Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
File:                     YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft (raw, json)
Hash identifier:          sNDJ+16fLWyvvl3le4ZeSHxlSUq/x0AyHqM+IsKMoLM=
Subject key identifier:   73:E5:39:54:2F:5A:5F:3F:EE:E4:33:D0:82:B4:48:80:F2:61:34:16
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Certificate issuer:       /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial:       019DCF3DF2BD09DBC6E081028D44525A24AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
Manifest number:          14B0
Signing time:             Mon 27 Apr 2026 14:00:36 +0000
Manifest this update:     Mon 27 Apr 2026 14:00:36 +0000
Manifest next update:     Tue 28 Apr 2026 14:00:36 +0000
Files and hashes:         1: 7r9SX9HuGtf2H3oy1bdYUxs6ERM.roa (hash: gZE5Lnpr7kALC+H2K1SiEYZZcM/wPDOptHC62z3JpZM=)
                          2: TJ2UCD3Urxqqt9VYyEf23Fmmaqc.roa (hash: ofKvq3GVg7zKLaiA8CE5CKSDJCDWtrOUHXHufuUJ1ug=)
                          3: Xrue8_3iZIf-q2iZjaX1I5eh5v4.roa (hash: GCW1dLjeWZhLx2VOYd6Yk9RjDyKldIOTznHcOf+v7tI=)
                          4: XzpLOyyVemQ6RelT4l5NRJSoZY8.roa (hash: 7T31BDFOxFp2/Pv8ShUq1oXNZxQJBzRZFs2H/DMrRxs=)
                          5: YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl (hash: ykG96q2Pn/e/+3WJyC35ddy3TnX8BD5J1oRkbxGdNjE=)
                          6: i900lZucCqA9DZUrSkDMsObY6hA.roa (hash: BwcsBww5LOQDT5JOaN5lMmUCh3Hs0MQx3s5Tm8CrQME=)
                          7: uTIQo1iOi6huXk_fCeCJe7xarCY.roa (hash: ivcVjW4Q8NkzPjE4iMw0GCYLeKdEXAuPpRYl7NOH1pY=)
                          8: zaFkNKXL7XugoMho6gsyI_tFULk.roa (hash: N8aOmUkSfhnOWq2kc5KVJ3lVeRhazZVqeZC0mkdlrjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:3d:f2:bd:09:db:c6:e0:81:02:8d:44:52:5a:24:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
        Validity
            Not Before: Apr 27 14:00:36 2026 GMT
            Not After : Apr 28 14:00:36 2026 GMT
        Subject: CN=73e539542f5a5f3feee433d082b44880f2613416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ff:a5:9d:5e:de:50:b4:4e:2d:91:7c:d9:65:
                    dc:73:7d:97:cc:f1:21:cf:1a:30:c9:ee:bd:d9:26:
                    22:be:07:35:1f:63:b6:bf:57:ad:7b:c1:e3:65:61:
                    e8:b9:db:19:aa:5c:9f:ef:85:a2:48:e0:14:88:39:
                    dc:15:fb:c1:f7:2e:7e:04:38:b4:73:dd:11:73:a4:
                    fb:fd:d4:77:67:09:58:38:62:a8:7d:2b:61:f5:17:
                    13:fa:72:58:d6:bc:37:c4:d3:34:0d:9d:ca:08:fd:
                    46:f8:38:49:d0:ff:02:18:32:f0:c1:93:2f:c4:d9:
                    98:55:93:07:2e:68:a5:83:f4:74:3e:31:48:13:ad:
                    f8:b7:2c:f5:9d:da:09:84:ac:61:17:40:73:d2:b2:
                    79:61:35:9d:4d:cf:e7:a4:aa:54:6b:49:10:26:c0:
                    40:1e:19:69:56:7a:ee:d1:3e:e0:63:b8:b1:e8:7b:
                    17:b1:a0:ab:7e:69:87:ad:ad:f6:3b:1a:7e:92:cc:
                    54:15:4f:73:18:37:9e:90:e2:3a:93:b4:8a:7e:ad:
                    38:eb:05:6d:d5:e0:55:8c:b4:84:2d:6f:69:83:1f:
                    c6:27:15:58:dc:10:8b:cb:0e:f4:ca:e6:b4:64:03:
                    a3:ba:dc:00:9e:d7:a1:57:e8:19:96:7e:56:2d:de:
                    ec:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E5:39:54:2F:5A:5F:3F:EE:E4:33:D0:82:B4:48:80:F2:61:34:16
            X509v3 Authority Key Identifier:
                keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:b4:c6:d2:f2:37:7e:fe:3d:47:a0:12:0b:53:bd:1a:c9:2d:
         c9:8d:4e:27:15:bf:de:01:58:47:07:87:ee:03:0f:1a:e2:41:
         3b:7f:d1:0e:e6:0c:da:8e:e9:53:94:f6:e3:36:67:15:9f:f9:
         df:e9:61:c0:76:87:80:51:1a:3b:a5:e0:11:4b:60:5c:68:4a:
         7e:4c:d2:5a:65:0d:7f:fc:47:81:11:c2:4e:b0:9d:52:8f:78:
         ea:8e:aa:73:38:42:e0:aa:c0:8d:18:ec:8c:90:ee:c3:34:64:
         84:68:92:a3:dc:13:e3:6e:31:d3:e7:d7:a9:20:0b:bf:0c:84:
         2f:b4:a2:6c:ce:45:b6:a0:5b:11:52:ae:a6:7f:82:b8:3b:c6:
         ab:01:c1:7a:e4:2f:0f:b6:61:7b:ba:be:a0:83:22:0b:4f:e0:
         36:d9:3f:c8:f4:5e:25:38:03:32:df:0c:dc:2d:9d:31:db:60:
         39:f8:d6:98:a0:ae:0b:0b:2d:0f:cf:c6:56:d1:3e:c8:e7:f5:
         34:62:b1:5d:eb:fc:49:e8:3e:fc:78:08:0d:6a:4d:9b:45:eb:
         8c:c1:5d:07:1a:09:c6:2d:a0:2c:96:c9:f9:fe:57:4b:6d:40:
         15:c6:56:5d:74:1c:3a:de:d4:b5:81:ed:60:78:08:67:ae:df:
         fb:e3:83:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:34:09 2026 by rpki-client