Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
File:                     Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft (raw, json)
Hash identifier:          5s285GZ6E8LbN8K8Ccc5fH1HKDu5mwgrO6SFQ7EQ6zc=
Subject key identifier:   34:94:14:F5:28:76:C2:1B:0E:59:55:B1:A7:47:1E:70:E9:E8:B1:6F
Authority key identifier: 61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01
Certificate issuer:       /CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401
Certificate serial:       019DA30AF2124342DFF1C1A6A531B6C680E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
Manifest number:          118A
Signing time:             Sun 19 Apr 2026 00:01:36 +0000
Manifest this update:     Sun 19 Apr 2026 00:01:36 +0000
Manifest next update:     Mon 20 Apr 2026 00:01:36 +0000
Files and hashes:         1: 4HGdwJ9XKTMjvxsJJx3zyDLYa54.roa (hash: jYE4b7p6t7BDzuGZyvDqlMeK+svfhmC8m+qt2BWH3iM=)
                          2: Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl (hash: +wk4pDw9NU+npqt58GZw0lL0tPXw1D67ixyMElXkzTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 00:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:0a:f2:12:43:42:df:f1:c1:a6:a5:31:b6:c6:80:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401
        Validity
            Not Before: Apr 19 00:01:36 2026 GMT
            Not After : Apr 20 00:01:36 2026 GMT
        Subject: CN=349414f52876c21b0e5955b1a7471e70e9e8b16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ce:1f:c4:37:01:9e:ef:45:61:83:84:74:88:
                    25:74:81:90:03:7a:30:d6:9d:c0:fe:0c:45:08:cb:
                    11:e4:73:48:53:62:71:c9:3d:51:68:c4:43:19:f3:
                    7e:ab:ee:a7:77:84:57:10:d1:46:f5:0d:eb:bb:f0:
                    b5:e0:99:5b:7f:e9:3b:a4:eb:03:3f:20:96:bc:8c:
                    fd:88:17:48:ac:19:1b:1b:3c:8d:e2:67:a4:45:35:
                    01:76:ed:b2:9b:a3:1c:64:94:8c:73:e3:8a:d9:0f:
                    66:14:35:1d:29:da:6c:ad:cd:bf:ca:41:37:93:a2:
                    3d:ad:06:be:14:90:04:ed:23:77:ec:7e:81:50:b4:
                    e2:15:a1:4c:0d:e4:12:a6:df:6c:8d:5b:9b:45:d3:
                    b9:57:9d:4e:0b:fe:93:43:49:6c:19:a3:88:50:dc:
                    90:ef:aa:b6:f4:5d:e5:8a:61:15:4c:30:96:b7:8f:
                    bd:5a:a7:3c:40:ed:8e:de:1d:84:3e:bf:05:3f:b6:
                    90:be:ba:a4:54:65:8c:dd:ec:08:85:6f:24:8c:17:
                    18:f9:aa:55:a3:39:82:2b:17:76:b6:c8:ae:90:a1:
                    6f:da:c0:80:23:c5:c0:08:9a:39:4c:f0:90:ff:d3:
                    04:c1:8f:15:72:cb:83:b0:6a:3f:d2:68:fe:e2:c9:
                    c4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:94:14:F5:28:76:C2:1B:0E:59:55:B1:A7:47:1E:70:E9:E8:B1:6F
            X509v3 Authority Key Identifier:
                keyid:61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:97:00:c3:65:fb:17:10:51:c0:d5:bd:12:a5:8e:80:85:71:
         f2:75:61:46:36:e8:7f:a1:9a:75:93:33:e9:d0:6f:83:cd:37:
         dd:8d:f5:37:7b:84:2e:a9:a9:1c:32:79:cf:7d:d0:08:10:19:
         3c:da:40:05:7d:d2:0b:2b:85:03:3e:b2:1f:36:31:44:eb:e5:
         2c:9c:00:aa:8c:55:9f:99:9c:db:59:8f:13:fe:3c:2a:10:24:
         2b:8e:fc:91:07:fe:10:45:70:16:19:bf:51:98:4e:dd:3d:9d:
         a3:61:43:b3:fd:c6:d5:4a:7e:de:0d:51:31:b9:22:b7:45:de:
         44:fe:5b:d9:e9:53:86:65:ba:38:72:98:42:05:4f:4c:01:ff:
         08:8f:27:59:3f:bf:ae:08:42:05:94:fc:60:e9:a1:22:d3:7d:
         03:2d:bf:d0:bb:56:ed:50:e9:a5:ae:f2:d5:83:40:f0:bf:f4:
         72:b2:0c:70:60:4a:1c:c5:90:c3:58:1d:83:9a:27:7f:3b:43:
         88:52:ae:24:3f:73:32:7a:d5:67:fb:56:a0:31:5d:c4:21:74:
         8a:bc:ce:3a:33:d1:27:db:ab:57:7a:ac:d7:bd:5c:ef:0d:1f:
         06:b1:3c:aa:35:f8:e3:1e:7c:95:37:b4:3b:b3:9b:f3:a5:f9:
         4e:23:22:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:05:40 2026 by rpki-client