Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
File:                     YdnzrFCGTRj_Jokzx04qia7GEJ0.mft (raw, json)
Hash identifier:          JGCxqGhXP6RkRw1Nurvxy+ew9gCvlWB47cPBEOUUmsI=
Subject key identifier:   7F:1F:8C:D4:EE:8B:3E:0B:35:D1:79:3F:14:A7:D9:CF:45:09:F8:68
Authority key identifier: 61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D
Certificate issuer:       /CN=61d9f3ac50864d18ff268933c74e2a89aec6109d
Certificate serial:       019D9C9A2FC55EC6C3DF46C42EBE4EBE4F32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
Manifest number:          05FE
Signing time:             Fri 17 Apr 2026 18:00:43 +0000
Manifest this update:     Fri 17 Apr 2026 18:00:43 +0000
Manifest next update:     Sat 18 Apr 2026 18:00:43 +0000
Files and hashes:         1: 0i_alcfMXBsM8Yz7Pmg1_JjXkOU.roa (hash: MMsMTbsCqDU1LtCGJGBX/vBCIrKWQpXi11BOEfnfMFE=)
                          2: YdnzrFCGTRj_Jokzx04qia7GEJ0.crl (hash: mFcYkTUilafCex201TQJrtUxD8q0yfj12KbmHtOapDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:9a:2f:c5:5e:c6:c3:df:46:c4:2e:be:4e:be:4f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61d9f3ac50864d18ff268933c74e2a89aec6109d
        Validity
            Not Before: Apr 17 18:00:43 2026 GMT
            Not After : Apr 18 18:00:43 2026 GMT
        Subject: CN=7f1f8cd4ee8b3e0b35d1793f14a7d9cf4509f868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:81:50:5f:aa:2d:4c:a4:0e:b2:fc:b9:83:72:
                    24:7e:28:78:8d:5a:b8:69:47:3b:54:c4:c6:99:4b:
                    dd:13:3b:0a:ef:3e:e3:d3:25:45:35:03:48:e1:55:
                    6b:5e:c0:a6:28:9f:3a:9d:70:9f:b6:20:27:cb:66:
                    5a:74:d3:d2:6d:a0:bd:88:c8:36:92:97:41:8b:6a:
                    0d:f1:c5:7e:f1:0b:a6:e0:43:cc:06:47:36:a4:ae:
                    0f:6c:3e:69:02:8a:4f:e5:e6:be:f8:00:51:c0:2a:
                    96:43:ff:87:c3:88:e6:1c:55:a4:34:f1:7c:fd:da:
                    56:d9:ee:25:a3:47:bd:b2:c0:d2:ee:fb:7e:94:87:
                    84:0b:75:79:2b:d6:82:32:77:e1:8f:37:3d:e8:2a:
                    db:13:86:57:46:47:91:9e:25:42:9d:99:7a:f7:7f:
                    20:2e:66:c0:73:0e:ff:b1:f6:7e:33:45:32:b5:47:
                    84:c9:17:ff:f9:a9:17:db:5e:16:e3:ba:a3:c3:73:
                    9b:c8:d8:56:5e:a3:52:1e:db:a3:e6:21:07:f6:27:
                    89:ff:c1:7f:a6:62:b5:9e:88:89:5c:e6:0d:fc:03:
                    f0:db:9e:ef:91:87:e3:f3:d1:2a:1a:a6:e7:3f:d0:
                    f3:0c:1b:56:7f:30:d8:dd:8f:bd:a3:17:0c:81:8c:
                    c2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1F:8C:D4:EE:8B:3E:0B:35:D1:79:3F:14:A7:D9:CF:45:09:F8:68
            X509v3 Authority Key Identifier:
                keyid:61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:92:91:25:6b:ad:d2:46:80:91:ef:1e:ee:87:6c:11:38:79:
         27:e2:ea:39:33:0c:4b:55:1f:a5:f1:10:be:a9:af:31:35:ac:
         83:62:34:44:5a:71:2d:9f:62:94:63:7c:a3:7c:f0:23:4e:be:
         7c:2a:dd:1d:b5:7c:87:d9:5c:6d:08:64:72:b3:f4:e9:a9:42:
         ff:1a:1c:40:3d:01:7f:4d:c9:91:7a:14:91:0c:9a:96:67:cd:
         4d:4c:4d:4f:7e:ec:d2:e7:22:cf:67:09:81:4e:9c:03:b4:e6:
         a9:02:85:a6:c4:55:0c:7f:63:32:f7:ea:f2:6c:f3:30:9a:6b:
         10:64:59:fa:11:61:f6:2d:fb:19:19:e2:e8:76:53:6b:94:5a:
         97:ad:da:33:a8:27:93:3f:1a:dc:c3:1e:28:cf:8c:db:a8:f7:
         cf:77:13:b7:65:77:e2:bc:1e:d9:d6:25:05:ef:bd:8d:d5:47:
         e2:c8:08:24:14:f9:54:2c:b0:73:5c:11:91:6a:0b:cc:da:a7:
         30:41:d1:b9:5a:85:cc:03:d4:ad:b1:a8:52:77:3a:ae:fd:2f:
         ca:d7:27:dd:4e:a1:ec:7b:61:46:4f:f0:d5:e2:7b:e4:3e:20:
         e9:17:04:01:ec:11:de:9e:f2:72:a6:24:0b:c3:f6:64:a8:10:
         a3:d7:47:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:42:15 2026 by rpki-client