Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft
File:                     yiAvZExIQuX41ATgaJ-B9SwVS1E.mft (raw, json)
Hash identifier:          oDk/6ow+djNcf/MEDjyXo0mw3AJORLH7f1HEXqZ6avo=
Subject key identifier:   36:E7:77:45:24:57:5B:6D:17:EE:A0:F2:14:19:15:C4:0B:F2:C2:44
Authority key identifier: CA:20:2F:64:4C:48:42:E5:F8:D4:04:E0:68:9F:81:F5:2C:15:4B:51
Certificate issuer:       /CN=ca202f644c4842e5f8d404e0689f81f52c154b51
Certificate serial:       019FF9B5DE1DC8542809E68B9E9D7AFF467C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yiAvZExIQuX41ATgaJ-B9SwVS1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft
Manifest number:          76
Signing time:             Thu 13 Aug 2026 06:01:13 +0000
Manifest this update:     Thu 13 Aug 2026 06:01:13 +0000
Manifest next update:     Fri 14 Aug 2026 06:01:13 +0000
Files and hashes:         1: RrGxYN2h_N_Vx45aQWWvFqoM3rA.roa (hash: NfGzv+ISe2v5iqjEcKNdZo4d+WrQJS0vL5wyjnXNlGQ=)
                          2: yiAvZExIQuX41ATgaJ-B9SwVS1E.crl (hash: 6BHVxDyHZb8wYIPOpVIzYUH7aVtpC7FE+ztGGSC53uI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yiAvZExIQuX41ATgaJ-B9SwVS1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 06:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:b5:de:1d:c8:54:28:09:e6:8b:9e:9d:7a:ff:46:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca202f644c4842e5f8d404e0689f81f52c154b51
        Validity
            Not Before: Aug 13 06:01:13 2026 GMT
            Not After : Aug 14 06:01:13 2026 GMT
        Subject: CN=36e7774524575b6d17eea0f2141915c40bf2c244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:38:2d:53:0a:17:75:ad:a3:c6:b7:4f:0f:ed:
                    b8:4f:a2:08:67:32:ec:a3:3f:50:83:84:b3:d6:1e:
                    95:fd:ab:db:76:9d:bd:d4:fe:60:32:aa:a0:fd:a6:
                    c0:eb:2f:b6:13:4d:73:2c:89:59:2a:2a:d4:d6:0a:
                    1c:eb:90:8c:f5:d3:61:bd:c6:e2:f6:4d:4e:7f:27:
                    fb:3e:15:38:b5:50:bb:5c:c5:52:6c:48:fe:02:46:
                    a9:1f:29:71:81:59:f4:ff:99:8e:5c:2f:9c:44:0b:
                    5a:a3:ef:08:5c:70:31:13:0d:d9:c9:93:63:83:94:
                    a9:d8:6b:38:1c:86:f3:0c:e4:05:29:d3:1d:70:63:
                    7c:fa:e9:e5:28:60:0d:f8:88:b2:fa:e2:fc:e9:48:
                    e2:3e:d8:ce:fe:a1:b1:e5:54:3a:da:ba:7c:7a:9b:
                    f2:26:f1:e5:f4:b6:bb:1c:08:02:44:8e:99:0c:e6:
                    f0:e7:bb:88:8e:d7:8e:92:47:06:35:87:47:55:95:
                    73:9e:09:96:7c:f8:83:f8:18:89:22:b6:7d:35:e5:
                    bd:ea:c9:3b:89:ee:0f:ca:cb:9c:bd:92:99:16:3c:
                    9d:b4:a0:6e:00:29:6a:c7:4a:a1:4c:f3:29:6b:bd:
                    f5:ee:07:a5:3e:eb:cd:1d:eb:98:fe:22:56:3f:40:
                    f5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E7:77:45:24:57:5B:6D:17:EE:A0:F2:14:19:15:C4:0B:F2:C2:44
            X509v3 Authority Key Identifier:
                keyid:CA:20:2F:64:4C:48:42:E5:F8:D4:04:E0:68:9F:81:F5:2C:15:4B:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yiAvZExIQuX41ATgaJ-B9SwVS1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:1c:cc:6a:1f:4e:d8:c1:fe:1b:c0:2f:d5:67:7d:39:b4:a6:
         6c:38:c3:53:ca:9f:47:10:ec:e0:8d:8e:cc:74:1d:99:76:74:
         1b:ae:54:99:a8:28:ae:0a:78:33:a3:50:39:c9:85:9e:53:8b:
         7c:26:f0:c4:1e:c1:09:af:cf:f8:b8:c1:54:15:47:49:79:46:
         ad:7c:3e:63:97:08:25:35:c9:3a:88:b7:36:09:68:72:ac:9c:
         0e:da:00:88:d2:f9:91:7d:f2:36:9c:24:81:9e:da:b0:c4:1f:
         4b:4e:44:e2:cc:1c:06:3e:6e:d6:09:2d:28:76:d8:2a:f1:02:
         bb:1a:f2:75:35:d7:00:ec:53:76:14:56:0c:79:4a:b0:41:7d:
         8b:bb:d6:ee:5c:a5:2a:63:4b:b4:31:f7:a5:1d:61:e0:7c:8f:
         d3:ab:d3:64:eb:2a:f6:d2:a1:b3:35:de:df:31:a6:78:8c:9b:
         f0:7c:b9:de:e3:17:4b:a6:9a:9d:2d:a0:b8:c1:17:8a:c4:17:
         d8:c6:18:0b:71:30:ab:6e:f9:53:b7:dc:ab:40:31:e2:cf:f9:
         29:1d:75:d1:d0:6a:13:4b:60:a7:8a:83:98:7c:97:2d:af:3e:
         c6:ec:46:2b:c3:f5:49:68:b0:95:ce:5b:2d:aa:93:56:0f:da:
         5c:f5:98:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 15:51:50 2026 by rpki-client