Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
File:                     yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft (raw, json)
Hash identifier:          sq1QzVqyo/20TEDQjogIhDWrXs5bzPuCGIXkk1myiZc=
Subject key identifier:   7A:3B:B1:30:27:CC:B2:DA:A5:ED:90:B8:28:FA:77:36:19:F4:01:28
Authority key identifier: C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
Certificate issuer:       /CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Certificate serial:       019D9C9A592462D748A69354D173F6FDE4BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
Manifest number:          099A
Signing time:             Fri 17 Apr 2026 18:00:54 +0000
Manifest this update:     Fri 17 Apr 2026 18:00:54 +0000
Manifest next update:     Sat 18 Apr 2026 18:00:54 +0000
Files and hashes:         1: DORV4pmNtMNbt7N-1Ic0VMu4Bf0.roa (hash: gYw5oMexnS1c9Oco6dCQvq1ElaASC3rv7wtCZQiWRBY=)
                          2: yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl (hash: FK7TXSODaifN+Lv3ZLVXaqB/+cUYDqWFdptym4YOO+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:9a:59:24:62:d7:48:a6:93:54:d1:73:f6:fd:e4:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c82bedbcf7b5360fee245b7a255f6640b7276968
        Validity
            Not Before: Apr 17 18:00:54 2026 GMT
            Not After : Apr 18 18:00:54 2026 GMT
        Subject: CN=7a3bb13027ccb2daa5ed90b828fa773619f40128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:47:50:2b:bb:e1:cb:0f:d5:48:5f:b9:0a:81:
                    7b:e8:5c:c8:b3:e8:61:e3:1a:5a:aa:88:54:d2:07:
                    67:cf:39:86:62:65:49:98:23:42:60:1a:41:32:b9:
                    a5:04:a6:57:10:96:34:e5:ce:50:4f:b4:76:2a:b2:
                    be:86:47:bc:27:59:75:c0:b4:cc:47:89:fa:8c:4b:
                    3f:2d:54:df:23:96:bf:dd:88:8c:f9:4a:2d:47:86:
                    57:65:01:87:4c:91:a0:e6:a3:b3:2c:11:43:f0:2b:
                    6b:c6:f5:b7:70:e5:78:be:33:72:81:8e:aa:62:17:
                    2a:0f:8e:c9:bc:3b:b2:76:4b:da:0f:9a:6a:e8:ad:
                    8a:cc:1b:02:5b:53:96:8d:c8:c1:a2:6e:0d:bf:a1:
                    29:8d:6b:13:1f:d7:9a:a3:2e:ef:9f:3d:e2:d2:c3:
                    32:6b:e0:64:47:c5:da:25:42:f1:b3:7a:47:30:ef:
                    66:a1:99:5a:00:e9:d6:35:fb:de:ea:13:bf:e0:13:
                    8d:49:4d:8f:36:ca:8c:33:6c:b7:06:53:6e:a4:ff:
                    4f:c7:77:3e:1c:6b:40:c2:fb:fe:be:fa:15:98:81:
                    fd:6a:bd:a2:40:4e:b7:1a:49:a6:22:6b:34:3c:ee:
                    e5:82:c9:ae:64:40:e5:b0:3b:94:b0:9f:a1:f2:00:
                    5e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3B:B1:30:27:CC:B2:DA:A5:ED:90:B8:28:FA:77:36:19:F4:01:28
            X509v3 Authority Key Identifier:
                keyid:C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:1b:1f:1c:d2:51:d3:63:15:00:89:89:24:41:6e:d6:0e:66:
         a6:da:50:8a:03:13:6e:c2:05:8a:0e:63:4b:83:d4:36:11:04:
         d3:88:34:c2:bd:92:2b:a3:86:26:cb:3d:18:69:0c:1c:81:2a:
         61:df:59:b8:cb:83:eb:83:b4:0f:1e:bc:df:99:e1:c7:5a:7f:
         b6:fd:5a:75:72:e6:41:19:bf:09:d4:c2:b3:cb:14:56:ef:c4:
         d4:a5:d1:e6:d2:9d:9e:5f:18:05:5e:7b:26:50:1f:fa:13:3c:
         c6:39:34:48:74:6b:d6:26:17:32:e4:8b:89:62:e5:d1:82:90:
         67:c5:15:9f:6d:18:b5:f3:ec:10:7b:4a:09:19:fe:5c:89:31:
         71:ad:0f:ec:b5:22:53:27:a9:25:46:75:91:39:98:84:76:b6:
         84:0a:39:a3:3d:15:33:af:cf:4c:b8:ce:96:43:c4:88:4d:75:
         d7:1e:5a:31:93:81:93:a8:a7:c6:a2:ec:d8:e0:61:c6:a6:86:
         a3:57:85:43:b1:a5:99:ca:40:90:5b:87:16:72:3e:9f:24:dd:
         30:b9:24:56:a1:50:41:91:9f:e4:fa:b9:ac:93:f6:c9:df:f3:
         90:f3:24:42:9f:0f:a6:ef:8e:67:f3:e0:d0:4f:89:b3:ce:77:
         55:ff:a0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:42:14 2026 by rpki-client