvKJEMveG7JNqEiQVCwPaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Jul 2026 02:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:97:a5:cd:db:95:1c:27:29:67:1f:d3:35:1b:fc:7b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6040732fdbcaa52900db2462075bf4ef15159695
        Validity
            Not Before: Jul 25 05:00:53 2026 GMT
            Not After : Jul 26 05:00:53 2026 GMT
        Subject: CN=792b33dee3b56e66c28de57d152fb3cae7ea3922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:53:43:da:a6:9d:d4:c7:8c:34:b2:3e:b4:97:
                    57:11:b0:db:88:17:90:e6:b2:b2:59:40:c7:02:5e:
                    ab:29:d1:8c:54:c6:4c:17:fd:12:23:1f:43:a6:03:
                    d4:ff:26:57:03:8a:a8:40:e6:c1:ea:5d:47:4a:34:
                    bb:69:44:ca:fe:11:6d:a1:23:e4:94:19:4e:87:8a:
                    de:c6:d4:3f:a2:78:8a:b2:09:45:7e:e0:aa:7c:46:
                    a1:e8:e7:4b:89:9f:5d:70:c6:d1:5b:6f:64:6b:10:
                    21:f0:31:e9:47:81:0c:b7:0f:a4:8a:a2:bb:c8:4d:
                    f8:97:18:06:d5:59:7f:cd:f5:ab:1a:a9:0f:ca:fc:
                    6e:ea:11:40:6b:1a:51:47:d0:9e:50:61:36:53:b9:
                    13:ab:a5:65:0d:98:f8:b0:8a:61:ee:65:b0:38:ff:
                    78:c8:7e:d2:5c:e0:ca:aa:f6:25:63:94:83:38:18:
                    d1:e8:ac:8a:fc:7e:eb:7e:41:7b:91:23:be:48:86:
                    fa:44:3c:36:fc:19:6e:b0:c8:b6:41:e0:5e:95:ea:
                    81:7e:66:55:46:30:74:67:25:67:0e:74:06:f9:62:
                    d0:20:cc:11:89:2d:c4:ce:77:60:e4:63:56:f6:b2:
                    d7:2a:42:18:ca:9b:bb:83:fd:4e:c6:bc:38:c6:e8:
                    b6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2B:33:DE:E3:B5:6E:66:C2:8D:E5:7D:15:2F:B3:CA:E7:EA:39:22
            X509v3 Authority Key Identifier:
                keyid:60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:9e:dc:25:6e:74:17:a1:ea:e6:60:49:fa:a1:b7:b5:5a:58:
         83:27:d6:33:44:04:6e:40:42:09:fd:ff:10:4d:d6:1b:0c:cb:
         4f:9f:15:56:46:b2:5a:14:c7:e6:5f:ee:65:79:52:6f:70:67:
         b0:5d:95:b0:11:1c:d7:70:73:7d:ca:de:5a:ca:ae:7d:d0:97:
         22:12:d7:4c:7d:82:28:77:4b:4a:7e:8e:f8:1b:d5:c8:eb:81:
         ba:72:6d:c8:3f:b4:6e:b2:ba:86:81:e9:a9:63:4c:ca:d8:8a:
         68:69:34:9c:00:77:a3:16:86:30:ce:9e:2b:d4:ff:aa:4d:f0:
         ac:fe:5f:47:b9:b6:4e:84:69:1c:f6:59:4b:3e:7d:a8:e9:b5:
         05:3d:80:eb:19:4f:90:b9:9c:1f:6d:9c:05:0f:0f:64:8a:8d:
         14:f2:e6:dd:5c:e5:9e:fb:d6:ab:7f:ff:8f:02:da:6b:78:7f:
         b2:78:86:2f:27:3a:0f:81:af:e6:df:67:f2:76:4c:9c:86:42:
         d8:ea:a5:4f:bc:f3:8e:5b:b3:60:07:11:04:bc:fd:01:cb:03:
         c0:f5:f0:b2:4a:b8:6a:6f:7e:b2:48:98:60:6d:3d:c9:09:68:
         a5:fb:0a:20:ae:d9:46:b5:78:77:fc:0d:6a:19:5e:33:30:94:
         bf:70:34:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Xpc3blRwnKWcf0zUb/HvCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNDA3MzJmZGJjYWE1MjkwMGRiMjQ2MjA3NWJmNGVmMTUx
NTk2OTUwHhcNMjYwNzI1MDUwMDUzWhcNMjYwNzI2MDUwMDUzWjAzMTEwLwYDVQQD
Eyg3OTJiMzNkZWUzYjU2ZTY2YzI4ZGU1N2QxNTJmYjNjYWU3ZWEzOTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlND2qad1MeMNLI+tJdXEbDbiBeQ
5rKyWUDHAl6rKdGMVMZMF/0SIx9DpgPU/yZXA4qoQObB6l1HSjS7aUTK/hFtoSPk
lBlOh4rextQ/oniKsglFfuCqfEah6OdLiZ9dcMbRW29kaxAh8DHpR4EMtw+kiqK7
yE34lxgG1Vl/zfWrGqkPyvxu6hFAaxpRR9CeUGE2U7kTq6VlDZj4sIph7mWwOP94
yH7SXODKqvYlY5SDOBjR6KyK/H7rfkF7kSO+SIb6RDw2/BlusMi2QeBeleqBfmZV
RjB0ZyVnDnQG+WLQIMwRiS3Ezndg5GNW9rLXKkIYypu7g/1Oxrw4xui2jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkrM97jtW5mwo3lfRUvs8rn6jkiMB8GA1UdIwQY
MBaAFGBAcy/byqUpANskYgdb9O8VFZaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUVCekw5dktwU2tBMnlSaUIxdjA3eFVWbHBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81Njc2YTMtOWMzOS00ZGIwLTk1MWUt
ZDJiNjk4MmJjNDg0LzEvWUVCekw5dktwU2tBMnlSaUIxdjA3eFVWbHBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy81Njc2YTMtOWMzOS00ZGIwLTk1MWUtZDJiNjk4MmJjNDg0
LzEvWUVCekw5dktwU2tBMnlSaUIxdjA3eFVWbHBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJ7cJW50
F6Hq5mBJ+qG3tVpYgyfWM0QEbkBCCf3/EE3WGwzLT58VVkayWhTH5l/uZXlSb3Bn
sF2VsBEc13BzfcreWsqufdCXIhLXTH2CKHdLSn6O+BvVyOuBunJtyD+0brK6hoHp
qWNMytiKaGk0nAB3oxaGMM6eK9T/qk3wrP5fR7m2ToRpHPZZSz59qOm1BT2A6xlP
kLmcH22cBQ8PZIqNFPLm3VzlnvvWq3//jwLaa3h/sniGLyc6D4Gv5t9n8nZMnIZC
2OqlT7zzjluzYAcRBLz9AcsDwPXwskq4am9+skiYYG09yQlopfsKIK7ZRrV4d/wN
ahleMzCUv3A04A==
-----END CERTIFICATE-----
Generated at Sat Jul 25 10:25:44 2026 by rpki-client