Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
File:                     YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft (raw, json)
Hash identifier:          6vDtNZ+9V0ONgRnQ06RUhxONc6ynWLHh4iwSqBhFcaA=
Subject key identifier:   39:B5:E7:38:B1:9F:9B:8E:61:1F:3F:F4:27:37:D6:06:4E:96:7A:ED
Authority key identifier: 62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77
Certificate issuer:       /CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
Certificate serial:       01A0CB90556B689D4BA297EFA1EAD51A3BAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
Manifest number:          0494
Signing time:             Wed 23 Sep 2026 00:00:28 +0000
Manifest this update:     Wed 23 Sep 2026 00:00:28 +0000
Manifest next update:     Thu 24 Sep 2026 00:00:28 +0000
Files and hashes:         1: YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl (hash: rJxd32EAGg4TfXx7wEmHqP7BqmdnfEAd++ll2LZq+Gc=)
                          2: otGdouxrN50G3K6_VfBD4sUjZsk.roa (hash: KaxlTsTV8jPWF44UBDhZygEc33e9Bf3O7Tb4YHBXJsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:90:55:6b:68:9d:4b:a2:97:ef:a1:ea:d5:1a:3b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
        Validity
            Not Before: Sep 23 00:00:28 2026 GMT
            Not After : Sep 24 00:00:28 2026 GMT
        Subject: CN=39b5e738b19f9b8e611f3ff42737d6064e967aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4e:95:c8:2c:b2:df:48:d1:33:85:d3:36:cf:
                    c1:8c:1e:6d:f1:f7:6e:7d:44:1b:bf:53:d9:7f:a9:
                    d3:77:7f:89:8a:ed:77:15:9a:ab:7a:10:87:d3:ba:
                    03:d4:3c:81:aa:af:f8:25:85:d5:a4:31:c5:bf:b6:
                    90:0a:9d:d7:6b:b0:6d:a6:cd:77:fc:da:3f:6a:b7:
                    f1:cc:df:34:00:31:9f:2c:83:a5:26:2f:6c:37:09:
                    29:93:e9:ba:cf:a6:6d:58:8e:40:95:ce:de:db:8f:
                    9f:9f:94:9e:00:c2:ef:b4:29:0a:7e:ce:df:3c:f6:
                    20:ab:9a:fe:14:18:ab:1b:8b:dd:6e:15:fe:0f:c8:
                    06:8f:52:f3:52:56:98:6c:0c:50:0b:88:07:4a:60:
                    7c:4c:fe:49:23:b5:83:79:40:9c:d7:01:6b:c1:55:
                    7f:7d:8f:53:3f:c5:ff:56:d5:fc:ce:1a:f7:6b:d5:
                    2b:8b:63:d2:5c:0a:bf:38:ac:dc:40:04:3c:a5:c0:
                    ca:d5:18:8b:80:a8:e6:ba:55:25:8f:36:59:75:37:
                    3f:9c:60:08:52:c1:8d:6b:09:3c:5a:40:aa:b9:87:
                    8d:2b:d4:a7:1d:1a:ef:11:72:12:92:ec:13:e9:a7:
                    44:6b:ec:82:ea:aa:49:8e:11:a1:17:e8:c0:ef:6b:
                    61:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B5:E7:38:B1:9F:9B:8E:61:1F:3F:F4:27:37:D6:06:4E:96:7A:ED
            X509v3 Authority Key Identifier:
                keyid:62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:c6:aa:4e:b0:6b:c9:01:4f:b0:dc:83:30:77:15:5a:59:8b:
         74:c6:91:1e:67:47:33:64:19:78:25:01:60:4a:f5:d6:8f:f0:
         ff:62:0e:0c:48:1b:b4:a6:24:5e:cb:5f:7a:89:36:bc:d2:db:
         3d:34:a2:9d:d3:7f:b3:34:f5:17:43:1b:6b:47:9e:d7:62:06:
         2c:6f:f0:a3:8a:d0:50:c1:60:2f:6b:74:69:86:9b:d8:e0:cd:
         30:ec:c7:a1:8a:0c:e1:8a:e4:5c:78:26:5f:75:c0:af:39:5f:
         c6:68:6c:95:a7:ab:2b:b6:cc:0a:62:61:0b:f8:35:13:c0:a9:
         57:f8:c1:64:77:31:ee:f1:3f:8a:2c:79:6a:02:41:eb:0f:a8:
         b2:d5:da:12:2a:e4:36:4d:3b:0a:ce:72:11:3f:78:70:ba:29:
         9a:0f:42:93:8b:3a:be:97:af:bd:5e:77:62:d0:0f:35:ae:ae:
         e4:8e:5e:00:b9:e1:46:63:a7:45:a7:62:84:0a:a4:8c:8e:68:
         a0:ed:72:46:b9:93:52:c5:d0:73:45:07:f5:67:a9:9a:c5:fd:
         6e:47:d6:67:98:94:94:48:55:8b:c4:3f:5a:75:51:c9:2a:19:
         c5:fb:5f:95:89:0a:6e:31:5f:f7:7d:e7:0b:ba:76:02:c6:63:
         6a:26:2b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 06:45:55 2026 by rpki-client