Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
File:                     YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft (raw, json)
Hash identifier:          8OyGjVM87exHz3w/C58ajw1XFapmlGjZRBu44TLfqT0=
Subject key identifier:   D0:B2:6F:15:D5:9B:82:BA:DB:0E:86:D9:88:AA:47:94:40:95:A2:97
Authority key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
Certificate issuer:       /CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Certificate serial:       019CADFE5316756AC9666AF51980A5338CFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
Manifest number:          0C88
Signing time:             Mon 02 Mar 2026 10:00:51 +0000
Manifest this update:     Mon 02 Mar 2026 10:00:51 +0000
Manifest next update:     Tue 03 Mar 2026 10:00:51 +0000
Files and hashes:         1: 8y6CSuTPq3UxhTyIPDkLzey39TU.roa (hash: d0MlsOE7YxSPTJhFI0bSHyZQVZmMtG9CLdrDZmVT9Fg=)
                          2: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl (hash: LvIhUr4yMGgT+M+dKyKt1FqQ5TljcVEbOc3xqUjRO3c=)
                          3: gEzEJ6XiEvkU7WE0W5L45VqOyXU.roa (hash: M/qvtMRQ3XJJlTOVAUv0L9u5CgWgEkXMKqMCgmgXNVM=)
                          4: uiEPOruYyynMnv0DkemAao-QO_M.roa (hash: zwZ/t6zJRBJasigAc2EM1YRTTVM6B1E25xzsECcPnU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:fe:53:16:75:6a:c9:66:6a:f5:19:80:a5:33:8c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
        Validity
            Not Before: Mar  2 10:00:51 2026 GMT
            Not After : Mar  3 10:00:51 2026 GMT
        Subject: CN=d0b26f15d59b82badb0e86d988aa47944095a297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:9e:ae:89:5b:0a:27:de:a9:97:ad:7c:5b:eb:
                    49:31:1f:be:66:1f:1e:45:1a:29:b0:27:87:46:1d:
                    79:e7:8e:10:f6:aa:b1:72:43:4c:84:4f:44:02:6a:
                    1f:5f:f5:00:e5:24:c8:c2:8d:d3:f2:4c:ee:0b:7b:
                    c7:91:22:b4:23:da:46:a3:e1:1e:4d:77:65:1f:01:
                    3a:aa:df:6f:df:7e:51:96:2c:11:76:de:e8:14:15:
                    06:ba:31:a3:8a:89:18:95:be:8f:c7:1f:4c:db:c1:
                    c8:2f:7e:d6:14:3e:b3:12:6f:2e:9d:fa:fe:33:ad:
                    02:d3:9e:1a:00:f7:6a:87:05:6a:52:8b:5e:db:b6:
                    3d:09:0a:c4:38:ad:9b:3b:88:0d:a6:7c:cd:01:89:
                    c4:81:12:59:43:bc:8a:62:66:c4:cd:bc:5d:e3:70:
                    4f:c9:94:4a:d3:c5:d8:9b:fd:df:0b:a3:60:2e:1c:
                    30:4a:f4:e7:ce:cc:b5:06:80:62:12:c4:46:7e:b8:
                    6f:df:17:05:8a:6d:e8:78:d6:2e:eb:d5:6c:54:ca:
                    91:86:b6:de:7e:04:21:0c:20:34:d8:06:01:dc:17:
                    e3:6e:68:0d:fb:c7:8e:3c:be:2a:ab:80:63:bd:4e:
                    8b:75:a2:be:26:95:09:ed:90:13:1b:ae:ad:0c:ec:
                    1d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B2:6F:15:D5:9B:82:BA:DB:0E:86:D9:88:AA:47:94:40:95:A2:97
            X509v3 Authority Key Identifier:
                keyid:60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:4f:c6:e2:3e:33:83:5d:d3:80:b6:34:6b:3f:84:76:fa:b6:
         48:24:c8:b1:92:df:d8:67:e1:bc:b3:8f:c8:2a:7e:c5:c6:ea:
         38:7a:c7:67:89:de:11:48:d1:cc:94:5a:e6:4b:58:53:50:3a:
         a1:67:3d:41:c6:c1:81:74:bb:2c:b4:f5:49:1e:7b:cd:9d:a2:
         af:58:86:47:da:f6:a0:f3:96:57:2c:ad:c5:e7:61:47:b2:9e:
         61:ff:b5:28:60:e9:81:bd:16:67:24:0e:e3:99:4a:68:9d:6c:
         5c:7a:f7:bf:c5:a5:81:30:4d:6c:92:26:74:7f:8d:30:ef:59:
         21:1d:4f:01:9d:65:73:c9:59:5f:79:27:27:f3:a3:74:34:c5:
         cd:b6:0e:e7:bf:90:e9:68:3e:32:20:50:87:8c:a8:48:87:41:
         e6:a3:52:99:8f:69:e1:0c:ac:e3:3b:a6:8e:93:e4:d1:81:cc:
         6f:34:13:c5:1f:9c:5f:dd:e9:58:55:ca:90:5e:37:fe:f2:76:
         20:9a:c1:a5:6a:b7:35:cc:22:a5:19:05:10:73:d9:11:14:01:
         a8:3f:89:f6:e7:13:7d:73:00:34:d1:9a:46:78:47:bc:5e:46:
         2e:12:98:08:13:32:26:57:15:ff:08:bf:9b:b5:c4:64:9f:16:
         2f:6c:2d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:40:29 2026 by rpki-client