Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
File:                     yQ7dEObZBiIVv9ZORbO_imuZY3k.mft (raw, json)
Hash identifier:          bNMN2ZZ5mBvUdZCpKQaOvW4/Ifi7eAFZgarsRrX0r2A=
Subject key identifier:   AF:E4:A7:C6:59:2C:42:F2:CB:E1:85:45:4E:B6:A1:CD:E0:0D:22:5C
Authority key identifier: C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79
Certificate issuer:       /CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
Certificate serial:       01A0257B3B8D648C468BD9CB9226C660FDAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
Manifest number:          0867
Signing time:             Fri 21 Aug 2026 18:00:28 +0000
Manifest this update:     Fri 21 Aug 2026 18:00:28 +0000
Manifest next update:     Sat 22 Aug 2026 18:00:28 +0000
Files and hashes:         1: 97B8Hc4bCQZgRuJkPCMl4qPb1Ok.roa (hash: xJ7Id6kjvXsULsQ/zceu4XIQnNvHcYudEa21JYWOH88=)
                          2: yQ7dEObZBiIVv9ZORbO_imuZY3k.crl (hash: PmOUeFRkwp18vkfOlYYnzx1eG3j4OakLotXaPYLM39c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:25:7b:3b:8d:64:8c:46:8b:d9:cb:92:26:c6:60:fd:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
        Validity
            Not Before: Aug 21 18:00:28 2026 GMT
            Not After : Aug 22 18:00:28 2026 GMT
        Subject: CN=afe4a7c6592c42f2cbe185454eb6a1cde00d225c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:00:23:14:21:47:fe:14:a6:b5:73:1a:bb:9e:
                    81:f7:1e:a3:fe:33:09:8b:8f:09:7c:17:4e:12:45:
                    37:49:7a:c1:5a:c9:8f:06:36:47:c5:96:23:5d:ab:
                    e9:19:81:b1:18:f4:6d:88:a9:0a:28:e2:3b:48:ee:
                    54:4d:4b:6d:40:c6:54:9e:e3:9d:83:d6:4c:37:d2:
                    eb:39:51:87:22:07:55:ea:73:12:11:53:14:3c:7b:
                    bb:2a:90:b9:75:df:45:55:f0:ce:3f:98:6e:14:07:
                    7e:37:b3:60:bd:d7:64:b8:d2:73:46:08:09:77:05:
                    78:ab:26:6a:60:b7:55:75:cb:1e:c0:3e:d4:03:9b:
                    27:a6:cd:08:6c:bb:9d:1d:30:bf:a5:6c:65:68:c2:
                    53:80:8f:d4:2f:51:91:a1:2e:a9:2b:7c:1e:06:d0:
                    12:de:61:c0:2b:41:98:ff:d0:d2:ca:cd:99:10:8b:
                    35:a8:4e:a6:8d:ad:62:18:6f:4c:34:e4:b0:3a:f5:
                    5d:d5:16:bb:dd:cc:63:5b:ff:3d:49:92:db:bb:ef:
                    19:0d:f3:a6:67:02:db:8b:8c:d0:31:fb:7b:cd:57:
                    5c:da:5f:73:0b:ad:1f:4d:b9:ab:94:8a:cd:d6:ec:
                    ba:f2:6d:22:58:97:ec:f6:3d:c3:84:84:a4:24:cd:
                    5a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E4:A7:C6:59:2C:42:F2:CB:E1:85:45:4E:B6:A1:CD:E0:0D:22:5C
            X509v3 Authority Key Identifier:
                keyid:C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c1:3f:3f:26:bc:cb:53:bc:63:75:67:6a:3f:6c:66:7c:d4:
         4c:30:16:a8:7f:91:e1:07:a9:2e:56:72:44:0c:c3:a8:7a:23:
         41:6f:d0:8f:c1:61:d6:e8:80:52:57:b6:bc:08:e8:63:3f:be:
         77:ce:a9:06:9b:dd:13:b7:27:5d:88:57:b9:17:82:90:55:3f:
         56:8a:56:ea:22:c7:92:f2:28:8c:fb:7a:ef:9b:9b:60:3a:a1:
         12:35:5a:b5:e5:31:fb:fd:e9:1f:b7:c3:eb:b0:1a:b7:8a:af:
         05:a7:92:0b:63:cb:d2:0b:8f:4e:0b:61:1b:d9:39:7f:7c:39:
         60:60:99:e7:dc:86:03:6b:42:0c:f0:1c:75:41:15:af:46:a8:
         f1:ca:4c:9b:dc:18:0d:65:b2:55:3f:d6:09:2e:3a:cc:a6:ba:
         e6:6e:a9:48:1a:c1:02:ae:28:33:cd:53:6b:e9:e0:2c:ba:bf:
         b0:d8:7d:58:77:3b:7e:31:e8:3c:f2:ce:61:a8:88:da:47:3f:
         47:77:f7:1d:1f:67:87:e7:94:7a:9c:8f:e0:8f:6d:88:38:e3:
         77:76:0e:8c:8b:88:0f:63:54:86:9d:f7:74:02:6a:55:8c:de:
         a7:1f:56:04:c7:34:2c:ef:8f:fb:bf:1f:6c:db:c3:bc:ff:2d:
         07:18:ad:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:52:28 2026 by rpki-client