Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
File:                     YbBXiaToJL6BA953DcJcWT7z_co.mft (raw, json)
Hash identifier:          W1StGy8mAukxkYY5PioyhqZW6m9GdMevCKNs1Svy2/0=
Subject key identifier:   3E:21:25:09:38:61:29:ED:73:D6:81:A7:87:56:6B:9E:0D:FF:E5:CC
Authority key identifier: 61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
Certificate issuer:       /CN=61b05789a4e824be8103de770dc25c593ef3fdca
Certificate serial:       01A0BD9E11AC33B46C1A677B53BEF8722C98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
Manifest number:          1610
Signing time:             Sun 20 Sep 2026 07:00:47 +0000
Manifest this update:     Sun 20 Sep 2026 07:00:47 +0000
Manifest next update:     Mon 21 Sep 2026 07:00:47 +0000
Files and hashes:         1: 0FXE-aMYDoHsJWIgYZ6p4cTAvIc.asa (hash: m9vFjKk2IkfNxMT1oBT/EqvBwRhxlH++eft+dvmvzfI=)
                          2: B1xlxtkgltJzqbUtpT-T2k7OjtI.roa (hash: qZlWNzGPdE+IKxAZlX53rTWx5ECKk+OZ5/kaPPhGDH4=)
                          3: YbBXiaToJL6BA953DcJcWT7z_co.crl (hash: P4rXoZFDfE2iilF5Km5xcRLW1LUW/FAQKsA/vP7JCbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:9e:11:ac:33:b4:6c:1a:67:7b:53:be:f8:72:2c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b05789a4e824be8103de770dc25c593ef3fdca
        Validity
            Not Before: Sep 20 07:00:47 2026 GMT
            Not After : Sep 21 07:00:47 2026 GMT
        Subject: CN=3e212509386129ed73d681a787566b9e0dffe5cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:02:8b:f7:d2:40:f0:82:51:d7:cd:68:c0:66:
                    d9:1d:ed:50:f8:95:16:be:b9:66:74:7e:16:5a:2b:
                    9d:17:d3:14:e3:69:6c:b3:d0:de:d7:22:c6:16:58:
                    c0:7f:e1:df:84:a2:da:d5:4c:d9:25:0b:ec:fb:80:
                    be:70:24:92:76:b5:0b:e7:16:d5:74:6c:19:cb:a7:
                    fd:f0:31:fb:f1:c0:45:7c:65:87:56:97:5c:9a:96:
                    83:cf:8c:b9:4f:bb:1e:dd:b0:b5:10:a6:85:0b:1d:
                    64:e0:c1:17:71:57:cb:e2:b5:3b:dd:fc:47:3b:27:
                    e8:fd:46:52:e7:a1:b2:f8:a6:27:da:24:4d:89:4c:
                    1e:93:64:c2:65:e8:8b:76:9d:e4:6e:c1:7b:9c:f4:
                    c0:6a:3e:81:61:dd:e8:cb:20:15:49:e4:09:b8:16:
                    c9:2e:1c:20:62:e5:22:46:93:d3:b9:3b:5a:73:dd:
                    70:57:be:d6:1e:c7:31:12:19:ed:1e:34:31:78:03:
                    c2:f2:80:4c:88:eb:f9:ca:55:27:7d:38:9f:9e:cd:
                    08:da:46:39:f8:63:97:5c:26:79:63:5e:46:90:4e:
                    08:e1:22:73:d9:27:8f:f1:db:97:e4:0e:48:ec:d9:
                    53:e7:86:86:c7:65:6d:7b:49:de:70:91:4b:3e:7d:
                    2a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:21:25:09:38:61:29:ED:73:D6:81:A7:87:56:6B:9E:0D:FF:E5:CC
            X509v3 Authority Key Identifier:
                keyid:61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:5c:67:5f:b1:38:f1:97:9d:f8:23:4a:c6:78:11:9f:53:06:
         ff:24:30:31:1d:b6:ee:f3:26:5b:5b:7f:3d:fb:e9:89:a3:ee:
         4c:69:17:5d:46:87:c9:6d:5c:20:fa:59:65:2f:b4:9a:cb:c3:
         f2:8f:be:1f:f7:13:82:50:20:02:75:c4:e1:46:58:16:fd:06:
         c2:78:6c:f2:78:52:03:1c:4b:25:9e:d9:f5:f2:48:00:cd:22:
         fa:78:3e:31:f9:30:94:ab:04:2c:d4:76:45:d7:0e:f8:19:7a:
         56:6e:4b:10:a8:ee:3c:98:d1:6c:11:92:c6:3b:ce:d9:34:14:
         2e:ac:a2:c8:b9:59:e5:f7:f1:c8:ad:72:23:49:d6:43:9f:f8:
         55:3a:f2:b9:b7:32:f1:c2:a3:e8:d7:7c:77:6e:11:bd:dc:89:
         a7:b6:87:b3:90:82:cb:e9:3b:4d:d8:6a:da:31:0d:bd:80:9c:
         49:06:52:e1:e0:9d:4d:c2:02:69:51:d5:97:4e:39:48:f9:c5:
         f5:a1:c6:ca:72:0f:af:8b:a7:1f:86:f4:14:44:9a:dd:39:76:
         59:be:6a:e4:28:69:36:06:38:25:49:5f:0c:47:4c:8a:9d:5a:
         8f:ac:90:de:2d:99:25:f9:de:52:19:f4:87:b4:fa:8e:66:6c:
         5f:e5:87:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC9nhGsM7RsGmd7U774ciyYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYjA1Nzg5YTRlODI0YmU4MTAzZGU3NzBkYzI1YzU5M2Vm
M2ZkY2EwHhcNMjYwOTIwMDcwMDQ3WhcNMjYwOTIxMDcwMDQ3WjAzMTEwLwYDVQQD
EygzZTIxMjUwOTM4NjEyOWVkNzNkNjgxYTc4NzU2NmI5ZTBkZmZlNWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wKL99JA8IJR181owGbZHe1Q+JUW
vrlmdH4WWiudF9MU42lss9De1yLGFljAf+HfhKLa1UzZJQvs+4C+cCSSdrUL5xbV
dGwZy6f98DH78cBFfGWHVpdcmpaDz4y5T7se3bC1EKaFCx1k4MEXcVfL4rU73fxH
Oyfo/UZS56Gy+KYn2iRNiUwek2TCZeiLdp3kbsF7nPTAaj6BYd3oyyAVSeQJuBbJ
LhwgYuUiRpPTuTtac91wV77WHscxEhntHjQxeAPC8oBMiOv5ylUnfTifns0I2kY5
+GOXXCZ5Y15GkE4I4SJz2SeP8duX5A5I7NlT54aGx2Vte0necJFLPn0qlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4hJQk4YSntc9aBp4dWa54N/+XMMB8GA1UdIwQY
MBaAFGGwV4mk6CS+gQPedw3CXFk+8/3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWJCWGlhVG9KTDZCQTk1M0RjSmNXVDd6X2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83ZjJjMDctY2VmNS00MmY0LThmMzIt
ODYzMWZiZjVjNjIwLzEvWWJCWGlhVG9KTDZCQTk1M0RjSmNXVDd6X2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC83ZjJjMDctY2VmNS00MmY0LThmMzItODYzMWZiZjVjNjIw
LzEvWWJCWGlhVG9KTDZCQTk1M0RjSmNXVDd6X2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAolxnX7E4
8Zed+CNKxngRn1MG/yQwMR227vMmW1t/PfvpiaPuTGkXXUaHyW1cIPpZZS+0msvD
8o++H/cTglAgAnXE4UZYFv0Gwnhs8nhSAxxLJZ7Z9fJIAM0i+ng+MfkwlKsELNR2
RdcO+Bl6Vm5LEKjuPJjRbBGSxjvO2TQULqyiyLlZ5ffxyK1yI0nWQ5/4VTryubcy
8cKj6Nd8d24RvdyJp7aHs5CCy+k7Tdhq2jENvYCcSQZS4eCdTcICaVHVl045SPnF
9aHGynIPr4unH4b0FESa3Tl2Wb5q5ChpNgY4JUlfDEdMip1aj6yQ3i2ZJfneUhn0
h7T6jmZsX+WHxw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:51:03 2026 by rpki-client