Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
File:                     YbU0Q3UDZogVrdk80X0K0-GxqHc.mft (raw, json)
Hash identifier:          Gj5VBVdalEkJkytjBcCnoWd+vva8is5IRgdvA7S6rqQ=
Subject key identifier:   D7:3B:08:82:32:39:1C:7A:2E:AB:FB:AF:11:CF:5B:FD:F9:CB:CB:84
Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
Certificate issuer:       /CN=61b534437503668815add93cd17d0ad3e1b1a877
Certificate serial:       019DC1B9C59F8A621A1A6BF1671199822097
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
Manifest number:          18EB
Signing time:             Fri 24 Apr 2026 23:01:10 +0000
Manifest this update:     Fri 24 Apr 2026 23:01:10 +0000
Manifest next update:     Sat 25 Apr 2026 23:01:10 +0000
Files and hashes:         1: 2v3v91RFQjN6l9mWptJO680RMkc.roa (hash: JpKAIgf5dUOG27b3V6ypmirRGf/czS7D9Bc0AguM208=)
                          2: 7eIzHvINnFqHZBOWvru0J6FjDb8.roa (hash: Dv2FZyAGPdsQN62gOmL7jMpfdjwxeMKFTL1oAf/BKfc=)
                          3: 8l0-rbUJJ5yl_F5t1WGOySUsQOI.roa (hash: 065Qj+kRYJW5mj1KN/1Un/hhPcBtSTaJS6BwFg5mPWw=)
                          4: QTFye-32ZtubZYZVN0cCrwUzz_s.roa (hash: Ou06XDdFUhQ2dykgxmyAA0EVBWVZBiN7PQ/FvfPl2a0=)
                          5: UsJrUy2UuzGGDnQa-en_vet84IU.roa (hash: anygphX/NHAj2pg72RtTsBDk/dlZBM2mWyxRgOxxXzo=)
                          6: YbU0Q3UDZogVrdk80X0K0-GxqHc.crl (hash: Q9UBSlFHigYN0JjTaE4ZO4J3IteSpwh/5JWUBJhCjOc=)
                          7: o2wMPqpUwKK3k92hqD5HvK3oiiI.roa (hash: 0YGmH3GBpSNDcIwjVr7t8Bv7qy4ZPt0Vk2HKaZcbgtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:c1:b9:c5:9f:8a:62:1a:1a:6b:f1:67:11:99:82:20:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877
        Validity
            Not Before: Apr 24 23:01:10 2026 GMT
            Not After : Apr 25 23:01:10 2026 GMT
        Subject: CN=d73b088232391c7a2eabfbaf11cf5bfdf9cbcb84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:64:2d:ee:6b:b8:9d:5d:56:a6:e6:40:05:9a:
                    c2:1b:99:b3:56:7d:cb:cb:63:45:69:ae:b2:6d:8b:
                    8d:1f:4c:8c:bd:76:cc:9b:58:86:37:b1:89:a5:63:
                    fd:7c:b3:f5:6c:53:98:66:84:30:9c:6d:e0:2d:0d:
                    6f:d8:47:97:e3:53:9a:8c:97:03:be:f2:ae:b6:eb:
                    a4:38:e6:a0:6b:a8:24:e7:2e:51:cc:25:1a:dd:f2:
                    f9:2c:72:dd:ff:be:28:33:4c:09:ef:89:db:b6:8e:
                    05:83:90:d8:6f:8f:e7:21:30:a1:b0:b9:a2:ec:a6:
                    06:5b:38:46:af:80:09:6d:d4:89:65:53:4f:68:b2:
                    57:36:c2:93:8c:c4:0b:0e:c5:75:eb:53:a1:fe:a4:
                    c5:d0:e2:5c:93:3d:d4:d6:e5:ad:ba:18:0c:a5:ae:
                    aa:13:b2:8d:b3:21:d0:f2:be:75:aa:a8:0e:d4:a2:
                    d2:93:20:8c:6c:43:cc:7f:df:dc:ba:34:eb:88:d3:
                    fb:bd:69:0f:ff:cd:b2:d7:02:22:e0:ba:d1:f4:a0:
                    67:a1:b7:82:56:fd:6d:3c:58:f1:76:b3:97:f6:70:
                    96:b0:0a:11:1b:5a:f9:5b:ac:e4:f3:70:37:1e:73:
                    e6:d0:96:7e:bc:d9:f3:65:9f:02:7c:bf:b7:90:42:
                    29:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3B:08:82:32:39:1C:7A:2E:AB:FB:AF:11:CF:5B:FD:F9:CB:CB:84
            X509v3 Authority Key Identifier:
                keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:4e:dd:bc:ba:89:8d:80:e9:d0:3d:96:30:e9:99:82:ae:6c:
         73:2e:42:97:90:c7:8b:49:90:5b:01:7a:2b:92:54:3c:08:57:
         1a:6a:39:31:15:c1:b4:97:8a:1b:d2:a5:f7:57:9f:64:8b:80:
         1a:c3:3c:4d:82:ef:ef:d0:2a:b0:82:6b:4a:28:d7:b7:96:8a:
         8b:7a:b4:1b:98:dc:1e:90:e2:ec:a6:6c:f5:69:8f:1a:b7:c6:
         09:86:01:13:42:3c:09:63:46:ca:c9:e4:5a:dc:b7:65:2a:c6:
         ba:82:ac:12:ed:64:ba:e0:04:c6:03:4a:6f:ff:5c:bc:d9:77:
         14:77:ad:5a:aa:ba:a4:9c:fb:9f:d1:f1:34:75:d1:1e:a6:44:
         cb:8b:df:e6:d1:70:1e:c5:bf:cd:a5:4e:24:2d:7b:9d:fa:33:
         89:f5:df:55:05:e4:13:f6:49:57:63:f0:e5:12:9c:a4:ba:4b:
         12:95:b7:82:14:c8:ff:0e:91:ac:21:a5:aa:91:b5:a4:80:d5:
         2e:17:05:cb:2e:ce:c1:43:f7:e6:5c:b2:bc:17:50:d0:14:f0:
         15:14:5a:5d:45:d3:ce:28:36:86:a4:44:55:63:1e:50:3c:76:
         6c:3e:af:ad:9e:e7:de:d7:a3:1b:20:6f:0e:c7:3d:06:7c:12:
         30:9a:fc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 01:52:28 2026 by rpki-client