Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
File:                     YC8n-tkkUqJUswoGDtODsTx1jtY.mft (raw, json)
Hash identifier:          3/Czrrbh9pUKRL37FJAmScyOv00rQAFESlNW44mB7vs=
Subject key identifier:   B3:BB:96:0D:CE:A2:1B:AB:F2:88:50:55:EF:49:42:58:17:F6:1E:B8
Authority key identifier: 60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6
Certificate issuer:       /CN=602f27fad92452a254b30a060ed383b13c758ed6
Certificate serial:       019E32299DA602DEB1632DB3246618043758
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
Manifest number:          0B75
Signing time:             Sat 16 May 2026 19:00:48 +0000
Manifest this update:     Sat 16 May 2026 19:00:48 +0000
Manifest next update:     Sun 17 May 2026 19:00:48 +0000
Files and hashes:         1: YC8n-tkkUqJUswoGDtODsTx1jtY.crl (hash: redkjZkPaE5rC+JghJ/XzvhTnmeadK90t+immU/OH1Q=)
                          2: yjdYp8YMAtj2_Dytxy6NEaoV14M.roa (hash: /wldluyAt2xqR07lomlO0CgTxaAUVhzs9ZM3VW1cPGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:29:9d:a6:02:de:b1:63:2d:b3:24:66:18:04:37:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=602f27fad92452a254b30a060ed383b13c758ed6
        Validity
            Not Before: May 16 19:00:48 2026 GMT
            Not After : May 17 19:00:48 2026 GMT
        Subject: CN=b3bb960dcea21babf2885055ef49425817f61eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2d:57:4b:72:7d:4a:2b:32:3b:7a:cc:ec:cc:
                    dc:38:b7:59:ae:72:a4:94:24:3e:5b:16:3b:48:4a:
                    ee:84:14:00:09:34:de:43:f1:ef:32:ab:ea:71:14:
                    db:e2:58:44:5e:34:d9:ae:60:9f:1d:7b:30:69:1d:
                    e7:3e:49:0b:e4:9d:11:b4:f1:c5:45:50:78:c6:c5:
                    6f:3b:f6:1b:ae:73:96:9e:4d:bf:13:b3:00:8c:59:
                    2c:77:79:30:ac:1d:d0:62:ed:cd:21:a9:82:b9:3f:
                    2b:d7:d0:d8:ef:87:18:e8:0f:56:b4:73:ed:78:d7:
                    e5:f4:25:c2:94:fc:41:ea:25:12:9e:95:4a:00:4b:
                    70:58:ed:9f:10:88:85:be:8d:00:f9:bc:59:7f:1d:
                    19:9c:19:68:d1:70:f1:22:e4:a3:4c:f0:0f:8c:a9:
                    a8:24:07:1f:55:a1:ab:35:7b:8b:1c:48:59:f7:e4:
                    21:48:19:fe:db:98:64:0a:01:48:c0:6f:c8:39:41:
                    e5:77:f4:8e:88:ae:11:ca:aa:79:51:ec:31:16:15:
                    34:e4:ba:aa:a8:87:ac:e0:69:63:b6:80:c0:7a:0e:
                    6e:46:cc:63:3b:28:72:68:f4:b1:35:7e:8f:c3:d9:
                    d0:63:82:59:87:29:b7:7f:70:c8:98:2b:ab:75:ed:
                    fc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BB:96:0D:CE:A2:1B:AB:F2:88:50:55:EF:49:42:58:17:F6:1E:B8
            X509v3 Authority Key Identifier:
                keyid:60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:54:84:90:12:20:52:42:ac:bd:6b:5a:ba:b1:90:fe:0e:a4:
         2a:9a:e5:e4:1b:ba:5c:35:f0:fa:54:6b:77:05:8f:e2:bd:0f:
         d5:d2:a9:d8:82:81:5a:78:80:44:0d:74:a0:a5:fe:20:96:ab:
         9a:65:6c:46:83:38:8c:0b:dd:32:43:56:91:5e:e2:3f:f0:e2:
         fb:e0:2a:2b:d1:6a:cb:69:8b:31:90:3b:c0:4f:1f:b7:e2:b0:
         3b:88:c8:b6:c8:66:bf:f8:c0:d4:5d:68:2d:86:45:64:36:3b:
         be:55:a4:1a:13:f6:5e:7a:bf:f2:5b:a3:36:ca:a0:92:54:e8:
         54:3e:60:08:94:d1:b7:b3:f1:9d:6b:fc:f3:16:a4:78:13:61:
         48:57:76:f8:aa:04:48:ea:19:66:bd:ac:ac:14:6d:9e:e2:f1:
         71:96:11:d0:05:f3:3a:8d:37:6e:a7:fd:90:9b:38:c4:32:2e:
         d8:ec:ac:9b:cd:50:0c:54:83:f9:dc:eb:2b:49:d3:c2:fd:a9:
         49:c0:8d:a3:86:0f:d2:2a:d1:4d:4b:f0:ac:ae:7b:d5:29:8d:
         10:bf:18:c7:13:e4:6c:2a:f5:e9:a9:5f:04:53:ad:9e:48:46:
         65:86:c8:74:3d:fc:90:cd:73:72:b3:80:ae:9d:c1:4f:cf:2d:
         8a:3f:f0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:42:25 2026 by rpki-client