Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
File:                     0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft (raw, json)
Hash identifier:          t1iM7c+g/PBQ0mKO42wbD8mqbLgyAvwtyq3LjXZUpp8=
Subject key identifier:   00:2A:78:07:09:9D:3B:2D:54:0E:59:26:B5:71:18:B1:17:55:F2:03
Authority key identifier: D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54
Certificate issuer:       /CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054
Certificate serial:       01A0C40D660DAFF8872FBCDE13BC83063F1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
Manifest number:          0B4C
Signing time:             Mon 21 Sep 2026 13:00:07 +0000
Manifest this update:     Mon 21 Sep 2026 13:00:07 +0000
Manifest next update:     Tue 22 Sep 2026 13:00:07 +0000
Files and hashes:         1: 0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl (hash: gDcgO932SqPtmzvBkESHxyk957oWsTxFLZ+k4h2zL88=)
                          2: 8l0bbv2uUBlilBWZ-F4pKnrQmO0.roa (hash: yr3qgoPKK+MW0Wmz/o5fGlppgkLAJukaAckqwL8mZRo=)
                          3: DvcjVJOkMRapOd1S3buwBoLNCuM.roa (hash: PhgxUgpvf/qnyzn1ZNECv/I05gKGU5HogGKChSYsZr8=)
                          4: xY3oO-WMZjEDTENfTRiDC2FkHKs.roa (hash: wPsvyOO1iyC8jxQyomTONofcW3odk+2KnelEPbJzeYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:0d:66:0d:af:f8:87:2f:bc:de:13:bc:83:06:3f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054
        Validity
            Not Before: Sep 21 13:00:07 2026 GMT
            Not After : Sep 22 13:00:07 2026 GMT
        Subject: CN=002a7807099d3b2d540e5926b57118b11755f203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:07:d0:f8:f0:35:3d:00:d8:63:13:45:e0:5e:
                    32:de:d3:ce:93:cb:d6:ce:11:1b:87:53:0c:7f:5c:
                    1f:ee:b0:c1:e3:3d:8b:05:8e:5c:e3:c3:1a:07:0b:
                    b8:5e:98:e3:a9:76:cc:57:b8:a7:fe:1d:d2:c4:bf:
                    1f:d5:a2:8a:27:6a:cd:b6:d8:c9:5e:20:2f:6d:0a:
                    5d:3f:9d:45:cb:89:f6:b3:25:bd:e7:04:b6:77:27:
                    cb:6e:e0:8b:c4:f0:91:9b:a2:f2:1c:dd:62:1c:70:
                    b9:c7:ee:5f:d6:75:5b:7b:89:2a:23:38:77:ee:e6:
                    2c:08:ba:10:90:ad:b6:4b:28:fa:2e:e5:9b:b2:cc:
                    df:94:fa:eb:1d:c9:fb:d3:49:4a:58:60:b0:a2:38:
                    87:93:4a:ea:5d:4b:65:ad:90:fb:70:56:7c:42:9a:
                    7a:2d:a4:69:d8:3f:0f:b7:62:22:96:b7:33:47:5f:
                    d4:92:ce:1c:e7:17:d0:a4:ed:86:06:31:25:f9:ef:
                    4e:ca:b7:fe:f0:11:18:ef:66:e7:3e:cb:78:87:f9:
                    7b:82:a2:e8:47:20:ef:fb:ad:65:8f:4c:13:2b:cf:
                    6d:eb:23:2b:b2:d8:1e:a4:59:b6:9f:70:3f:95:02:
                    24:90:e5:8c:a3:52:68:f2:31:59:b6:3a:db:83:84:
                    27:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2A:78:07:09:9D:3B:2D:54:0E:59:26:B5:71:18:B1:17:55:F2:03
            X509v3 Authority Key Identifier:
                keyid:D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:88:e7:d6:e7:3d:d6:1f:04:1c:93:5a:8a:5e:78:57:73:a6:
         d4:db:84:e6:cd:80:56:0e:22:1f:84:d0:8d:17:29:86:e5:ec:
         86:a9:47:45:66:bc:43:71:99:be:c9:ab:b6:e1:62:2e:57:79:
         58:78:45:90:e0:7b:f8:15:78:ac:2b:e1:71:87:77:8e:13:f5:
         e2:2b:f2:28:8b:5d:61:d7:f4:83:6e:bc:2d:95:bd:26:81:e9:
         ad:11:27:d3:f4:97:45:c8:2b:6d:2a:cb:3e:1a:24:df:9d:8f:
         66:fb:e2:86:f0:a0:16:47:18:1b:53:81:d5:8d:86:87:f3:ef:
         73:0c:c0:cb:a2:f0:dc:ce:25:95:a1:da:41:eb:51:57:66:75:
         89:7f:c5:6e:51:20:29:b6:07:8f:e5:85:50:89:19:21:44:83:
         04:0d:f8:8d:cf:a6:7b:a5:dc:2e:cf:98:08:ac:7a:74:49:27:
         34:7d:25:33:36:cc:d0:e1:ad:8c:7d:33:23:3b:e5:0d:5c:1b:
         28:d4:17:ce:28:77:81:b1:11:19:74:f4:7c:4d:f9:b4:90:e7:
         14:d9:a6:35:4c:c8:cb:8b:58:c9:07:1f:4f:33:d6:1d:37:17:
         55:8a:2c:b7:8f:43:04:31:40:de:1c:44:5e:74:3a:4f:c6:f8:
         5e:90:76:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:46:52 2026 by rpki-client