Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
File:                     Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft (raw, json)
Hash identifier:          EGLRhczTqWQ2KMB+gq4/FtUrbFlIEDIfgpLnCgZjbLY=
Subject key identifier:   82:9D:1A:52:ED:1E:92:70:1B:0F:52:36:38:F1:F9:10:64:8C:5D:52
Authority key identifier: 62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28
Certificate issuer:       /CN=62beaa57c67aeb5bafd99793ab4846850a796c28
Certificate serial:       019D9A06C46DF2CEF99A3D81C5AF26913F21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
Manifest number:          0C8C
Signing time:             Fri 17 Apr 2026 06:00:27 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:27 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:27 +0000
Files and hashes:         1: HJtkjvlBva8uqcL0XUNpqigQG9s.roa (hash: WkXmQkgs5y2TV+m/F6AQDR1j74heyCTTdW3y6tsfBHk=)
                          2: OUHZPu_PJYtOLDLbLVCMk8yoe-k.roa (hash: Ma69Row9f6EcaHWc23EqgBUIT2c3X7xAnz9i9hXJ3nQ=)
                          3: Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl (hash: n5FjvB/CFScioMfBidMqDN0Fw9+r+YDzNpr/KdD9vso=)
                          4: kz2wF3XWQ2RN8sHvIuIFZYtVNIQ.roa (hash: mNiLwNy9yFADV0O6uoYz7QI7buc164Ngl+VExm6ZaD8=)
                          5: xprcFFAPJjG3UElyOhAJ6E9gXpA.roa (hash: o5pGWYnDSMF3mxP8sdDWWibluTFKuj51TiZS9rC+X/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:06:c4:6d:f2:ce:f9:9a:3d:81:c5:af:26:91:3f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62beaa57c67aeb5bafd99793ab4846850a796c28
        Validity
            Not Before: Apr 17 06:00:27 2026 GMT
            Not After : Apr 18 06:00:27 2026 GMT
        Subject: CN=829d1a52ed1e92701b0f523638f1f910648c5d52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d1:b7:61:38:7f:3e:8b:1f:d9:d6:4f:4a:4b:
                    4e:6a:29:28:64:c5:71:c7:df:5e:a0:9a:be:e1:dc:
                    ec:80:13:d1:aa:39:44:1e:83:d1:b0:95:82:ca:57:
                    28:7f:50:6a:99:4e:82:58:ff:b6:33:ee:bf:d3:b7:
                    1b:c4:58:42:4f:87:a5:19:82:6c:61:c8:29:b9:a4:
                    d3:fc:a8:20:0a:c4:06:40:5f:07:06:6f:21:8c:f7:
                    c7:bf:d7:24:28:f7:31:93:53:8c:d9:a8:51:b4:09:
                    78:d3:51:d4:55:f3:75:e4:14:ba:5d:c4:89:68:68:
                    23:f1:37:e8:e0:19:7c:aa:7e:5b:ff:10:0f:5c:30:
                    db:66:63:24:77:cc:62:6b:98:20:ca:b2:db:e8:f2:
                    52:50:b8:44:be:48:13:75:3b:00:20:e3:1e:cb:e1:
                    42:78:02:9f:b3:24:b3:2e:38:59:fb:1d:7e:a3:89:
                    8c:70:64:c8:7a:a6:90:c0:f3:61:e2:fa:0e:08:04:
                    e9:21:de:87:db:d1:23:20:c0:e9:c1:88:3d:32:f3:
                    17:4a:bb:67:5c:ab:a6:4e:47:f8:28:40:dd:74:68:
                    87:8e:e3:80:ad:f3:e7:77:f6:18:06:fd:f6:0e:41:
                    47:91:6c:40:24:1b:3f:bf:d7:86:a1:3c:aa:af:e4:
                    9c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9D:1A:52:ED:1E:92:70:1B:0F:52:36:38:F1:F9:10:64:8C:5D:52
            X509v3 Authority Key Identifier:
                keyid:62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:27:95:ce:7d:79:4c:a2:d2:02:b8:5d:c4:47:70:d5:1c:ad:
         87:cd:f4:ce:28:ea:da:67:1c:23:32:f6:76:67:34:cc:c4:ca:
         e8:7e:32:95:d4:b6:22:82:ee:b0:22:ca:68:3b:82:6d:5e:ae:
         5e:97:55:4e:2c:8b:c4:6b:6d:3c:81:42:93:02:1a:f1:f7:e3:
         91:6d:79:2e:e4:d6:4e:2f:e4:7e:bd:f4:95:52:34:4c:f4:3a:
         ba:64:58:b2:07:52:d1:19:6e:78:c4:ba:d8:5c:ea:f2:78:c6:
         c1:f2:d8:a6:00:bb:19:ca:1e:37:ba:57:97:6d:19:99:03:08:
         89:b7:59:67:99:50:14:0a:fb:d0:db:aa:2c:99:7b:84:7a:83:
         e5:6b:80:bd:69:9b:e1:b4:61:c7:dd:14:7b:47:6a:1e:92:cc:
         92:1b:94:a0:f6:b4:3c:6e:5e:2f:9d:30:f8:da:0c:46:13:f0:
         0b:91:b9:b2:4d:10:33:91:c7:3f:fc:ad:01:7e:66:81:90:b3:
         59:bb:9f:44:0a:a7:4f:40:11:49:9a:2e:85:16:57:0d:e0:c3:
         24:1f:ad:93:ee:7f:2e:08:c9:b0:e2:fc:bf:6a:d0:3c:12:81:
         0f:c6:40:f5:8e:42:25:9d:cb:9c:6b:fe:44:80:04:89:90:60:
         c8:98:f0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:27:23 2026 by rpki-client