Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.mft
File:                     Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.mft (raw, json)
Hash identifier:          OF8QxWbVl1uDa4V8W7X2F0DaCxsP00zC2yy0Enrg/uA=
Subject key identifier:   C9:72:A1:B7:BC:F5:1A:02:F8:69:AA:4D:4B:52:A5:1D:81:07:86:42
Authority key identifier: 63:F4:2E:D5:F7:BD:1B:25:AF:9B:EC:15:D2:D9:C7:E8:2C:50:46:12
Certificate issuer:       /CN=63f42ed5f7bd1b25af9bec15d2d9c7e82c504612
Certificate serial:       019FA8D04546B7DA086A591E054568F45D69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.mft
Manifest number:          28
Signing time:             Tue 28 Jul 2026 13:00:49 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:49 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:49 +0000
Files and hashes:         1: Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.crl (hash: JFyDH7c+0zfLdxzzA6QPgl9mGH/BmL4v4ypAsggNp14=)
                          2: v0UZTlvnb2NNc6qxIsgPX9qpAwM.asa (hash: NyOh+xKRDk/6YI7tIj4B4DXu/7AN0S+0MJcpfzOzoLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:45:46:b7:da:08:6a:59:1e:05:45:68:f4:5d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63f42ed5f7bd1b25af9bec15d2d9c7e82c504612
        Validity
            Not Before: Jul 28 13:00:49 2026 GMT
            Not After : Jul 29 13:00:49 2026 GMT
        Subject: CN=c972a1b7bcf51a02f869aa4d4b52a51d81078642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2a:93:85:1b:28:78:47:62:68:79:93:99:25:
                    4a:c3:db:73:59:2e:68:cf:10:1b:87:d7:9c:28:02:
                    bd:b4:81:10:82:a0:a8:aa:28:ae:6e:70:e7:34:4a:
                    16:95:63:84:a3:44:61:d6:e1:11:86:1f:18:83:64:
                    76:d6:1c:bc:88:81:99:2a:0c:57:91:73:21:51:06:
                    db:a9:c2:31:ca:1c:15:93:06:e3:d0:9c:45:f1:4b:
                    df:be:7a:08:b5:f1:9f:47:b0:e9:c2:e1:f2:c9:38:
                    76:a6:64:bb:59:2a:84:c6:7c:dd:bc:68:b4:49:69:
                    77:6e:99:af:15:ae:ff:ec:91:97:0a:58:ac:df:68:
                    81:f5:78:6e:b1:c0:04:48:d8:3f:28:f1:fc:97:34:
                    7d:03:3b:50:cd:58:17:98:a4:32:f3:d4:be:c7:cb:
                    53:89:da:a8:e6:d6:27:65:1a:59:93:bb:e4:e1:e4:
                    bb:5d:b5:5a:f8:5f:a6:01:df:42:a4:f4:b9:bd:b8:
                    fc:00:b1:bf:0d:46:71:ed:2a:83:2d:b1:bc:53:01:
                    05:e2:94:28:0c:ee:a0:ae:99:82:7a:2d:f9:0a:44:
                    f4:d2:f0:7c:f9:84:ad:7a:4c:c4:60:13:9e:84:b6:
                    6b:26:f1:64:3e:ef:d7:2a:4a:a0:92:a3:f1:7a:23:
                    ba:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:72:A1:B7:BC:F5:1A:02:F8:69:AA:4D:4B:52:A5:1D:81:07:86:42
            X509v3 Authority Key Identifier:
                keyid:63:F4:2E:D5:F7:BD:1B:25:AF:9B:EC:15:D2:D9:C7:E8:2C:50:46:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:fe:31:20:ea:0d:87:50:37:9f:e1:33:1c:9d:ed:31:d6:29:
         de:69:4e:e8:ef:db:b6:04:5e:3e:df:f6:51:6f:a3:21:84:e3:
         c9:b3:c7:32:33:18:67:7c:ce:f9:db:57:b4:35:4f:1b:14:df:
         33:e7:47:49:0d:f9:79:03:f0:36:47:6c:8b:10:52:d4:24:ac:
         27:5e:10:a8:e3:62:ca:3e:54:d5:b9:84:be:d5:d8:35:47:9d:
         d3:e7:e6:fa:29:c9:4b:11:59:ef:0a:e5:e0:76:04:40:09:82:
         32:69:25:94:a0:ca:fb:fa:5b:4c:b3:f0:ee:c0:cc:d6:99:ed:
         86:89:b8:d1:fa:26:d9:c8:07:aa:6e:7d:f6:3c:70:9c:cd:42:
         a7:33:8f:b6:11:c6:d3:1a:4a:57:9d:66:f8:b5:b6:ca:a3:d0:
         fc:53:05:24:f5:c7:0f:66:39:f5:3d:3a:71:d7:2c:0c:16:ec:
         ac:2e:df:3a:9f:e9:0b:49:be:47:2f:8f:b8:23:14:02:72:92:
         89:bb:8d:57:ef:83:47:6c:f1:c0:15:1f:5c:e9:61:9a:5d:fe:
         e0:64:04:c4:9a:c7:ba:7f:f4:08:9f:f6:cd:31:e2:7a:a7:ba:
         d7:61:ca:a6:69:28:07:17:73:06:65:bd:3c:fa:2c:fa:89:8c:
         b7:ee:d9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:39:20 2026 by rpki-client