Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
File:                     ybBR6OaBSbZgROfeSuWdc25Teqo.mft (raw, json)
Hash identifier:          xgCA2ulPZ/D0jUCyjnvs5kBJJ4WUM1Dq9Hy0Eb8z/WQ=
Subject key identifier:   7F:B6:3A:16:B8:AE:04:A1:22:91:FA:79:D8:F6:C7:84:AA:30:2C:53
Authority key identifier: C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
Certificate issuer:       /CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Certificate serial:       01A002B8B03879A161A3D474BAF521B9E83A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
Manifest number:          09EA
Signing time:             Sat 15 Aug 2026 00:00:53 +0000
Manifest this update:     Sat 15 Aug 2026 00:00:53 +0000
Manifest next update:     Sun 16 Aug 2026 00:00:53 +0000
Files and hashes:         1: ElQ5chtEAtBtP2GIXdac_TddA80.roa (hash: HOH5oCt/YkRKpTxo1H1ugWQGWMm04Hcv5fnFxFjdw8s=)
                          2: mDTOHKx9pFPb6EOP9UxQxm-ClKw.roa (hash: 38/vqHt1v0uvrIdlEvEwCRci+eMQynBKytD9wiXBCtc=)
                          3: nu9XCXuPflVxiBkepDLOxds4g2s.roa (hash: W/feVk1DUwfkmSjB+I5O4CPhUu5C032era/IbMRpza0=)
                          4: ybBR6OaBSbZgROfeSuWdc25Teqo.crl (hash: xTBa4cfNQUT3gP0s8ENiSbkPr4bquSxnK+tOl2UZku4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 00:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b8:b0:38:79:a1:61:a3:d4:74:ba:f5:21:b9:e8:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
        Validity
            Not Before: Aug 15 00:00:53 2026 GMT
            Not After : Aug 16 00:00:53 2026 GMT
        Subject: CN=7fb63a16b8ae04a12291fa79d8f6c784aa302c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f3:89:e9:f9:f3:2f:c2:c0:15:f8:2c:3b:e8:
                    9f:b5:ef:93:aa:c7:98:75:b8:e1:69:83:3f:30:a4:
                    58:48:3e:98:ec:d0:a8:ef:7e:78:71:b1:b3:73:db:
                    ae:19:ac:29:d6:ac:5a:32:20:71:cd:8a:ca:f3:15:
                    fc:0b:d6:1b:ce:73:94:14:19:d3:43:f4:46:17:fe:
                    36:58:f7:2b:37:98:91:65:60:68:93:f5:4f:af:70:
                    f4:39:26:1b:cb:8d:5e:84:1d:75:28:ff:54:f1:8e:
                    8c:7b:e9:cd:17:c7:af:f6:c8:6b:32:23:4e:eb:c4:
                    bd:27:29:8b:16:4d:f6:1a:cb:5b:8a:44:1a:b7:08:
                    4b:61:17:e5:50:48:e2:58:b0:f6:b9:77:6d:42:5f:
                    d9:53:81:5a:51:de:42:70:73:54:f6:0d:13:1f:38:
                    d9:22:65:c2:b4:50:19:c9:2d:0c:c5:9c:49:db:de:
                    6e:e4:17:d4:20:73:b2:cc:2f:22:4a:ef:93:6e:e3:
                    db:be:16:e3:0c:13:03:1a:19:42:f4:63:60:49:75:
                    a2:a6:b4:ff:29:55:d1:d2:ef:11:c5:88:83:36:f7:
                    63:e8:f5:34:7a:33:96:17:cc:a2:2c:a6:1e:fa:29:
                    85:c1:10:77:48:3e:93:e1:94:6d:61:02:6b:be:b8:
                    3d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B6:3A:16:B8:AE:04:A1:22:91:FA:79:D8:F6:C7:84:AA:30:2C:53
            X509v3 Authority Key Identifier:
                keyid:C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:23:93:de:b3:f8:87:ad:ad:d4:b2:57:95:69:ed:e5:ad:7a:
         9e:10:1c:15:2e:aa:de:2e:39:1e:94:e0:76:d4:30:1c:ae:dc:
         59:f2:c7:cb:8c:4e:1f:bf:e8:fe:62:46:06:3e:4f:df:f4:5c:
         ed:99:66:da:2d:58:3f:10:6f:0d:1b:30:7f:27:34:38:f3:fa:
         bd:67:e4:ae:fa:a0:99:e1:f2:bb:1d:b6:e8:4e:10:e2:b7:d2:
         a1:0c:32:58:ce:79:a5:33:47:b1:4b:f4:39:05:1c:28:ce:87:
         9f:21:eb:d5:a0:dd:79:7a:58:ba:28:50:9f:9c:71:a7:b7:e6:
         1f:ca:3d:aa:b1:aa:31:24:f6:1a:6b:63:cf:59:65:30:e1:5a:
         30:1c:39:03:5e:6e:a5:44:24:5e:ef:e4:d9:22:15:95:9d:2a:
         6b:2a:89:d4:90:f9:0d:df:9e:42:d1:7b:b0:e3:cb:1f:b1:8f:
         d8:78:f6:7b:79:de:0a:ec:7d:55:c1:2b:13:5f:2e:10:09:5a:
         bf:18:81:2c:6d:54:9b:9e:fb:8e:08:ca:90:ae:8e:55:4f:00:
         36:b4:54:16:36:db:c8:45:0d:a7:a0:e9:3b:e1:1b:30:7f:cf:
         26:b4:89:76:b6:a6:f0:0a:0b:aa:b4:4f:e4:87:d4:14:f3:84:
         06:6c:a0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:32:00 2026 by rpki-client