Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
File:                     YihBc2HBxAaumnJX2qn7BiB4LTU.mft (raw, json)
Hash identifier:          G2GCfIYnIaQCYu4ZhVuBgzl8fNv03zyV2/KuAev4hG4=
Subject key identifier:   46:05:57:E2:62:A2:52:52:4A:72:18:8B:FC:9A:C4:5F:42:DD:D3:E5
Authority key identifier: 62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
Certificate issuer:       /CN=6228417361c1c406ae9a7257daa9fb0620782d35
Certificate serial:       019CAA8F5A8C99846A8276143F5A52D1C1A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
Manifest number:          10EB
Signing time:             Sun 01 Mar 2026 18:00:47 +0000
Manifest this update:     Sun 01 Mar 2026 18:00:47 +0000
Manifest next update:     Mon 02 Mar 2026 18:00:47 +0000
Files and hashes:         1: 0821mhhu_dqdcqQbxajhPPTXDuU.roa (hash: ooSLPjcpcEvK3V7j97ECx3S8mqo+5KuosVxep9334Qg=)
                          2: YihBc2HBxAaumnJX2qn7BiB4LTU.crl (hash: rG3eE8LdtNyj6qw3r0sgW0DtRtmXBOeqHW60nLW65QY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:5a:8c:99:84:6a:82:76:14:3f:5a:52:d1:c1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6228417361c1c406ae9a7257daa9fb0620782d35
        Validity
            Not Before: Mar  1 18:00:47 2026 GMT
            Not After : Mar  2 18:00:47 2026 GMT
        Subject: CN=460557e262a252524a72188bfc9ac45f42ddd3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:58:f2:2b:4c:28:2b:8b:5a:c1:b8:fd:61:9f:
                    55:71:33:cc:2c:43:f7:ac:4f:85:50:1b:34:8f:6c:
                    61:54:e7:7e:bd:02:39:e4:1a:5f:49:94:84:21:f5:
                    45:30:90:04:1d:d9:a9:26:40:5c:0c:a4:f8:68:fb:
                    8b:ed:6b:9d:47:9e:0d:a3:64:25:2b:c8:83:c9:40:
                    53:19:10:93:1e:55:c7:0e:57:05:5f:7b:41:3f:c3:
                    3a:b2:78:f1:c5:e1:73:2c:7b:03:8b:9d:a2:f2:f2:
                    21:eb:f5:0f:ce:98:0e:05:57:08:25:7c:84:ef:34:
                    f0:a1:73:16:15:3d:07:98:bf:f7:5a:46:79:fa:d8:
                    01:c1:e5:40:50:62:41:ba:4b:53:ce:b0:e1:86:fb:
                    ac:b5:52:27:c1:61:dc:64:80:33:06:6a:79:aa:e6:
                    fd:0e:75:68:1d:0e:91:3e:2e:2f:45:b8:6b:3c:f7:
                    36:de:ee:f8:28:96:ea:43:68:74:8d:b9:d9:f0:b4:
                    c0:0c:1a:89:8c:ea:ea:43:2f:d7:d6:cd:a0:76:06:
                    eb:f6:3e:6a:c5:15:9e:70:3e:7f:4f:00:89:fb:00:
                    d6:d3:26:53:e8:61:01:47:fe:37:5b:eb:e5:0a:97:
                    b8:65:9c:ef:ca:32:bf:4f:5f:f9:0c:d1:ba:f0:77:
                    15:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:05:57:E2:62:A2:52:52:4A:72:18:8B:FC:9A:C4:5F:42:DD:D3:E5
            X509v3 Authority Key Identifier:
                keyid:62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:0e:81:17:7a:77:a0:67:88:3b:66:e7:d0:b7:f2:05:0c:1b:
         50:18:35:91:99:34:77:70:79:3f:4e:18:cb:57:aa:dc:49:02:
         74:70:64:02:66:ae:f7:da:5d:96:b3:23:44:99:60:7e:f5:bd:
         e4:6e:7d:29:a4:fa:35:d7:1d:85:b1:8e:d2:dd:b9:dc:7e:83:
         bf:23:7a:28:30:90:ea:f3:1d:d6:72:aa:02:f0:fb:54:7b:f3:
         44:d3:33:27:5a:f4:4b:57:ec:ab:70:01:f6:eb:71:ee:b7:b5:
         07:7f:d1:5d:1c:2b:93:f1:a4:4a:78:c0:f2:57:82:b2:5d:ef:
         a5:32:ce:42:60:91:f8:02:ad:25:47:f8:b6:94:66:1b:4c:46:
         4c:73:20:44:69:ee:ce:c6:91:8b:e4:4f:77:dc:5d:44:bc:70:
         e9:7f:18:d2:c7:13:53:dc:b3:9d:1b:1d:c2:7a:53:6a:eb:20:
         e2:83:83:ca:59:3d:20:14:66:73:67:ec:6f:82:4f:29:7b:e2:
         45:3c:79:36:f8:db:c7:d6:a2:ca:56:3e:67:cd:d4:41:a6:03:
         30:3b:43:3b:62:9d:cc:b5:10:56:17:58:82:d9:ef:2a:d6:1d:
         2f:db:b2:ad:63:ef:ca:c9:7e:55:98:b6:f9:2b:50:2d:fe:52:
         af:44:67:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:07 2026 by rpki-client