Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
File:                     y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft (raw, json)
Hash identifier:          IJhqfbDBizN755rM4I9HgBRREDhG1QVmF0cE0wV4cso=
Subject key identifier:   F6:6F:1D:AC:B6:2F:03:35:7C:E3:5B:4E:95:65:1D:F7:28:A6:52:AD
Authority key identifier: CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30
Certificate issuer:       /CN=cbff7fd7ee11eff8914a3150fcd16a648a3c7f30
Certificate serial:       019D999980F0807493405EB0CAAB3584458E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
Manifest number:          081D
Signing time:             Fri 17 Apr 2026 04:01:07 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:07 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:07 +0000
Files and hashes:         1: blvAUQ_vYzlmQ7upxenWGMgFKTU.roa (hash: yNaiIOARrLN2kHH5nOuqLzuUV9KxxDnEpy1TNN43VTU=)
                          2: y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl (hash: neiDqogLNHkAJws+QocjVsHesvmwr+hJv1hDXsAJ43Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:80:f0:80:74:93:40:5e:b0:ca:ab:35:84:45:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbff7fd7ee11eff8914a3150fcd16a648a3c7f30
        Validity
            Not Before: Apr 17 04:01:07 2026 GMT
            Not After : Apr 18 04:01:07 2026 GMT
        Subject: CN=f66f1dacb62f03357ce35b4e95651df728a652ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:54:a4:a9:74:e1:0c:a9:7c:9c:73:d3:08:db:
                    4e:91:24:61:b1:8f:bd:e3:4d:dd:a8:5a:2c:37:04:
                    7e:8d:c8:85:7b:71:3c:48:fa:3f:4d:68:a7:31:8c:
                    6f:e1:67:80:49:d1:85:88:ac:a4:7d:08:42:a7:bf:
                    36:d1:27:d1:47:d0:35:b2:a6:d1:16:7e:80:32:19:
                    2d:02:d7:35:13:f5:d9:53:15:c6:d3:20:d2:65:22:
                    55:1c:dd:ec:93:fb:39:18:02:6f:37:e6:91:3d:0a:
                    34:ff:4b:78:2b:03:98:0d:46:a0:a9:1b:89:93:1e:
                    2e:6f:5d:9d:19:db:33:cd:0a:7e:22:35:b3:82:2c:
                    fb:31:57:76:77:eb:69:3e:42:20:c0:d1:2e:63:91:
                    e0:d8:23:4d:27:9d:c1:da:be:f8:e9:a1:74:12:b6:
                    a8:a1:ff:49:b8:2d:71:46:a2:19:1c:f4:da:b6:2b:
                    97:49:62:c9:f2:7a:be:70:7b:f4:37:ef:1b:45:af:
                    88:92:f1:c7:ef:be:a4:c7:eb:6b:00:ba:74:8a:e7:
                    54:ac:34:69:1b:d6:c0:49:7a:93:5b:4d:14:41:eb:
                    fd:71:c6:15:21:e2:2e:e6:e8:06:63:94:1b:01:bf:
                    53:1e:f5:b9:69:c7:d7:f9:85:14:cf:9e:ac:1e:9d:
                    25:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6F:1D:AC:B6:2F:03:35:7C:E3:5B:4E:95:65:1D:F7:28:A6:52:AD
            X509v3 Authority Key Identifier:
                keyid:CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:29:95:05:31:04:03:0c:f7:a4:dc:f4:32:8a:fc:72:14:fa:
         8f:88:26:21:18:bb:c3:00:79:7d:5f:4f:a9:ec:75:97:d4:47:
         7c:de:68:1a:51:61:be:22:46:5e:91:21:64:36:a8:3b:c2:40:
         8a:54:a3:25:22:ea:11:ef:99:50:6c:0e:de:71:10:97:36:a1:
         24:8c:6b:1f:23:46:ad:b8:c9:f1:21:4d:26:8a:7f:38:86:28:
         f5:ae:5b:52:b4:5b:72:a9:24:2b:12:cf:4f:54:d9:17:84:e5:
         3f:48:a7:05:a2:ff:4f:17:db:d9:92:84:7c:0f:24:63:ca:3f:
         93:6f:83:7b:07:9c:66:ce:04:51:cd:2c:4a:1e:43:41:c0:4b:
         b0:60:a0:d6:3b:e1:cb:06:94:11:aa:75:4b:9d:01:e2:be:e1:
         d8:3c:c1:e5:ee:5d:60:61:cf:9c:2a:e3:39:5c:cb:bb:11:41:
         4b:29:eb:39:8a:e9:8b:ba:ac:89:89:1b:2b:f2:b7:af:e7:d5:
         52:3d:7d:f1:83:e1:cb:c6:50:8b:b1:0b:e4:d8:8b:19:fb:1e:
         24:a5:f6:2b:ed:b1:75:fb:29:56:4a:a6:4b:9d:b4:6d:0c:18:
         a0:68:c0:be:86:27:c1:5f:5e:fb:14:86:9f:23:78:06:46:c9:
         29:36:76:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:43:13 2026 by rpki-client