Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
File:                     YgTQ-JHcR16nA-be89bq0ej3wtY.mft (raw, json)
Hash identifier:          AfUKbsi5N60t+a1nxBek7v7kskxdEi1xPRjfDMD1iZQ=
Subject key identifier:   73:C4:94:24:68:D1:21:D8:28:60:D1:89:24:C9:C1:FD:C3:55:05:52
Authority key identifier: 62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6
Certificate issuer:       /CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6
Certificate serial:       019D3941846DAA3D1C8FAF15D2CA203892BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
Manifest number:          188E
Signing time:             Sun 29 Mar 2026 11:01:28 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:28 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:28 +0000
Files and hashes:         1: YgTQ-JHcR16nA-be89bq0ej3wtY.crl (hash: Qobr3VXWWMalkA+0FEQckJw9IOFiwY/prmZbVqzkUHk=)
                          2: pYLH_zSZV0273TNEBYT79f1lmcg.roa (hash: k3iAoFqBBNaSN0iQRFo4OKQZqr7mC8NP7hdAPA1B80I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:84:6d:aa:3d:1c:8f:af:15:d2:ca:20:38:92:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6
        Validity
            Not Before: Mar 29 11:01:28 2026 GMT
            Not After : Mar 30 11:01:28 2026 GMT
        Subject: CN=73c4942468d121d82860d18924c9c1fdc3550552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a5:e2:b7:1b:66:46:71:a9:8f:86:c5:71:eb:
                    bc:85:b6:d3:d0:76:36:88:d1:31:fd:bd:4b:97:bd:
                    3c:47:46:64:cd:5c:ba:4b:dc:f0:4c:1b:01:df:66:
                    39:e4:51:9c:e5:89:f7:2d:64:ce:9a:d7:37:57:de:
                    a1:70:35:a2:2d:c5:87:51:16:99:42:00:a0:da:db:
                    fb:90:1c:9f:7d:1b:62:b3:53:0d:23:91:32:d3:cf:
                    5e:22:b4:a3:bc:39:65:5e:26:fb:8a:f3:d8:ed:b1:
                    e8:60:20:c8:47:2e:5e:f6:52:8b:e4:53:d7:ef:20:
                    a1:16:f4:d6:b3:48:fb:23:99:32:ce:de:92:ce:2f:
                    19:a2:b8:0b:d1:64:e9:d9:66:4f:d4:e0:01:f1:a1:
                    b4:48:dd:26:24:7b:14:f5:f0:78:03:59:35:a8:e8:
                    50:e5:d2:82:77:8c:c2:7e:7c:a3:a3:ab:2d:d2:7e:
                    b4:48:04:7c:b8:bf:45:f3:f4:0b:ea:46:ca:b3:c2:
                    f9:b9:9d:af:4e:aa:f3:20:c8:76:d2:12:1e:ea:7e:
                    16:93:81:07:6b:d4:6d:b8:33:26:95:2f:4b:f6:5d:
                    8f:6d:ac:46:ce:cd:b1:7e:f0:8a:f1:82:d9:18:6a:
                    52:e5:ee:a2:0c:ba:ed:c4:7d:b6:74:16:91:c6:53:
                    f0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C4:94:24:68:D1:21:D8:28:60:D1:89:24:C9:C1:FD:C3:55:05:52
            X509v3 Authority Key Identifier:
                keyid:62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f9:c5:6d:b6:3e:bd:35:74:ff:c6:c1:3f:93:62:88:4c:67:
         50:8a:8f:21:c0:ae:73:1c:e5:94:6d:b3:7e:a3:aa:8e:53:5e:
         75:73:73:1d:31:a9:03:1b:d5:b6:a9:f1:d9:ce:ca:57:ed:ac:
         ee:9e:fd:3d:3e:6a:98:a7:f7:0d:7b:f1:ba:56:bc:2f:9d:94:
         a2:5e:1c:da:83:cc:e4:5f:ac:7f:da:2d:e1:ac:c1:d7:ab:95:
         1c:20:e9:dc:f6:d7:c8:00:f2:61:c0:f0:82:8d:47:fc:70:17:
         a6:1c:b4:c1:af:fd:cc:6d:f0:d8:11:d3:d3:84:ed:2f:68:66:
         7e:8b:ab:4d:b8:4b:40:23:2e:e1:9d:f3:57:3a:7f:1f:f8:07:
         70:6a:6c:f6:02:af:80:52:4b:f3:8f:83:8c:2d:a2:f1:bf:86:
         f0:23:ac:34:54:16:19:98:31:4a:67:96:2c:d5:3d:0b:d1:a0:
         7d:6a:ee:df:14:0d:de:fa:1c:b1:5e:56:19:f8:01:6d:2f:d3:
         09:70:78:db:48:2f:e3:aa:4d:1f:8c:24:54:a6:e5:dc:d6:24:
         cc:ae:5f:73:da:57:cc:8d:d4:5b:f8:12:c3:ff:7b:bb:ea:6c:
         16:e6:9c:97:5f:26:7f:8e:32:c5:e0:10:e7:48:64:22:3b:ae:
         c2:e8:1d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:18 2026 by rpki-client