Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
File:                     dYYhYjrGyrj2veVSbnopMdYm_ow.mft (raw, json)
Hash identifier:          VOMmCnLOhYSz8u1KbV2XihlQsZNFZ5SM9sDciIZ9wCw=
Subject key identifier:   36:8A:F0:2A:BA:A7:58:87:88:47:C2:34:55:C3:90:A6:A0:46:EF:5D
Authority key identifier: 75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
Certificate issuer:       /CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Certificate serial:       019D9B50CE58A10D7A10659D2F9984263E86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
Manifest number:          1856
Signing time:             Fri 17 Apr 2026 12:00:57 +0000
Manifest this update:     Fri 17 Apr 2026 12:00:57 +0000
Manifest next update:     Sat 18 Apr 2026 12:00:57 +0000
Files and hashes:         1: EXopuR5ESiK7_JfMXbRvvwemOwM.roa (hash: /csuVRW3pPg52UWTPGC8VigLMZFh8XPz4sQJGV29ruU=)
                          2: dYYhYjrGyrj2veVSbnopMdYm_ow.crl (hash: lOcCBH1eRlubOdZoP/5FSwHacBPxB9D4qTQaOjLbYoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:50:ce:58:a1:0d:7a:10:65:9d:2f:99:84:26:3e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
        Validity
            Not Before: Apr 17 12:00:57 2026 GMT
            Not After : Apr 18 12:00:57 2026 GMT
        Subject: CN=368af02abaa758878847c23455c390a6a046ef5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:72:1b:f2:83:7f:8e:3b:82:34:e6:39:33:ab:
                    2b:64:6d:4d:fd:35:a3:39:d8:fb:d5:33:ac:2e:42:
                    fb:be:58:33:b3:28:c7:1d:b7:11:10:cc:8c:88:f6:
                    d4:33:c3:17:0a:86:48:8f:40:be:9a:10:ba:3e:40:
                    a9:d5:b7:20:31:1f:49:4a:5f:9d:6b:2f:b5:8e:55:
                    ff:66:45:ad:d7:b1:bc:f9:ef:4f:21:3b:21:40:22:
                    97:6d:1b:35:11:ce:f7:b5:98:a6:34:cb:81:d9:79:
                    3e:60:85:67:5e:ee:3f:d6:36:c7:11:90:68:30:6a:
                    3a:fa:f6:af:2c:0d:75:d4:70:cc:c1:45:bd:23:d8:
                    9f:e8:09:df:64:54:2b:64:19:1e:5f:fe:93:41:fa:
                    77:3a:88:ef:e2:01:88:1c:08:be:5f:7f:f2:c6:0f:
                    63:c9:71:96:ea:39:30:48:3b:b5:fb:3a:db:2f:c4:
                    44:5c:22:a1:4b:f1:26:65:1d:fe:9a:73:99:4c:cd:
                    0b:98:ca:81:12:c5:c2:b7:a6:56:88:da:fa:77:fd:
                    f3:a8:e5:66:89:ea:45:b0:40:13:4f:01:9c:0d:5c:
                    75:5d:07:12:42:43:8a:97:1d:30:fa:46:22:3e:eb:
                    45:bc:82:21:19:78:0c:d2:c5:85:a3:7a:9c:a8:8c:
                    7e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8A:F0:2A:BA:A7:58:87:88:47:C2:34:55:C3:90:A6:A0:46:EF:5D
            X509v3 Authority Key Identifier:
                keyid:75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:8f:6d:e4:a3:6d:0b:ab:d6:3f:a6:9a:12:48:39:d1:eb:f4:
         0f:e8:a3:b6:98:1c:9b:40:99:bf:54:12:81:8f:19:28:ad:2b:
         f1:f9:02:5e:b2:b8:c0:83:f3:1b:7c:4c:d9:0a:ab:ac:d6:02:
         ee:42:30:27:6c:40:bd:ae:5d:f8:80:29:e6:10:04:a6:b4:a1:
         e2:3c:a6:f2:e9:18:ed:04:11:cf:19:f9:69:76:24:79:79:37:
         3c:bd:a7:70:0b:19:df:97:f6:17:2e:fc:cf:56:74:e0:bb:3b:
         16:20:75:66:c6:55:8d:32:e9:75:4f:7a:1c:d9:03:27:f4:1b:
         4b:30:41:d9:92:ce:09:0a:c5:0e:0b:88:e4:5a:a9:46:a9:07:
         4d:61:0a:f2:26:cf:3b:a2:31:f7:bc:78:55:5c:aa:e0:3d:55:
         a4:81:18:89:7f:22:77:d9:7b:c8:4f:3a:1d:99:ac:9d:77:fd:
         a7:ae:4e:b6:97:3f:c0:9a:65:db:49:9e:63:83:7d:f6:e4:ac:
         17:eb:45:a5:2b:e0:1a:08:d3:b6:84:f7:92:fe:8b:f0:2d:df:
         0a:ad:ed:e6:69:57:a9:21:cf:fc:de:0f:0f:23:f4:de:8c:97:
         1a:bc:45:1f:51:07:e1:fb:ab:73:b2:1b:04:9d:a2:70:7b:87:
         65:52:b9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:13:50 2026 by rpki-client