Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
File:                     YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft (raw, json)
Hash identifier:          i44xRJksoTOmnNquo3Ccp+0Pk2HG9s43fNdAjWa2JFk=
Subject key identifier:   C9:B4:E1:EA:21:52:30:9F:D3:C1:A3:11:8C:88:5C:A5:67:50:68:31
Authority key identifier: 60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
Certificate issuer:       /CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Certificate serial:       019D9A0719D6D1F2EFC77A72AE88DBE2AA1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
Manifest number:          0CE9
Signing time:             Fri 17 Apr 2026 06:00:49 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:49 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:49 +0000
Files and hashes:         1: YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl (hash: cje+ATK69ayktun4svB2n4iLN4Yg6Csi2fg3WLwXQUA=)
                          2: n9mxzIt_205s9vyeaLn8CBdcCG4.roa (hash: rvZ5m2zISXN1TJw2DOfdTsy2gRGtTRFcUGePQPD44jY=)
                          3: uT_DZnppDbYyGpbRufk93-G-qXc.roa (hash: DhGqIEL5HRNKYGVeysWOoXm6c538KCGb6awXVVDvM3c=)
                          4: zXN8Zo903MoyG9swu9ptS1d7Y-o.roa (hash: wf4nwKfhrGscwzAC+PKo2qMsSU5af4zzL/Bk9hi/rJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:19:d6:d1:f2:ef:c7:7a:72:ae:88:db:e2:aa:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
        Validity
            Not Before: Apr 17 06:00:49 2026 GMT
            Not After : Apr 18 06:00:49 2026 GMT
        Subject: CN=c9b4e1ea2152309fd3c1a3118c885ca567506831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6a:6f:89:d0:04:ae:e7:e0:9a:00:47:29:2c:
                    8f:eb:22:77:0d:cb:24:2c:17:2e:64:60:cd:eb:1b:
                    27:15:a6:5a:1a:da:e7:cf:90:d2:b4:6b:31:5a:63:
                    af:f8:d6:af:4a:2b:a5:33:45:c6:db:de:9a:3b:64:
                    4b:35:45:f7:9f:b7:ba:c5:0c:24:88:e1:a1:f9:7d:
                    d8:22:10:0c:bc:00:06:85:4e:27:b4:df:aa:78:85:
                    77:f2:f8:aa:22:ae:22:53:17:27:d3:95:23:3c:f5:
                    fe:3c:95:56:93:ae:2a:47:d3:b6:b1:0e:66:29:54:
                    14:01:37:d9:fe:a8:f2:b6:11:78:2f:c2:e1:50:36:
                    06:4c:de:97:22:18:b8:86:db:58:18:2a:01:9b:43:
                    57:87:25:6c:d3:e7:45:29:f4:cd:4f:8c:79:30:d5:
                    ee:b9:ca:17:4b:23:38:0b:5f:cb:74:63:36:66:9c:
                    8b:69:87:f2:3e:40:3b:9e:14:09:cb:63:f3:2c:39:
                    89:77:8f:69:5b:02:44:56:a5:72:9e:cd:e8:18:c7:
                    9a:91:c9:89:ec:2a:13:a1:22:51:10:43:ca:6c:18:
                    4e:26:c5:76:09:e9:d2:3b:4d:05:63:17:77:73:71:
                    0c:7d:d5:b9:74:3f:67:3a:28:3c:58:cd:04:f2:88:
                    ea:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B4:E1:EA:21:52:30:9F:D3:C1:A3:11:8C:88:5C:A5:67:50:68:31
            X509v3 Authority Key Identifier:
                keyid:60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:43:90:b7:73:0f:2f:50:db:e1:f1:35:90:3a:c4:18:99:fb:
         c7:25:75:59:65:53:85:0c:f3:a5:5c:46:13:58:46:ae:d8:7d:
         e3:cd:e6:d3:4f:d0:94:83:16:94:db:9f:a0:36:a5:8e:a8:ea:
         80:c3:19:22:2c:2c:5e:45:5a:7c:2f:f3:ef:48:fc:da:74:d5:
         19:73:bd:2e:17:7a:d5:ec:dd:25:e9:11:f5:19:94:33:0c:5b:
         17:2e:5e:63:c0:50:ff:7b:98:d9:de:e6:c1:87:5d:ef:14:a3:
         24:83:55:2f:32:32:49:ae:d5:ec:ac:61:96:c4:08:6f:e3:d9:
         6f:76:f8:02:55:32:16:db:c8:b7:3f:3f:38:72:04:92:50:0b:
         91:e5:67:67:1f:87:56:1a:ce:d7:1a:0c:87:ae:6a:58:28:21:
         40:81:18:26:87:1c:9b:97:f1:57:9b:df:80:fc:41:fd:23:b1:
         ef:81:4b:50:3c:38:17:4d:a4:67:de:dd:e6:ad:2f:f3:89:cc:
         dd:6f:1f:fa:fd:1f:05:3d:ba:26:c0:ed:6e:56:40:b5:a7:1a:
         ed:bf:12:9e:22:90:e0:46:ce:b9:4c:9d:1c:8a:eb:c6:19:22:
         ec:1e:9b:73:2c:10:e6:9f:b1:f9:1a:f1:8c:e6:6e:a9:1e:bb:
         c5:dd:c2:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBxnW0fLvx3pyrojb4qobMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNmI5YmEyMTllMzYyYjJhODI3NzIwYTA1YzQzYzdkMWMx
ZmE4ZWYwHhcNMjYwNDE3MDYwMDQ5WhcNMjYwNDE4MDYwMDQ5WjAzMTEwLwYDVQQD
EyhjOWI0ZTFlYTIxNTIzMDlmZDNjMWEzMTE4Yzg4NWNhNTY3NTA2ODMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWpvidAErufgmgBHKSyP6yJ3Dcsk
LBcuZGDN6xsnFaZaGtrnz5DStGsxWmOv+NavSiulM0XG296aO2RLNUX3n7e6xQwk
iOGh+X3YIhAMvAAGhU4ntN+qeIV38viqIq4iUxcn05UjPPX+PJVWk64qR9O2sQ5m
KVQUATfZ/qjythF4L8LhUDYGTN6XIhi4httYGCoBm0NXhyVs0+dFKfTNT4x5MNXu
ucoXSyM4C1/LdGM2ZpyLaYfyPkA7nhQJy2PzLDmJd49pWwJEVqVyns3oGMeakcmJ
7CoToSJREEPKbBhOJsV2CenSO00FYxd3c3EMfdW5dD9nOig8WM0E8ojqwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMm04eohUjCf08GjEYyIXKVnUGgxMB8GA1UdIwQY
MBaAFGBrm6IZ42KyqCdyCgXEPH0cH6jvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUd1Ym9obmpZcktvSjNJS0JjUThmUndmcU84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81YTBhZjgtMjRiMi00MTU0LWE0MTIt
YjRmYjU3MDhkYjE1LzEvWUd1Ym9obmpZcktvSjNJS0JjUThmUndmcU84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81YTBhZjgtMjRiMi00MTU0LWE0MTItYjRmYjU3MDhkYjE1
LzEvWUd1Ym9obmpZcktvSjNJS0JjUThmUndmcU84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0OQt3MP
L1Db4fE1kDrEGJn7xyV1WWVThQzzpVxGE1hGrth9483m00/QlIMWlNufoDaljqjq
gMMZIiwsXkVafC/z70j82nTVGXO9Lhd61ezdJekR9RmUMwxbFy5eY8BQ/3uY2d7m
wYdd7xSjJINVLzIySa7V7KxhlsQIb+PZb3b4AlUyFtvItz8/OHIEklALkeVnZx+H
VhrO1xoMh65qWCghQIEYJoccm5fxV5vfgPxB/SOx74FLUDw4F02kZ97d5q0v84nM
3W8f+v0fBT26JsDtblZAtaca7b8SniKQ4EbOuUydHIrrxhki7B6bcywQ5p+x+Rrx
jOZuqR67xd3CGQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:46:47 2026 by rpki-client