Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
File:                     YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft (raw, json)
Hash identifier:          Gfnt2exg3s74i+MRVIO0cI5EM2jZymVfwMogBwWlrVw=
Subject key identifier:   1C:0F:57:12:11:AC:BD:F7:AF:6D:7E:2E:47:E0:D0:D3:F1:B1:53:BE
Authority key identifier: 62:90:E6:B0:CD:D7:F4:98:6B:E5:18:D8:90:A8:49:31:53:50:4E:DA
Certificate issuer:       /CN=6290e6b0cdd7f4986be518d890a8493153504eda
Certificate serial:       019CA946283E457F6A34978BD57844D38729
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
Manifest number:          78
Signing time:             Sun 01 Mar 2026 12:01:13 +0000
Manifest this update:     Sun 01 Mar 2026 12:01:13 +0000
Manifest next update:     Mon 02 Mar 2026 12:01:13 +0000
Files and hashes:         1: Ci_joaoGd-NiKdKN-xSlHZZHjsU.asa (hash: w5DoIaMOdhrQzX31C6GNjSJG7G7L2zsb0JalX8bgFEE=)
                          2: YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl (hash: UVdxkFml5d0EMyW6LUr6y8jR4P3XdlwgT1BihEnyXko=)
                          3: jyKuE2XBeuJrzXa_q0tmSaVEGSw.roa (hash: /T26sfmgIuFdLLHz0t8HyV2eonc//D9WC+03dI2ySjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:46:28:3e:45:7f:6a:34:97:8b:d5:78:44:d3:87:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6290e6b0cdd7f4986be518d890a8493153504eda
        Validity
            Not Before: Mar  1 12:01:13 2026 GMT
            Not After : Mar  2 12:01:13 2026 GMT
        Subject: CN=1c0f571211acbdf7af6d7e2e47e0d0d3f1b153be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7b:8f:c2:42:8d:e7:80:b3:af:a5:e0:a2:c5:
                    5b:ea:85:e9:b4:4a:b6:2a:f2:68:db:26:28:1c:3a:
                    a4:e3:84:c3:5e:38:a8:4d:4b:cc:5d:93:23:0b:0c:
                    85:eb:e7:b0:fc:db:9a:89:3c:36:23:80:9b:98:97:
                    a7:f7:6f:f1:da:66:59:3b:4e:be:ca:39:e4:1a:e4:
                    17:8d:14:20:1e:31:23:f5:ee:4b:83:69:18:49:70:
                    40:2b:72:e9:a8:53:ed:14:a7:d1:d2:af:99:e5:0c:
                    fc:68:ff:15:8d:ed:c0:6e:2b:20:30:3a:9e:8e:24:
                    c4:68:e8:54:84:68:10:4d:71:0b:3b:c7:c4:f7:49:
                    fc:ed:a8:e5:5f:ca:66:3c:db:76:df:25:b3:d1:6d:
                    2e:cc:4e:dc:5c:94:85:dd:29:cc:08:e3:9b:16:cf:
                    7c:6e:f6:e4:bf:6a:db:14:ec:1c:cf:32:e1:4a:45:
                    4c:2b:3c:ca:7d:0a:50:04:62:a9:fa:2a:64:2c:6e:
                    4b:8c:7e:55:7e:ba:46:4f:15:fb:b4:3f:b1:a8:0f:
                    c9:71:d8:19:12:69:4a:92:a4:68:89:ae:2a:95:29:
                    6d:db:5e:61:5b:0f:22:a9:3c:be:99:c0:80:19:93:
                    29:7b:ea:30:b3:02:a7:72:e1:0e:5b:bd:81:ce:35:
                    25:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0F:57:12:11:AC:BD:F7:AF:6D:7E:2E:47:E0:D0:D3:F1:B1:53:BE
            X509v3 Authority Key Identifier:
                keyid:62:90:E6:B0:CD:D7:F4:98:6B:E5:18:D8:90:A8:49:31:53:50:4E:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:5b:66:14:01:a1:d9:32:a6:fa:3a:96:ac:52:2d:61:74:dd:
         b1:43:54:47:36:44:55:99:87:d7:bf:3b:0d:5e:de:29:88:3d:
         d4:69:39:c7:c0:61:31:ae:65:9e:cb:5a:de:a2:65:6e:06:39:
         22:a0:6e:51:d2:6f:cb:83:40:35:6c:86:9c:2e:3b:c3:25:86:
         f2:ad:0c:26:66:b4:b0:16:16:8f:a3:8f:53:3d:9a:e4:41:23:
         68:c1:12:49:58:9a:59:2c:2b:3c:6b:69:29:9e:eb:f4:34:3f:
         8b:15:f5:00:a7:47:57:a7:22:ce:e7:60:42:91:e0:8d:a5:77:
         18:8e:c4:f5:53:fc:bc:ee:1b:5c:81:88:e3:68:5f:1d:df:60:
         28:6e:c0:16:3e:98:4a:f0:7d:7f:3c:b4:88:ad:f0:71:a3:1c:
         73:15:2f:e3:41:1d:6c:9e:71:e5:b7:e6:20:17:bd:78:98:62:
         0f:f8:ce:3b:1c:21:69:ce:dc:fa:b5:44:51:24:27:15:8e:49:
         ad:9f:7e:e3:64:44:35:a2:2f:fa:c8:a1:75:fb:e6:25:9a:eb:
         5a:1a:35:9b:af:57:96:e6:2e:55:18:38:bd:17:b0:86:0d:d3:
         cf:5d:21:af:f0:e6:54:a7:7e:cd:13:b1:6e:92:7f:bb:68:60:
         c6:4b:d2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:45 2026 by rpki-client