Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
File:                     Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft (raw, json)
Hash identifier:          JDFPPFfnDiFBAnnF0IZZcs6NzJMQsSqAlYiCWGVruFs=
Subject key identifier:   5B:AF:A8:B8:AA:C5:79:C0:F9:1F:1D:00:4C:B9:33:2D:C8:B9:0E:48
Authority key identifier: 63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
Certificate issuer:       /CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Certificate serial:       01A16CED9DA7EA73DD4BC233B47DEA7C53FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
Manifest number:          177E
Signing time:             Sat 24 Oct 2026 08:01:13 +0000
Manifest this update:     Sat 24 Oct 2026 08:01:13 +0000
Manifest next update:     Sun 25 Oct 2026 08:01:13 +0000
Files and hashes:         1: 614IUYG3gRvLH7wKp-4pxVgVM8s.roa (hash: dRzT8GkPgOG738tzI7AWfIU5a3zLHU58ogZFdTFRUqo=)
                          2: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl (hash: siIdj3rlVJLSSA5l0ZfJ2sLub6XdXSJw4JzCK5jpFpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 04:42:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6c:ed:9d:a7:ea:73:dd:4b:c2:33:b4:7d:ea:7c:53:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
        Validity
            Not Before: Oct 24 08:01:13 2026 GMT
            Not After : Oct 25 08:01:13 2026 GMT
        Subject: CN=5bafa8b8aac579c0f91f1d004cb9332dc8b90e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:37:fa:bd:4c:a7:41:b6:74:90:5f:ec:4f:70:
                    aa:12:57:98:41:9f:c2:c5:19:69:51:51:a7:0a:8e:
                    a0:d2:d3:51:ee:32:60:1e:cf:83:1b:11:56:b5:28:
                    cd:bd:81:58:21:73:e2:1c:f7:e7:35:a4:55:e7:91:
                    18:dc:a2:17:2e:e0:5b:54:78:c9:fb:b5:7e:fd:77:
                    15:10:28:21:33:9a:2f:9e:ff:41:78:94:83:e4:09:
                    76:4e:f3:34:1c:a7:6b:88:ed:cc:1f:4e:5f:c4:c4:
                    d2:41:21:41:cc:56:79:eb:c9:e8:23:bf:39:49:a4:
                    74:9f:d4:b8:22:cf:59:45:b5:d4:ea:4f:cf:88:91:
                    9a:e5:dc:53:84:eb:f5:8a:fb:07:a5:82:ef:69:93:
                    3f:67:0c:69:eb:12:45:78:df:85:3b:3b:ab:58:02:
                    a4:fd:65:00:78:9d:50:dd:81:63:da:a5:31:47:fc:
                    3f:04:35:75:7d:e3:69:fb:0a:32:95:43:a4:5e:7b:
                    94:cb:a1:23:b7:c1:61:43:64:c6:89:a0:0a:bf:6d:
                    17:4a:4e:ba:b4:af:fa:55:0b:69:18:aa:8c:1b:49:
                    c1:fc:fe:1b:d1:49:d0:4f:af:e7:9b:4e:35:b3:64:
                    f8:27:1f:8c:71:6d:f5:ad:31:dd:e1:4a:6d:20:a2:
                    6a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AF:A8:B8:AA:C5:79:C0:F9:1F:1D:00:4C:B9:33:2D:C8:B9:0E:48
            X509v3 Authority Key Identifier:
                keyid:63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:10:5e:81:f8:33:a8:a2:69:64:6e:9f:b2:2a:81:6e:45:0e:
         37:d0:01:d5:64:9f:09:8e:3f:40:57:88:a6:88:4d:dd:0b:35:
         b9:06:ef:4b:e1:91:41:6f:8e:ad:a3:03:ba:65:ba:12:dd:90:
         e8:89:65:9e:50:82:e5:a1:ba:4d:b7:68:e6:c4:c6:6c:cc:b3:
         dd:ad:02:51:05:1b:00:f4:67:e6:91:0d:9d:ca:e5:fc:c9:3c:
         65:ef:35:81:86:4b:6e:ea:95:42:04:5b:da:9e:5d:30:ef:4c:
         46:a3:07:7b:32:69:ae:f3:11:a3:83:2d:4b:33:64:96:e3:ca:
         7b:4e:32:5e:20:c1:2d:18:55:8e:27:f5:f6:d1:83:79:4a:f3:
         30:de:c4:85:96:63:a2:d7:80:33:f6:d7:2d:bc:13:e1:31:19:
         0e:9f:d3:ea:9e:6e:0b:b8:6a:70:69:8e:e0:66:07:ab:46:5d:
         e3:bc:8b:2a:f8:77:19:ab:16:a9:04:9c:5b:34:68:93:59:5a:
         ad:3b:65:b4:01:94:31:45:98:89:ae:8d:87:9f:6a:91:12:c5:
         c8:45:d6:b7:14:d5:59:00:f4:2c:e9:4e:c6:c5:e5:1f:42:1c:
         a2:db:25:84:ff:c3:da:52:39:0e:c2:7a:f7:53:b7:1b:a0:4e:
         9a:d4:b2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:43:07 2026 by rpki-client