Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
File:                     ysIWQb28-sJMVLakhZSDxeQWQLY.mft (raw, json)
Hash identifier:          nCi98af7uJqTQNAsOicCMFjYNMRTivIEL8/cMq9k8C4=
Subject key identifier:   25:E6:9A:0B:E3:AD:27:E1:C3:43:D7:CE:36:1B:35:92:E6:BE:8A:AB
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Certificate issuer:       /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial:       019D0477E19314380446FB94AEC7094ED6EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
Manifest number:          187B
Signing time:             Thu 19 Mar 2026 05:00:58 +0000
Manifest this update:     Thu 19 Mar 2026 05:00:58 +0000
Manifest next update:     Fri 20 Mar 2026 05:00:58 +0000
Files and hashes:         1: 3I0ccbWDDm2AJ0Og3v2UYgTm0kU.roa (hash: vjrwzp/zqZBxc6wOSE5N6kztkRal6ScIrhGe+5Xi3bI=)
                          2: MEjN6NiBRUno6jMiVrI76qBgUXE.roa (hash: s2vQYXj0w7LOeK8L7upi2AL1yMhCtXme3TjzeGEM0n8=)
                          3: ZknLlp2vh9WJk0H7iXXLOw9c2pU.roa (hash: S6ynW8hTvcrSOBVEp2ULNqC2ZlGWhPVxKi1FBjbkc4c=)
                          4: ysIWQb28-sJMVLakhZSDxeQWQLY.crl (hash: 7z8Jc6d/Yb1gGQF1txfxHX03zOg6fzWViCE1wNzTfDw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 05:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:04:77:e1:93:14:38:04:46:fb:94:ae:c7:09:4e:d6:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
        Validity
            Not Before: Mar 19 05:00:58 2026 GMT
            Not After : Mar 20 05:00:58 2026 GMT
        Subject: CN=25e69a0be3ad27e1c343d7ce361b3592e6be8aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:43:15:0b:5e:f7:8a:bf:93:cc:3c:98:ba:ec:
                    21:74:8b:74:99:24:e9:9d:95:a6:76:8b:ed:61:60:
                    b3:ac:8a:54:72:6b:04:e7:58:56:c5:9b:c1:44:b0:
                    41:69:fb:eb:05:e7:6f:96:1b:39:d2:31:6a:57:74:
                    bb:0d:b9:cd:1b:b3:f3:be:96:fe:fd:77:be:1a:4e:
                    eb:55:e8:7c:93:a5:77:6a:9f:1c:a6:f3:6a:f9:40:
                    a3:b5:18:be:6d:a9:ff:42:ee:a0:a9:12:34:05:31:
                    b8:99:09:ca:51:30:bb:e2:b8:24:4b:a1:af:43:03:
                    f1:0f:d1:ea:17:44:d8:ba:2e:8a:79:45:8a:a9:54:
                    48:cb:b8:ab:c9:6b:84:f3:99:12:72:1b:5c:c8:e3:
                    e8:95:5e:77:d1:70:f3:43:61:f5:58:e7:f9:e1:fd:
                    5e:95:51:5c:cd:21:ec:37:2b:7c:7f:be:9f:5b:21:
                    3a:36:5f:cf:6a:ab:f1:1f:20:21:b4:d5:c9:89:e5:
                    8a:3a:d4:08:26:b5:da:3a:3e:01:6f:59:c5:d4:3e:
                    42:4b:70:4a:22:03:b1:02:22:25:62:3d:0b:48:e6:
                    bf:dd:81:ea:1b:91:fb:c6:07:c8:54:80:87:73:15:
                    b2:94:2f:99:9a:d5:38:0e:11:76:f1:3a:cb:61:20:
                    08:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E6:9A:0B:E3:AD:27:E1:C3:43:D7:CE:36:1B:35:92:E6:BE:8A:AB
            X509v3 Authority Key Identifier:
                keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:55:ba:e7:85:5e:b4:9c:47:d0:33:0c:96:16:36:8a:dc:57:
         ff:91:76:19:d2:d2:af:7f:c0:fe:6b:c5:ae:72:b8:d8:0a:07:
         76:36:e6:0d:bb:5c:3e:9f:40:9c:59:a5:39:9b:82:c2:98:87:
         60:cc:0f:4e:8c:4b:06:9d:12:b2:9e:d8:45:33:38:9d:7d:91:
         21:6d:e7:43:dd:06:ca:87:73:fa:dc:8a:74:99:bd:de:12:91:
         a8:59:64:7f:33:03:50:e1:8e:17:94:1d:68:9f:78:81:03:f9:
         6c:36:cf:4a:15:9f:bc:10:5f:f9:1b:c1:da:c1:23:90:db:8b:
         50:59:23:5a:15:ca:ec:41:83:da:5f:89:8a:5a:69:52:3e:d5:
         cd:4c:4b:45:8d:cc:a7:c3:3d:8a:a3:88:d3:b8:a0:da:80:d3:
         27:58:53:52:85:33:5b:66:1a:fc:16:54:a6:a5:10:2c:89:05:
         00:bb:b2:68:c7:f5:79:41:e6:6b:f4:13:5d:f3:da:65:51:35:
         ef:0f:ce:e7:d8:41:67:34:1c:87:4d:10:6b:66:d4:1b:46:1a:
         8a:a2:b7:a5:fa:cd:be:2d:6c:2c:d6:68:d8:8b:44:06:b6:23:
         46:9e:ad:39:97:1e:63:08:b3:40:09:52:91:6a:46:b3:6b:b1:
         ee:dc:1e:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0Ed+GTFDgERvuUrscJTtbuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYzIxNjQxYmRiY2ZhYzI0YzU0YjZhNDg1OTQ4M2M1ZTQx
NjQwYjYwHhcNMjYwMzE5MDUwMDU4WhcNMjYwMzIwMDUwMDU4WjAzMTEwLwYDVQQD
EygyNWU2OWEwYmUzYWQyN2UxYzM0M2Q3Y2UzNjFiMzU5MmU2YmU4YWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUMVC173ir+TzDyYuuwhdIt0mSTp
nZWmdovtYWCzrIpUcmsE51hWxZvBRLBBafvrBedvlhs50jFqV3S7DbnNG7Pzvpb+
/Xe+Gk7rVeh8k6V3ap8cpvNq+UCjtRi+ban/Qu6gqRI0BTG4mQnKUTC74rgkS6Gv
QwPxD9HqF0TYui6KeUWKqVRIy7iryWuE85kSchtcyOPolV530XDzQ2H1WOf54f1e
lVFczSHsNyt8f76fWyE6Nl/PaqvxHyAhtNXJieWKOtQIJrXaOj4Bb1nF1D5CS3BK
IgOxAiIlYj0LSOa/3YHqG5H7xgfIVICHcxWylC+ZmtU4DhF28TrLYSAI8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXmmgvjrSfhw0PXzjYbNZLmvoqrMB8GA1UdIwQY
MBaAFMrCFkG9vPrCTFS2pIWUg8XkFkC2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUt
OGFiZjVlZTZjNGFkLzEveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUtOGFiZjVlZTZjNGFk
LzEveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1W654Ve
tJxH0DMMlhY2itxX/5F2GdLSr3/A/mvFrnK42AoHdjbmDbtcPp9AnFmlOZuCwpiH
YMwPToxLBp0Ssp7YRTM4nX2RIW3nQ90Gyodz+tyKdJm93hKRqFlkfzMDUOGOF5Qd
aJ94gQP5bDbPShWfvBBf+RvB2sEjkNuLUFkjWhXK7EGD2l+JilppUj7VzUxLRY3M
p8M9iqOI07ig2oDTJ1hTUoUzW2Ya/BZUpqUQLIkFALuyaMf1eUHma/QTXfPaZVE1
7w/O59hBZzQch00Qa2bUG0YaiqK3pfrNvi1sLNZo2ItEBrYjRp6tOZceYwizQAlS
kWpGs2ux7tweNg==
-----END CERTIFICATE-----
Generated at Thu Mar 19 13:45:09 2026 by rpki-client