Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
File:                     yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft (raw, json)
Hash identifier:          svRyvGnilO6fMqpa7EITaUFHgsbT9MC/UL2lyoU6tFw=
Subject key identifier:   DA:9F:BB:A9:26:BA:86:9F:AC:F7:1F:E1:E5:F1:17:98:B8:56:59:10
Authority key identifier: CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
Certificate issuer:       /CN=cb36180ab4542d6eee66d9f99030df71236ce264
Certificate serial:       019FAD1A6F0A7C79A4ABEAD645A17327B383
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
Manifest number:          181C
Signing time:             Wed 29 Jul 2026 09:00:18 +0000
Manifest this update:     Wed 29 Jul 2026 09:00:18 +0000
Manifest next update:     Thu 30 Jul 2026 09:00:18 +0000
Files and hashes:         1: HNYjnMa8XonNqZQ0AY5BlHwMzX8.roa (hash: 93bbzx6/nbiayVdplAT1nOdB7pkJO7+NMwUpbbLpb2Y=)
                          2: yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl (hash: IPHUDwlB91LmrkygBmItJo545/T1hg/uswHfQMqg0E8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:1a:6f:0a:7c:79:a4:ab:ea:d6:45:a1:73:27:b3:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb36180ab4542d6eee66d9f99030df71236ce264
        Validity
            Not Before: Jul 29 09:00:18 2026 GMT
            Not After : Jul 30 09:00:18 2026 GMT
        Subject: CN=da9fbba926ba869facf71fe1e5f11798b8565910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:00:b3:df:a6:92:47:a8:6c:ad:07:95:e8:5f:
                    da:ca:c7:cf:22:0d:3f:88:88:a2:fc:d7:e6:4e:89:
                    a8:a9:7b:32:e6:05:6c:2a:56:03:6c:7a:8c:66:78:
                    09:1a:57:b3:63:fe:aa:9b:9f:ed:92:ca:8c:25:9d:
                    73:8d:60:91:25:8a:ef:79:50:2a:86:1a:6e:e7:e3:
                    6c:7c:4f:3a:5e:22:17:e7:8d:a8:d5:d8:ce:a6:12:
                    ce:4c:cf:74:67:c6:f2:47:7e:42:d8:11:9d:b3:42:
                    45:26:1f:31:6c:d7:9b:ad:1d:fa:80:91:9f:95:e9:
                    b2:45:0d:0d:0c:5e:7a:8b:95:a9:d2:0c:20:49:34:
                    99:e7:ad:b9:0a:96:6e:2d:cf:15:a0:17:57:89:52:
                    27:03:26:b2:e8:93:0f:1d:73:4f:ec:72:3f:f4:95:
                    97:f4:e4:69:44:42:f4:0c:11:3d:de:96:80:84:e2:
                    38:cc:9f:2b:a4:f3:fe:12:1e:f4:b9:fa:f5:4d:fb:
                    e6:fb:dc:e0:1a:f9:52:98:e1:ed:20:a5:f0:67:53:
                    ff:46:4a:02:68:1e:6a:21:3a:22:80:25:4c:47:cb:
                    4a:a6:fc:6e:57:e6:b3:93:4c:c0:5d:d6:21:a5:d7:
                    39:3c:2a:87:dd:43:fe:87:6f:7f:66:17:88:f7:b6:
                    02:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9F:BB:A9:26:BA:86:9F:AC:F7:1F:E1:E5:F1:17:98:B8:56:59:10
            X509v3 Authority Key Identifier:
                keyid:CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:c8:fc:16:de:c4:61:4d:9a:1a:48:8c:3f:7c:33:bc:00:c0:
         b4:55:8f:86:45:2a:d2:94:ee:9e:45:93:40:92:a3:00:a5:51:
         bc:31:7a:8e:8e:ab:d3:f3:f5:c1:5d:af:83:5c:50:3a:ed:f1:
         53:57:90:85:70:82:5e:d7:da:03:70:b1:5e:51:99:2b:8a:17:
         0e:0f:50:2b:6b:a3:1e:fb:a0:fe:d7:6d:3a:b0:e5:00:c2:8e:
         a5:c8:ff:94:da:6b:69:76:e4:16:66:da:4a:ee:e5:a9:9e:4a:
         52:d4:e3:5f:02:f0:a4:25:56:b3:20:99:60:60:45:36:6e:f3:
         1a:8e:89:60:a9:82:31:b4:91:d6:be:b0:66:78:a5:9e:d4:2c:
         15:6a:d0:9e:c8:3f:10:b8:f6:4b:f0:97:c8:89:2c:95:b7:f3:
         27:e5:de:83:8d:e2:04:8d:28:c5:83:89:9c:a5:4b:7a:cd:b8:
         3b:22:68:a0:1c:f5:24:1c:5e:38:7c:30:84:ad:9e:d8:83:f5:
         c8:b8:20:01:68:01:ca:48:09:60:48:15:f1:bf:6c:b4:16:6a:
         c4:ad:8a:24:ad:cd:08:c7:1a:e1:23:65:b7:e9:7f:35:ae:04:
         d3:96:de:cd:07:27:4d:d9:9b:f4:08:07:07:e1:f0:a3:65:06:
         20:3d:0e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:14:06 2026 by rpki-client