Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
File:                     0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft (raw, json)
Hash identifier:          h/IKijl1asPrNQMfLWMNgR9UA/mSkRSllt2OEU/Z4Mw=
Subject key identifier:   04:19:8F:00:80:84:A9:6A:C9:57:6E:29:6B:D1:D1:16:20:8C:DD:64
Authority key identifier: D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54
Certificate issuer:       /CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054
Certificate serial:       019CAAC69812B08ABB8F70596CEE8742C40F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
Manifest number:          092C
Signing time:             Sun 01 Mar 2026 19:01:07 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:07 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:07 +0000
Files and hashes:         1: 0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl (hash: nCVd2yoQx4ScsXAO56tsPR8vSJSYRUXZSZxPKKhNCEw=)
                          2: 8l0bbv2uUBlilBWZ-F4pKnrQmO0.roa (hash: yr3qgoPKK+MW0Wmz/o5fGlppgkLAJukaAckqwL8mZRo=)
                          3: DvcjVJOkMRapOd1S3buwBoLNCuM.roa (hash: PhgxUgpvf/qnyzn1ZNECv/I05gKGU5HogGKChSYsZr8=)
                          4: ZzV_VDVzaIqtDpwjtJwMSnjk_9Y.roa (hash: WaOF2f40LMOuM1ZWX/pUBZ5cJF1/e+UASVUsf1IegLw=)
                          5: xY3oO-WMZjEDTENfTRiDC2FkHKs.roa (hash: wPsvyOO1iyC8jxQyomTONofcW3odk+2KnelEPbJzeYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:98:12:b0:8a:bb:8f:70:59:6c:ee:87:42:c4:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054
        Validity
            Not Before: Mar  1 19:01:07 2026 GMT
            Not After : Mar  2 19:01:07 2026 GMT
        Subject: CN=04198f008084a96ac9576e296bd1d116208cdd64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5d:d4:17:c0:f9:06:ec:c0:65:85:c8:a3:50:
                    96:d9:73:87:8f:48:0e:96:3a:6e:5a:a2:43:f8:44:
                    3c:e4:b1:cd:3a:21:93:b5:35:70:32:0e:90:ba:45:
                    86:fd:b4:ef:9c:a7:7e:53:7c:99:3b:d3:7a:7a:6b:
                    d7:db:4d:98:b3:82:24:27:58:d2:73:a5:03:cc:4d:
                    a8:0e:c7:e9:cd:22:d3:2a:b8:ca:87:4a:62:ec:f0:
                    76:2e:3d:ce:87:1f:78:54:1c:59:87:a0:49:83:05:
                    9f:26:61:13:7a:00:01:d0:d1:77:b8:ad:2d:6b:a4:
                    90:be:9f:c3:18:19:e7:d8:f4:a3:bf:7c:40:82:bb:
                    c8:1c:38:3b:ae:a1:5c:f0:1e:5e:1b:71:d5:e5:c8:
                    5f:fc:2b:1e:67:47:b7:ed:a5:6f:a8:b2:dd:a7:bb:
                    41:f3:a8:8a:61:0b:16:30:b2:eb:e8:43:47:e3:f6:
                    2b:03:10:12:91:7e:63:49:26:e1:57:a3:61:f2:39:
                    e3:aa:fa:1c:11:71:53:8a:ce:f1:08:46:ba:53:46:
                    96:7b:e7:d4:c2:51:3a:85:13:ab:9b:83:c5:1a:c3:
                    26:63:5a:de:4a:25:81:ec:28:e2:bd:d3:8f:32:f4:
                    4e:e0:93:a1:98:00:2e:27:d6:a8:f8:c2:b7:24:f7:
                    f3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:19:8F:00:80:84:A9:6A:C9:57:6E:29:6B:D1:D1:16:20:8C:DD:64
            X509v3 Authority Key Identifier:
                keyid:D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:57:af:28:92:d2:48:69:34:55:d2:f5:89:55:45:d4:de:06:
         64:85:6e:2f:ed:46:9b:50:6f:85:b2:75:ce:cd:f6:e5:9e:9c:
         3d:e3:c8:46:17:2d:ed:6a:94:e8:2d:f6:b1:bf:9b:ba:b2:ed:
         9c:dc:35:65:45:fb:46:f5:52:6f:c1:ad:5b:b8:33:5e:ec:72:
         40:67:ed:3d:43:09:66:21:60:0a:86:32:45:1f:0a:fd:ab:bf:
         c9:2d:0d:13:b9:8e:f6:1a:5f:0e:9c:5c:39:4f:59:6e:1d:01:
         45:d3:5a:07:1e:8d:7e:b8:8d:40:8c:3d:2a:37:c4:fc:ce:06:
         f6:f7:87:55:ec:7b:76:08:64:88:57:a8:dc:ff:c1:b4:28:e1:
         dd:50:9f:0c:f9:d2:aa:a7:c7:81:27:7f:f4:22:6e:73:b2:e8:
         f8:b1:ce:96:16:18:28:44:70:7a:97:6e:c1:a3:01:c4:3d:ea:
         79:50:00:af:e0:2b:74:df:4c:2e:ba:91:2a:48:79:d3:73:a8:
         c4:b9:41:8e:85:e2:78:2c:d8:38:25:4b:8e:39:42:91:f0:67:
         9a:82:b5:6f:8d:9c:bf:f6:ee:f2:77:76:5f:27:38:f7:ef:05:
         b1:93:3f:78:47:37:c5:90:98:1f:a0:05:e3:95:a5:ff:44:79:
         dc:20:23:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:48 2026 by rpki-client