Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.mft
File:                     yPZn5ggTAzhfE_1MttPaTYyxtsE.mft (raw, json)
Hash identifier:          i2gIHhCyNwc0rihjQUZgfBAp44RjlWz+WKpsonw7P60=
Subject key identifier:   AB:B6:0E:42:A5:15:1A:76:3B:09:81:E2:B7:68:F8:19:4E:1C:C5:DB
Authority key identifier: C8:F6:67:E6:08:13:03:38:5F:13:FD:4C:B6:D3:DA:4D:8C:B1:B6:C1
Certificate issuer:       /CN=c8f667e6081303385f13fd4cb6d3da4d8cb1b6c1
Certificate serial:       01A1DD9525FA2957BFC1AB0D59FDB5952DE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yPZn5ggTAzhfE_1MttPaTYyxtsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.mft
Manifest number:          01C7
Signing time:             Sun 15 Nov 2026 05:01:41 +0000
Manifest this update:     Sun 15 Nov 2026 05:01:41 +0000
Manifest next update:     Mon 16 Nov 2026 05:01:41 +0000
Files and hashes:         1: 2Z6IYH5r9rEHXyb6yaUAQh53_hk.roa (hash: iFsFHaHiOwiJNWh0rDjxLKPBB1FTnSIyeAFgavIf9wA=)
                          2: yPZn5ggTAzhfE_1MttPaTYyxtsE.crl (hash: YM4uaseBkTyifsaWcFo32tbVH2Hcx6CWiS61cv+zf40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yPZn5ggTAzhfE_1MttPaTYyxtsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 05:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:95:25:fa:29:57:bf:c1:ab:0d:59:fd:b5:95:2d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8f667e6081303385f13fd4cb6d3da4d8cb1b6c1
        Validity
            Not Before: Nov 15 05:01:41 2026 GMT
            Not After : Nov 16 05:01:41 2026 GMT
        Subject: CN=abb60e42a5151a763b0981e2b768f8194e1cc5db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dd:0f:60:15:12:19:05:ea:a5:9e:f8:b6:91:
                    00:76:19:a6:11:96:1a:d2:44:70:35:a6:52:5c:0f:
                    1a:bf:92:3b:f5:92:6e:9f:24:c9:d2:0f:96:da:4e:
                    92:3b:78:25:4a:23:0c:9d:be:84:ab:6a:81:06:6d:
                    03:42:1e:05:af:b0:3a:c0:e0:e4:e1:fa:b0:ff:8a:
                    c4:8c:07:54:5a:b2:83:37:53:f4:cf:1e:e6:33:8f:
                    09:c9:f2:66:ad:e4:2a:f4:1b:1b:74:6e:b8:cd:9c:
                    a0:5a:c0:8c:ce:5d:52:cf:8c:af:f7:fc:d4:b5:f9:
                    a7:13:8e:88:6d:98:ae:00:d9:94:74:4e:05:a4:10:
                    f3:82:80:33:a3:ee:b6:47:7e:8a:0d:1d:73:6c:6c:
                    ec:4d:f2:de:fe:91:de:6a:9f:88:a6:0a:59:6f:1f:
                    1f:bd:ea:46:f4:82:07:3b:5b:c3:f0:5e:97:f9:d2:
                    ec:cc:fe:a8:e5:b7:f7:87:1a:4a:3f:98:f5:8f:cf:
                    1c:ff:bc:0f:fb:4b:0d:43:fa:dd:d5:a3:21:a6:97:
                    ac:56:cb:e8:84:de:42:6f:01:09:46:e7:15:2f:2d:
                    cd:b1:53:aa:c9:46:0e:12:74:0a:1f:c4:c5:69:d4:
                    44:85:c8:05:d1:2d:09:3d:6f:dc:93:88:55:21:26:
                    d9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B6:0E:42:A5:15:1A:76:3B:09:81:E2:B7:68:F8:19:4E:1C:C5:DB
            X509v3 Authority Key Identifier:
                keyid:C8:F6:67:E6:08:13:03:38:5F:13:FD:4C:B6:D3:DA:4D:8C:B1:B6:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPZn5ggTAzhfE_1MttPaTYyxtsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:7b:96:c7:05:bf:17:e2:0f:9c:e8:f9:ff:5e:3c:f1:a2:9b:
         6f:73:9a:e0:5b:b0:60:b4:74:9e:f5:6f:d8:ee:4b:48:fe:96:
         c5:dd:e0:60:c8:9c:4a:bc:11:45:d9:9a:84:16:ed:c0:be:d5:
         69:10:33:88:ea:1e:73:ce:22:67:d4:af:93:57:6e:ad:16:04:
         59:69:8f:c2:d5:05:e7:e8:c8:e5:4c:17:31:1f:1e:92:34:87:
         8a:2a:9b:c4:72:47:26:70:57:7a:89:1e:e4:01:86:fa:b0:87:
         9b:cb:0c:69:4b:61:f6:1a:ce:6d:97:f2:d1:a2:a7:7e:5a:0c:
         e8:47:44:c6:fa:45:ed:e7:9b:20:18:c2:61:c0:7d:5d:c2:b4:
         8b:a2:7d:10:e3:09:af:0a:db:dc:70:6c:5b:0e:0b:ab:63:4a:
         f0:76:08:6e:88:b6:3f:dc:78:95:6c:43:e8:29:67:77:ca:6e:
         8d:3a:1f:21:cd:9d:d0:8e:e5:df:39:2e:e6:4b:1d:e6:f1:70:
         6e:d2:6a:7c:1c:9e:a1:87:38:a6:ea:c1:6b:37:2a:ac:62:84:
         55:0e:be:a1:e3:d9:bd:aa:59:d0:44:90:e0:64:75:fc:18:06:
         e1:b2:2b:e3:d3:a8:e8:01:a7:f8:01:df:8a:cc:ce:40:ce:fa:
         c0:01:88:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdlSX6KVe/wasNWf21lS3lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZjY2N2U2MDgxMzAzMzg1ZjEzZmQ0Y2I2ZDNkYTRkOGNi
MWI2YzEwHhcNMjYxMTE1MDUwMTQxWhcNMjYxMTE2MDUwMTQxWjAzMTEwLwYDVQQD
EyhhYmI2MGU0MmE1MTUxYTc2M2IwOTgxZTJiNzY4ZjgxOTRlMWNjNWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt0PYBUSGQXqpZ74tpEAdhmmEZYa
0kRwNaZSXA8av5I79ZJunyTJ0g+W2k6SO3glSiMMnb6Eq2qBBm0DQh4Fr7A6wODk
4fqw/4rEjAdUWrKDN1P0zx7mM48JyfJmreQq9BsbdG64zZygWsCMzl1Sz4yv9/zU
tfmnE46IbZiuANmUdE4FpBDzgoAzo+62R36KDR1zbGzsTfLe/pHeap+IpgpZbx8f
vepG9IIHO1vD8F6X+dLszP6o5bf3hxpKP5j1j88c/7wP+0sNQ/rd1aMhppesVsvo
hN5CbwEJRucVLy3NsVOqyUYOEnQKH8TFadREhcgF0S0JPW/ck4hVISbZdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKu2DkKlFRp2OwmB4rdo+BlOHMXbMB8GA1UdIwQY
MBaAFMj2Z+YIEwM4XxP9TLbT2k2MsbbBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVBabjVnZ1RBemhmRV8xTXR0UGFUWXl4dHNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yMDFlYTItNTVlYS00NmRhLWJjNmYt
YTA1ZmYzN2U4MmU5LzEveVBabjVnZ1RBemhmRV8xTXR0UGFUWXl4dHNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yMDFlYTItNTVlYS00NmRhLWJjNmYtYTA1ZmYzN2U4MmU5
LzEveVBabjVnZ1RBemhmRV8xTXR0UGFUWXl4dHNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3uWxwW/
F+IPnOj5/1488aKbb3Oa4FuwYLR0nvVv2O5LSP6Wxd3gYMicSrwRRdmahBbtwL7V
aRAziOoec84iZ9Svk1durRYEWWmPwtUF5+jI5UwXMR8ekjSHiiqbxHJHJnBXeoke
5AGG+rCHm8sMaUth9hrObZfy0aKnfloM6EdExvpF7eebIBjCYcB9XcK0i6J9EOMJ
rwrb3HBsWw4Lq2NK8HYIboi2P9x4lWxD6Clnd8pujTofIc2d0I7l3zku5ksd5vFw
btJqfByeoYc4purBazcqrGKEVQ6+oePZvapZ0ESQ4GR1/BgG4bIr49Oo6AGn+AHf
iszOQM76wAGIrg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:43:03 2026 by rpki-client