Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
File:                     YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft (raw, json)
Hash identifier:          FUTf00OtGjpfH4JyMpPPt49zytrD62za9RAgqcZdTbs=
Subject key identifier:   AA:BA:6B:4C:3D:D8:B1:E0:22:1F:F7:E0:0E:A0:BE:12:50:63:B0:D1
Authority key identifier: 61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC
Certificate issuer:       /CN=6133ec1a240143dae111bb92d192dabf775d81ec
Certificate serial:       019CABD94C3AE987F50F06A91BAC629A5428
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
Manifest number:          0AED
Signing time:             Mon 02 Mar 2026 00:01:10 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:10 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:10 +0000
Files and hashes:         1: LE2eUeeMg2Dnp41TZCQ6QJb9-T4.roa (hash: R9/uF4yCT5OCiN9a2sdHn7TEtLNuAXR9YP7aIOCF+IE=)
                          2: YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl (hash: 46MyemBru7vtf6Te5XXGEczQpYF6MagEfiKtlQ+Z4i4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:4c:3a:e9:87:f5:0f:06:a9:1b:ac:62:9a:54:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6133ec1a240143dae111bb92d192dabf775d81ec
        Validity
            Not Before: Mar  2 00:01:10 2026 GMT
            Not After : Mar  3 00:01:10 2026 GMT
        Subject: CN=aaba6b4c3dd8b1e0221ff7e00ea0be125063b0d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f5:9a:35:0a:fd:41:00:bb:f2:45:50:64:cc:
                    c8:ef:2a:5e:1e:9f:49:af:c1:0d:de:c9:2e:92:ec:
                    71:ce:f1:a1:b9:e6:3e:2e:a7:12:d0:79:6b:63:ef:
                    a2:37:a2:b5:ee:4d:68:41:b0:d9:f4:eb:e9:5a:81:
                    5a:bb:e6:58:33:cd:75:d8:e8:18:ea:c6:1f:78:15:
                    15:4b:59:a5:ef:b1:3e:59:90:fc:8c:e8:18:33:fc:
                    10:ef:35:63:ce:f5:4d:0a:f4:c3:c0:26:8e:3a:df:
                    07:6b:99:76:b2:a0:db:25:c5:f2:24:28:64:2d:e4:
                    dc:92:2a:c5:8b:1d:bf:b1:c7:15:0a:69:43:18:6b:
                    80:7a:7a:da:b4:12:ff:34:91:d4:bd:cc:17:9a:94:
                    34:f1:13:ba:03:d7:66:32:4f:c3:5a:e8:10:15:f3:
                    17:39:f0:a5:f9:87:8b:d0:d4:15:6d:a4:be:72:cd:
                    bc:55:18:01:27:5c:e1:be:c8:19:f7:6c:a2:dd:a8:
                    5f:d9:ad:7a:99:c1:8a:75:41:e3:42:ea:c1:42:ae:
                    42:97:a5:81:0b:ef:1f:14:ad:5c:b3:05:ee:54:82:
                    06:7b:af:e0:b2:74:a9:39:d0:af:31:53:20:d9:16:
                    c9:b8:20:cb:60:c6:b9:90:96:fa:b1:48:ae:12:91:
                    d8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BA:6B:4C:3D:D8:B1:E0:22:1F:F7:E0:0E:A0:BE:12:50:63:B0:D1
            X509v3 Authority Key Identifier:
                keyid:61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:3b:4a:1d:50:36:7f:96:b3:4c:cc:65:3c:ef:3c:0a:a3:32:
         7a:83:6a:43:f7:40:e8:e2:b4:6b:6a:3f:8b:94:bf:43:5f:a1:
         35:94:9d:9c:47:a0:f6:5c:5e:8d:8c:0d:96:0b:37:2c:67:98:
         d1:7d:7b:7b:bc:3e:be:6d:0b:ca:1b:8e:98:e1:c7:aa:f8:33:
         5a:7e:9d:d9:98:c5:da:c4:64:bc:a2:fa:05:74:3a:50:86:49:
         79:aa:ca:ee:12:1e:8e:2b:0f:0c:76:f5:c5:cf:e0:44:04:5b:
         bd:30:7b:5d:4a:36:e9:81:0d:f6:da:01:b7:53:ae:b6:a9:f7:
         cf:0b:9d:f5:ca:6c:0f:29:58:06:ef:f2:91:01:aa:4b:23:48:
         1b:75:ae:8f:3d:8a:87:9e:4e:e4:3c:4e:b9:e5:02:04:c3:4c:
         5b:02:a6:03:ed:59:82:a3:b9:57:8d:84:89:30:6a:60:37:bf:
         5d:16:a1:35:ba:d5:02:d3:86:89:01:44:78:25:d8:cb:c4:13:
         76:0a:10:68:62:af:3d:2b:fc:7f:fc:6c:93:11:ad:6a:eb:9b:
         a1:c1:8f:62:4f:d3:cb:55:93:95:63:99:51:cf:86:dc:63:72:
         81:9b:de:89:37:6c:e5:61:7a:de:62:e2:48:39:2f:c4:95:c6:
         08:ad:83:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:21 2026 by rpki-client