Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
File:                     YoVOil7h3sifJbKnhZAj_7Ejufg.mft (raw, json)
Hash identifier:          8s/JIss0jTVbj3gFchkQD7/QOCgm045lxt0FbF/Chww=
Subject key identifier:   3D:FA:11:CA:2D:3A:52:EC:A8:C4:F2:E2:C9:32:E4:E8:32:8B:2E:EF
Authority key identifier: 62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8
Certificate issuer:       /CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8
Certificate serial:       019D9B87CD00876F0D92B81C1C3E88B3B41C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
Manifest number:          084A
Signing time:             Fri 17 Apr 2026 13:01:01 +0000
Manifest this update:     Fri 17 Apr 2026 13:01:01 +0000
Manifest next update:     Sat 18 Apr 2026 13:01:01 +0000
Files and hashes:         1: YoVOil7h3sifJbKnhZAj_7Ejufg.crl (hash: iR/IKx9/D6adyy8X8610xfK33h80uYZhC3cYGM9/dok=)
                          2: isOSymizWXOcC4S89abLh_Td0W4.roa (hash: ZSx/++lxhtzVvGMFIOdk3/EWMp5zvQTOhZYOai4ono8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:cd:00:87:6f:0d:92:b8:1c:1c:3e:88:b3:b4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8
        Validity
            Not Before: Apr 17 13:01:01 2026 GMT
            Not After : Apr 18 13:01:01 2026 GMT
        Subject: CN=3dfa11ca2d3a52eca8c4f2e2c932e4e8328b2eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2b:ea:c6:25:52:88:19:2a:4f:ae:6c:cd:fe:
                    15:b5:39:2b:01:0a:2b:8e:0f:70:39:e9:fb:1b:23:
                    a4:12:8b:c6:5e:59:98:16:64:ac:3c:e0:fa:2b:a3:
                    9e:0c:53:60:f4:49:4d:66:e1:3e:9d:73:ab:dd:ef:
                    c0:f1:be:15:5e:f5:90:0f:cd:3a:3c:5f:45:ee:c4:
                    28:1f:36:40:a5:8d:f4:61:5c:d1:f3:3f:52:f9:ad:
                    01:8a:fd:96:9f:18:ca:f0:99:3c:61:bd:08:59:0c:
                    69:4d:4c:b7:e3:3e:44:38:6e:f2:95:d8:37:c0:4a:
                    db:60:80:5f:1d:34:dc:4b:d6:69:63:8a:b4:9a:c0:
                    69:13:7a:76:c4:6a:54:66:43:b4:08:f2:d0:b1:c8:
                    28:c2:82:c0:64:89:c3:00:85:e6:a2:57:83:41:94:
                    99:49:07:e7:1a:30:3b:1b:42:4b:9a:41:c3:56:a4:
                    ed:8c:de:ad:f5:6b:ef:f8:f7:5d:d8:7b:0b:4f:c1:
                    37:97:68:af:95:e3:a2:13:5a:25:a5:fa:b5:7e:c1:
                    56:65:db:2f:56:d7:f1:fd:4a:ea:d3:0a:b0:2e:31:
                    2b:49:d4:99:4b:25:4a:fd:17:e9:30:a8:38:82:7b:
                    3f:f5:f6:3b:0b:7c:94:55:3b:3b:69:c0:d6:21:97:
                    ba:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FA:11:CA:2D:3A:52:EC:A8:C4:F2:E2:C9:32:E4:E8:32:8B:2E:EF
            X509v3 Authority Key Identifier:
                keyid:62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:12:df:c0:0d:11:05:00:ba:c1:8f:32:d3:11:f7:ed:eb:d1:
         33:7b:2e:84:90:8f:e1:3b:18:59:e2:51:10:82:75:19:37:10:
         3a:dd:e3:e4:5e:c8:47:76:a2:c8:a4:72:da:b5:c2:d2:c8:0d:
         9f:0f:fd:77:14:bf:3e:09:59:32:d5:8e:21:4b:d0:26:b8:16:
         d8:3d:8a:6b:3a:29:58:a6:16:17:e9:ea:9c:7a:e3:fc:f8:eb:
         8e:57:77:41:18:49:57:ca:28:65:6c:75:5c:ca:0a:5e:d2:28:
         1c:bd:cf:64:3e:fe:04:96:64:81:51:f9:68:04:eb:30:c6:5c:
         91:93:cc:83:a8:7f:2f:fd:16:3b:ce:29:81:30:2e:cf:b5:fa:
         c6:c5:13:94:c8:b1:3a:99:14:a0:9d:67:2e:0e:3f:28:10:f8:
         f8:f2:2d:83:79:92:04:8f:e7:fd:27:b5:d5:21:b6:9c:63:ba:
         16:4f:ee:22:75:01:ab:6e:82:56:0a:5d:63:c2:c5:21:58:cf:
         fd:1c:e9:89:96:f5:40:18:51:3a:27:3d:6f:29:31:e7:a0:89:
         ea:dc:87:2d:de:f2:24:a6:72:32:1a:02:5b:60:63:3a:42:03:
         66:11:02:8e:c0:ea:20:09:a6:4a:68:e0:70:c4:94:39:1b:d4:
         2d:63:95:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:38:19 2026 by rpki-client