Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
File:                     YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft (raw, json)
Hash identifier:          vDYSSBkxKP+HhuieTYAIZaZNb1b0WK6vozivw48dj/0=
Subject key identifier:   17:B1:74:88:F8:05:05:1B:49:89:62:F2:14:21:00:0B:14:E8:60:14
Authority key identifier: 62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50
Certificate issuer:       /CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
Certificate serial:       019DA453843C7C103855A2F34BF5FA859076
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
Manifest number:          18C5
Signing time:             Sun 19 Apr 2026 06:00:29 +0000
Manifest this update:     Sun 19 Apr 2026 06:00:29 +0000
Manifest next update:     Mon 20 Apr 2026 06:00:29 +0000
Files and hashes:         1: YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl (hash: 5yd7waWM/p/azZbc6HC6w4S4bwuater/BZWwQX0aeEc=)
                          2: ex_xJpK_CdSqACSQtdB9gjUSuD4.roa (hash: MIYxDXr1ZqH9Kq+ZDYqcGhxuESuPqOopC1Yf9yS3HhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:53:84:3c:7c:10:38:55:a2:f3:4b:f5:fa:85:90:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
        Validity
            Not Before: Apr 19 06:00:29 2026 GMT
            Not After : Apr 20 06:00:29 2026 GMT
        Subject: CN=17b17488f805051b498962f21421000b14e86014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1a:a0:3d:0d:26:4e:47:ee:f6:41:8e:e2:ab:
                    28:5e:a8:4c:7f:73:e8:44:3c:5f:73:c3:25:65:71:
                    90:ab:41:c8:f9:aa:76:37:5c:a8:99:3e:6b:d5:07:
                    b5:2f:34:21:fd:1e:c2:c6:36:16:f1:8b:53:82:6a:
                    ef:d3:37:74:e3:07:5b:bc:e1:55:6d:6a:10:2b:7a:
                    46:9a:ab:8b:1b:9b:75:e1:f1:1e:a6:b6:45:b4:8f:
                    c1:b0:4c:96:a3:38:29:7a:f1:05:d7:58:38:4d:90:
                    f4:a0:e5:88:19:23:d8:0e:2a:55:4b:25:65:64:ee:
                    26:96:72:6d:48:d6:f3:0a:df:b9:41:11:10:dd:7e:
                    dc:a7:ce:22:64:f8:de:52:c7:d0:42:9b:de:e2:fb:
                    03:6f:74:76:99:45:2d:d7:c0:09:03:fa:b7:e5:b7:
                    21:77:df:a8:83:dc:9a:20:a6:2b:48:e4:79:24:98:
                    3b:35:c5:2a:01:ed:5a:72:c5:2e:60:f2:f9:79:10:
                    d3:23:dd:89:cd:a3:c1:f2:d7:2b:b6:ab:4a:cc:32:
                    9b:c3:bd:c6:0c:e3:d8:f1:6f:86:fb:0f:c3:2c:6b:
                    3c:06:d6:08:33:81:5c:97:5b:71:c0:1f:fc:f5:dd:
                    77:43:90:0c:13:81:45:0c:3c:66:1a:34:13:b1:a0:
                    59:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B1:74:88:F8:05:05:1B:49:89:62:F2:14:21:00:0B:14:E8:60:14
            X509v3 Authority Key Identifier:
                keyid:62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:f8:23:f6:3b:42:f4:e2:ee:74:a2:e9:fb:96:d7:dc:25:9d:
         80:b2:97:64:c9:00:b1:58:78:78:59:68:81:3b:2f:97:af:37:
         4f:af:04:8f:29:3d:04:79:95:1d:b8:e2:9a:c6:e1:fd:a4:0d:
         86:5d:5b:f7:db:7c:3c:e0:4e:8a:2f:60:9b:27:92:ce:b0:36:
         e6:8b:8a:b5:be:31:84:6c:5c:98:80:20:b0:0e:74:06:39:fc:
         01:9a:f1:9f:61:fd:36:ac:de:ef:78:bf:4b:58:56:a4:b6:ae:
         ea:69:32:f7:71:02:6a:3c:fc:12:91:42:20:45:7e:bd:c8:f8:
         29:88:ff:db:d5:c9:3b:9e:26:0a:9f:73:53:62:46:f5:cb:ff:
         8f:a6:5a:bf:3e:6a:e6:7a:9a:16:31:0f:69:55:52:2a:e6:b0:
         26:72:35:34:e9:62:e8:5a:7e:57:52:ee:2b:18:a7:b5:c7:e4:
         ec:f9:bc:53:15:39:14:6a:79:15:a1:1f:fa:9a:35:79:2b:b7:
         32:ac:5e:8b:eb:32:71:4b:2f:78:1e:44:37:ed:72:82:7f:72:
         d2:2c:64:8e:cc:79:47:b4:4b:9f:44:48:68:2d:2d:ce:64:c3:
         88:8c:44:b6:32:0a:8b:dd:76:f4:d0:d1:dc:c0:ec:52:3f:5b:
         2f:04:8f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:07 2026 by rpki-client