Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
File:                     yudPzOQZM_QnxTfTZdXnYdJlXrY.mft (raw, json)
Hash identifier:          o4qyqQTpjHp9jL4L/E/Ez9VqPUAgY2ch5xZAupvMzPs=
Subject key identifier:   ED:0D:03:2D:28:AB:0F:E2:5C:69:FB:4D:B9:42:6D:64:7E:AA:CB:06
Authority key identifier: CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
Certificate issuer:       /CN=cae74fcce41933f427c537d365d5e761d2655eb6
Certificate serial:       01A00213FCE4044DAC9E002F7C8FCB83A261
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
Manifest number:          113A
Signing time:             Fri 14 Aug 2026 21:00:59 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:59 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:59 +0000
Files and hashes:         1: QSn62LM0lzdVFTae3oXlcnSJBrM.roa (hash: 1Kyh630uZcpfXJcHCHBYOXiuPYvcumJJUvLTjPHNEfg=)
                          2: yudPzOQZM_QnxTfTZdXnYdJlXrY.crl (hash: cM4EN6uPhg4y6eCQJZkmuLbwGxlcizDx5pLQNA1ymG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:fc:e4:04:4d:ac:9e:00:2f:7c:8f:cb:83:a2:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cae74fcce41933f427c537d365d5e761d2655eb6
        Validity
            Not Before: Aug 14 21:00:59 2026 GMT
            Not After : Aug 15 21:00:59 2026 GMT
        Subject: CN=ed0d032d28ab0fe25c69fb4db9426d647eaacb06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:68:ff:2c:f5:3c:0f:6e:91:76:5f:d8:21:82:
                    7a:88:b5:6a:22:28:23:99:07:33:95:cc:bd:4c:37:
                    bc:dd:36:5a:05:74:ec:92:d1:56:fd:7c:db:a1:20:
                    aa:d2:62:00:ef:94:58:2b:8d:b4:a8:6c:df:fb:6a:
                    2b:19:1c:f5:35:73:2b:6b:ad:e4:79:a4:99:94:d4:
                    d2:c1:2a:b1:51:07:33:8c:f6:94:78:33:00:25:9b:
                    91:19:12:5b:a0:cc:67:8e:0b:09:17:b0:75:b4:e8:
                    b8:08:4d:6a:4e:b9:e0:2c:64:e7:7d:d0:33:43:d7:
                    8e:c9:5f:4c:fd:40:93:2c:72:77:0a:47:d4:bf:a3:
                    da:c3:c4:a0:0e:73:e8:0a:35:79:45:5f:3a:68:e5:
                    93:bc:fa:31:8b:50:b0:f4:22:67:5b:7a:1f:22:c0:
                    b7:a9:a4:53:c3:ff:d8:8b:22:b6:2b:8c:87:87:50:
                    99:83:54:cc:bf:0c:d7:6a:b2:b1:a8:2d:d0:05:9e:
                    19:6b:bf:c4:22:06:80:3f:3c:b4:b1:9a:85:cf:9f:
                    e4:a1:d9:2d:94:dc:19:41:22:05:1c:c6:a3:4f:3c:
                    24:84:36:14:4a:10:48:9a:b4:ee:0d:91:95:3f:09:
                    26:b9:d2:b2:3a:07:66:fa:14:e3:5a:db:7d:65:d7:
                    21:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0D:03:2D:28:AB:0F:E2:5C:69:FB:4D:B9:42:6D:64:7E:AA:CB:06
            X509v3 Authority Key Identifier:
                keyid:CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b6:a1:a3:d2:c8:ca:28:14:48:57:2e:70:a7:36:5d:f8:0d:
         f1:fe:fe:a0:44:27:7e:23:a2:4a:05:b7:9d:97:4c:8b:e8:f5:
         a7:63:e7:8c:1a:da:2a:39:8b:94:07:d7:b0:58:87:ac:2e:5d:
         93:1e:bc:11:c8:10:2e:0b:4c:19:c1:09:c7:a0:c7:a4:f7:66:
         cd:66:81:b8:84:3f:c1:36:f0:56:ff:9a:89:a0:3e:0b:fa:14:
         12:b2:f9:48:1c:f8:6b:a6:73:89:de:44:fc:3a:6f:3d:a5:2f:
         68:e1:09:67:05:e1:54:08:3d:46:4b:62:b1:7e:c2:80:d2:5d:
         60:f3:ca:64:2f:6d:bd:5b:af:d5:61:89:b9:2a:a8:af:75:0e:
         d7:43:99:65:1a:f6:db:e0:45:a6:13:b4:9a:dd:aa:af:3b:9b:
         db:af:ab:56:07:a7:2c:29:7f:9d:96:79:94:b8:91:ab:e1:8a:
         6e:f6:11:a4:b5:2a:d0:76:b8:fc:33:07:d4:e5:10:20:7f:51:
         04:48:15:f7:da:f9:be:b9:ab:df:d2:83:94:d2:fc:ed:50:b7:
         ea:de:03:34:f4:10:1c:a3:01:2e:cc:33:34:1f:94:1d:1a:14:
         b6:7d:c4:89:6b:1b:ff:21:c3:cf:ce:a2:6b:7d:d7:33:a9:b2:
         0f:f2:aa:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:29:49 2026 by rpki-client