Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft
File:                     Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft (raw, json)
Hash identifier:          EnoG3EGpbP2NWHy+HEEhZqyjqC2f7sOs4qpAqZW8L/I=
Subject key identifier:   BC:AF:87:45:F5:9C:B3:29:7E:28:3B:06:E2:FD:D8:61:20:6C:DC:2F
Authority key identifier: 62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76
Certificate issuer:       /CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76
Certificate serial:       019D389C2B9F59AD2AB6B5CC60BA10685AA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft
Manifest number:          105D
Signing time:             Sun 29 Mar 2026 08:00:52 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:52 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:52 +0000
Files and hashes:         1: Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl (hash: IQYytXWG2H7hK1q+nv0UROrYQjtxZbQrTFLzpqGE+U4=)
                          2: wH04fJxQ3qU9IbgB_fc0WmmCsVE.roa (hash: JaIiaqFbUadXR96s5KJcsIzRyU4XlBt77SuBIAaeHZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:2b:9f:59:ad:2a:b6:b5:cc:60:ba:10:68:5a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76
        Validity
            Not Before: Mar 29 08:00:52 2026 GMT
            Not After : Mar 30 08:00:52 2026 GMT
        Subject: CN=bcaf8745f59cb3297e283b06e2fdd861206cdc2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:90:95:ba:b9:d0:07:40:8d:5a:3e:91:6e:b8:
                    12:00:48:24:f5:df:8c:e9:88:3e:de:05:15:08:13:
                    ee:37:98:38:53:df:cc:a2:42:ca:05:93:26:19:bd:
                    30:e0:ca:ba:c7:5c:db:12:27:44:42:38:f2:4b:15:
                    de:19:7c:2b:ad:83:0f:9b:67:02:da:79:dd:59:87:
                    ba:35:be:33:10:d4:71:1d:22:4e:c5:5f:01:bf:9a:
                    3d:d8:9b:8c:ce:1d:25:53:75:66:dd:b4:15:98:f8:
                    ff:f5:a5:59:f3:9b:b5:11:cd:37:4b:b6:af:8e:f4:
                    ee:59:08:5b:1d:97:d6:41:bb:07:ec:ca:de:95:b9:
                    e6:6e:ff:28:f8:ed:92:d9:01:c8:fa:c7:ae:51:52:
                    45:4b:de:1e:f6:a6:b4:c5:51:87:d5:be:31:07:5a:
                    e3:2a:6a:14:6e:37:14:55:52:ce:8f:43:2e:07:06:
                    ec:d3:dc:01:ea:bb:d9:bd:24:87:ed:df:b2:34:68:
                    56:24:15:92:22:5f:85:18:2b:c1:fc:5e:9e:35:fb:
                    86:c7:c3:53:84:f1:3a:48:c3:65:0c:0b:9d:f0:b3:
                    5b:ba:bd:cd:88:ee:62:c0:20:05:b2:1f:93:7d:15:
                    16:e4:73:33:3c:ae:8f:b0:3d:02:2a:bf:e0:f6:84:
                    ce:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AF:87:45:F5:9C:B3:29:7E:28:3B:06:E2:FD:D8:61:20:6C:DC:2F
            X509v3 Authority Key Identifier:
                keyid:62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:71:fc:e0:ad:0b:94:18:a4:21:54:fe:a4:cd:b1:70:a4:c2:
         2e:34:f4:9f:ba:81:26:bb:17:c2:1b:36:98:0c:41:98:7f:3d:
         37:f4:eb:2b:a6:9a:a8:90:8e:28:cd:30:5e:d3:24:a5:3f:cc:
         dd:34:d2:3f:de:fa:c4:d1:64:b4:ae:43:0a:29:e8:b2:2e:65:
         a9:99:7f:74:4b:93:c3:73:58:d0:2f:8e:d7:0d:7a:24:fb:03:
         7e:22:35:0b:66:e9:87:fe:84:35:4d:8b:97:eb:b9:01:22:28:
         a8:3a:1e:d9:58:b8:a7:17:15:f7:1e:a9:8f:f6:bc:65:ac:ad:
         d1:dd:ce:4b:95:ae:a0:fe:58:f9:5e:0f:1b:00:30:2f:36:96:
         00:91:93:28:e6:fe:1b:7e:ab:3a:a0:9f:2b:e8:de:39:63:06:
         b9:81:83:46:92:d5:e7:1e:a4:d5:23:38:11:b6:d9:37:91:33:
         d2:5e:02:c9:d5:20:39:2a:68:37:dd:42:88:f8:ff:7b:d7:e0:
         06:03:93:ff:21:c7:4c:57:a9:61:91:67:a2:cc:e7:af:3a:15:
         99:e8:a8:d5:df:3d:f0:cb:f2:cf:7b:e3:f2:e9:a0:a8:80:cd:
         fd:54:ab:9d:50:f1:e4:4b:a9:d0:19:a6:ad:f2:5c:4e:5a:40:
         e8:cf:07:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:15 2026 by rpki-client