Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft
File:                     yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft (raw, json)
Hash identifier:          UuCPrbOA3tpU+OS6ISNSXk73jAXGkag0ZTw8ZCTBOEo=
Subject key identifier:   3A:26:BB:3C:7C:87:F2:95:45:D3:B7:E6:4C:80:04:86:AA:6A:37:6C
Authority key identifier: CA:24:87:F5:9F:8B:3A:F8:BF:2A:59:24:67:20:21:B6:50:80:F4:B1
Certificate issuer:       /CN=ca2487f59f8b3af8bf2a5924672021b65080f4b1
Certificate serial:       019FA78752A346B87A7D31E5285106E4C5FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft
Manifest number:          CC
Signing time:             Tue 28 Jul 2026 07:01:31 +0000
Manifest this update:     Tue 28 Jul 2026 07:01:31 +0000
Manifest next update:     Wed 29 Jul 2026 07:01:31 +0000
Files and hashes:         1: E_xpCOpsZ5-t1WX6WrI9YENITng.asa (hash: bNhbXuXh50hasGOTMO13Tz9lkiSAHuwhJ2TJlWd+gwg=)
                          2: yiSH9Z-LOvi_KlkkZyAhtlCA9LE.crl (hash: EmwkaLuhNMxj9/1rRduBjVslCuBhWABcLrayUocxMjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:87:52:a3:46:b8:7a:7d:31:e5:28:51:06:e4:c5:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca2487f59f8b3af8bf2a5924672021b65080f4b1
        Validity
            Not Before: Jul 28 07:01:31 2026 GMT
            Not After : Jul 29 07:01:31 2026 GMT
        Subject: CN=3a26bb3c7c87f29545d3b7e64c800486aa6a376c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5f:6e:a2:bd:d9:92:ce:b4:18:20:57:18:17:
                    6f:ee:02:e9:4d:30:5f:43:08:9f:92:31:f6:94:22:
                    2f:13:26:e9:af:6d:09:04:87:9f:0c:12:83:f4:dc:
                    81:f4:a3:0a:89:3b:23:c2:81:cf:ac:fb:01:0c:86:
                    72:d3:33:68:91:1f:19:1e:1b:71:4a:e3:eb:d0:b2:
                    97:6e:11:90:c8:34:f9:3a:49:8d:d9:44:07:9d:53:
                    fe:e8:77:34:aa:9c:cc:fe:9d:98:b4:f7:d2:6d:ad:
                    82:49:8a:34:81:d5:7a:2d:fb:c5:65:07:f3:30:33:
                    1e:e7:67:7d:76:60:f3:e7:69:9d:52:32:7f:47:53:
                    ad:e3:2f:e0:39:c3:0c:30:56:ef:bb:92:51:b4:7d:
                    e7:2a:82:39:cb:fb:6d:b1:26:d5:7d:90:d8:7d:f6:
                    f9:97:43:fc:7d:ca:b3:5c:42:45:f3:09:7f:4d:ac:
                    18:c8:50:76:af:bc:17:c2:12:f2:09:c1:19:f1:bf:
                    37:44:64:92:78:01:51:32:24:57:d6:c4:e3:0d:74:
                    60:81:c2:fe:da:60:02:fc:16:43:2f:a0:d1:ce:73:
                    98:46:9f:05:73:10:29:fc:9e:55:66:05:08:06:09:
                    d2:2a:7f:18:c9:63:f3:41:f6:f5:9a:57:1f:ab:d1:
                    b9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:26:BB:3C:7C:87:F2:95:45:D3:B7:E6:4C:80:04:86:AA:6A:37:6C
            X509v3 Authority Key Identifier:
                keyid:CA:24:87:F5:9F:8B:3A:F8:BF:2A:59:24:67:20:21:B6:50:80:F4:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:4d:d6:6a:95:3b:0c:e6:36:75:67:0f:70:7d:1f:8a:7a:14:
         58:7a:d3:cc:0f:f8:f7:55:5c:a1:92:05:4c:af:aa:c6:9d:f0:
         60:50:4b:e9:0a:cf:c9:61:77:9a:f7:57:dd:b0:e9:6d:a4:11:
         ce:35:44:71:d5:8c:82:db:c2:77:cf:7c:34:fb:66:ea:38:b8:
         85:f6:62:f9:ab:c7:23:fc:cf:2e:35:1a:00:4c:02:6f:58:04:
         98:72:74:f8:10:86:d9:38:1a:ba:49:95:a9:89:ff:a3:b8:60:
         3d:4a:5c:c6:cc:08:f4:d7:7e:7b:52:93:7a:c8:c5:9a:ce:9c:
         0c:a6:a7:20:7b:24:f7:4d:48:e5:06:14:d9:08:cb:72:78:9d:
         89:fc:dd:ff:e8:06:13:6c:48:60:65:01:c8:a2:4f:df:1e:54:
         77:9f:07:4c:30:dd:30:49:40:36:45:87:c7:57:28:13:13:98:
         42:e1:1d:48:41:4f:12:fe:7e:ee:18:ff:f2:c3:44:60:a9:02:
         bd:e3:6f:1a:21:a4:68:38:c1:cc:53:32:cb:42:a0:35:a7:99:
         43:0b:ad:52:ff:20:2d:cd:95:73:0a:e9:71:25:ae:3c:f4:4a:
         06:c8:4f:eb:4e:a1:e9:67:bc:4d:1a:88:96:de:fc:f0:e7:94:
         73:97:c2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:46:49 2026 by rpki-client