Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft
File:                     ywyjSKyJHDNtjHlFpb1bMyXrXws.mft (raw, json)
Hash identifier:          6TQ7mzIYONr2/Z+lYwFp3CmZvzss57e/F4ZLztMWbbA=
Subject key identifier:   C5:C9:0A:95:DA:74:18:59:AD:B5:5F:57:7E:79:5B:5F:81:24:5F:C1
Authority key identifier: CB:0C:A3:48:AC:89:1C:33:6D:8C:79:45:A5:BD:5B:33:25:EB:5F:0B
Certificate issuer:       /CN=cb0ca348ac891c336d8c7945a5bd5b3325eb5f0b
Certificate serial:       01A1702538EF107CFE0A1FC02F162593AF53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft
Manifest number:          098D
Signing time:             Sat 24 Oct 2026 23:00:49 +0000
Manifest this update:     Sat 24 Oct 2026 23:00:49 +0000
Manifest next update:     Sun 25 Oct 2026 23:00:49 +0000
Files and hashes:         1: 1-Y3ijndscKqraUdYHPlGlvPiaww.roa (hash: xxGKvHWQXGb9FbfED6D0G6e4DrQ9E36ESQZN/cdfGxs=)
                          2: Xh_VSPJKOjJ808dZZ9cjw-Qe3R8.roa (hash: zFLbAkvTVFDLeRppM8t2hdy6uhNcDWH0+KfQkEKnBWc=)
                          3: h1rJ_5IwT6r9srNzb0xH-naB6tI.roa (hash: 1/JRSZ3nsnOwZgC6F3kqzm5Oq+Y/WO+2ye58dNCreY4=)
                          4: ywyjSKyJHDNtjHlFpb1bMyXrXws.crl (hash: LhC9yQ0es3UqkhqSTgOFBhA6nkBjnHYU7Y8ba86/gGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 23:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:70:25:38:ef:10:7c:fe:0a:1f:c0:2f:16:25:93:af:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb0ca348ac891c336d8c7945a5bd5b3325eb5f0b
        Validity
            Not Before: Oct 24 23:00:49 2026 GMT
            Not After : Oct 25 23:00:49 2026 GMT
        Subject: CN=c5c90a95da741859adb55f577e795b5f81245fc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:68:6e:d8:f4:58:e2:71:fd:b2:02:6f:97:8d:
                    3d:8e:0f:18:59:0f:bf:8f:75:2a:23:57:61:4e:92:
                    1d:be:18:75:b7:c5:20:f8:80:0d:85:f2:86:03:75:
                    f1:d5:b7:d9:c4:5d:a2:f4:a0:b3:cd:f7:60:ef:df:
                    b9:81:f7:24:53:0d:dc:8b:bd:48:42:ba:06:da:df:
                    b7:6c:8d:1d:9a:f7:4b:8f:13:9e:e1:e7:b1:e4:a7:
                    45:06:42:ea:1f:cf:84:3a:5e:60:ee:71:f8:da:37:
                    76:a8:8a:ad:05:1a:8c:df:fd:d0:75:35:8f:88:ea:
                    0b:8c:4d:88:70:4e:52:65:b8:b3:8c:50:73:88:0f:
                    dc:fc:e4:a7:f3:f7:02:0a:93:7c:ed:83:f6:59:a4:
                    97:57:af:eb:91:6c:a3:79:82:7c:75:6d:a7:8a:85:
                    12:68:f9:8b:49:4c:ce:3c:2d:8f:69:3d:ba:17:f4:
                    a3:4d:47:c9:0e:6a:1c:ce:e4:32:4f:59:70:ef:68:
                    09:68:41:74:e6:6c:a1:af:aa:47:91:6e:f9:9a:ea:
                    23:e2:1f:b8:b3:cd:27:6e:2d:8a:e5:61:d3:b6:75:
                    c4:be:5e:10:e6:45:07:5b:55:b6:7c:db:32:92:ad:
                    c6:77:11:1e:fa:03:78:dc:ba:98:e1:87:ea:e8:6a:
                    17:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C9:0A:95:DA:74:18:59:AD:B5:5F:57:7E:79:5B:5F:81:24:5F:C1
            X509v3 Authority Key Identifier:
                keyid:CB:0C:A3:48:AC:89:1C:33:6D:8C:79:45:A5:BD:5B:33:25:EB:5F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:cf:c5:e1:f1:10:65:05:40:c7:25:81:d3:1a:87:7c:db:f4:
         db:16:11:2b:ea:a3:d6:6d:a2:8d:5e:59:d9:21:4b:b0:14:19:
         9d:20:fc:31:98:0f:35:3a:fc:c7:88:17:0d:f3:f0:26:ad:5e:
         20:06:b3:27:d5:98:dd:e5:64:c1:7a:1d:2a:6c:c6:6a:e1:31:
         fd:d3:7d:8d:21:7c:e7:c6:b9:0e:11:0f:69:7a:b0:d8:41:65:
         e1:46:3c:b2:49:c0:8d:27:41:0c:8a:a4:da:30:d9:c7:31:4f:
         58:9f:a7:ec:07:ed:2a:28:a7:94:f6:60:9d:59:84:c2:16:fa:
         8b:45:5d:af:f9:af:90:5f:d7:7c:d0:58:af:56:43:29:16:8c:
         4a:89:e0:0d:45:ae:14:a7:46:3d:2d:b9:5d:2d:c3:40:46:1d:
         1f:bf:d9:55:59:c9:13:fd:7e:87:b7:2c:82:c0:3f:df:46:c6:
         47:cb:1c:00:75:4d:84:10:4f:53:5e:f5:b8:1b:9e:00:44:82:
         2a:88:e6:4c:c3:04:ae:37:ff:90:3a:b3:ac:18:3f:15:d8:0e:
         9d:68:ab:d9:8c:0e:ae:03:b6:14:80:a6:d6:04:22:f4:f1:94:
         f9:af:ca:f7:a6:4e:04:ac:5b:05:75:cc:04:2e:9f:af:c4:c2:
         bb:76:9e:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFwJTjvEHz+Ch/ALxYlk69TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMGNhMzQ4YWM4OTFjMzM2ZDhjNzk0NWE1YmQ1YjMzMjVl
YjVmMGIwHhcNMjYxMDI0MjMwMDQ5WhcNMjYxMDI1MjMwMDQ5WjAzMTEwLwYDVQQD
EyhjNWM5MGE5NWRhNzQxODU5YWRiNTVmNTc3ZTc5NWI1ZjgxMjQ1ZmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGhu2PRY4nH9sgJvl409jg8YWQ+/
j3UqI1dhTpIdvhh1t8Ug+IANhfKGA3Xx1bfZxF2i9KCzzfdg79+5gfckUw3ci71I
QroG2t+3bI0dmvdLjxOe4eex5KdFBkLqH8+EOl5g7nH42jd2qIqtBRqM3/3QdTWP
iOoLjE2IcE5SZbizjFBziA/c/OSn8/cCCpN87YP2WaSXV6/rkWyjeYJ8dW2nioUS
aPmLSUzOPC2PaT26F/SjTUfJDmoczuQyT1lw72gJaEF05myhr6pHkW75muoj4h+4
s80nbi2K5WHTtnXEvl4Q5kUHW1W2fNsykq3GdxEe+gN43LqY4Yfq6GoXOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXJCpXadBhZrbVfV355W1+BJF/BMB8GA1UdIwQY
MBaAFMsMo0isiRwzbYx5RaW9WzMl618LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXd5alNLeUpIRE50akhsRnBiMWJNeVhyWHdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lZjYxZDYtMDVkMS00ZmIyLWE2ZWEt
NDI1MjMyZmQ1NjQzLzEveXd5alNLeUpIRE50akhsRnBiMWJNeVhyWHdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9lZjYxZDYtMDVkMS00ZmIyLWE2ZWEtNDI1MjMyZmQ1NjQz
LzEveXd5alNLeUpIRE50akhsRnBiMWJNeVhyWHdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqs/F4fEQ
ZQVAxyWB0xqHfNv02xYRK+qj1m2ijV5Z2SFLsBQZnSD8MZgPNTr8x4gXDfPwJq1e
IAazJ9WY3eVkwXodKmzGauEx/dN9jSF858a5DhEPaXqw2EFl4UY8sknAjSdBDIqk
2jDZxzFPWJ+n7AftKiinlPZgnVmEwhb6i0Vdr/mvkF/XfNBYr1ZDKRaMSongDUWu
FKdGPS25XS3DQEYdH7/ZVVnJE/1+h7csgsA/30bGR8scAHVNhBBPU171uBueAESC
KojmTMMErjf/kDqzrBg/FdgOnWir2YwOrgO2FICm1gQi9PGU+a/K96ZOBKxbBXXM
BC6fr8TCu3aeBQ==
-----END CERTIFICATE-----
Generated at Sun Oct 25 03:07:53 2026 by rpki-client