Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.mft
File:                     lYM0pMEu57_TbL84WQfAQhA0NsY.mft (raw, json)
Hash identifier:          R+jfhjHAEYlKrO+ay2GQkYGDz4EJ2qTQgpU6X5KpWIE=
Subject key identifier:   CD:DE:09:E2:69:11:B9:D8:1C:E7:CB:E4:B2:33:36:36:F0:CF:31:A6
Authority key identifier: 95:83:34:A4:C1:2E:E7:BF:D3:6C:BF:38:59:07:C0:42:10:34:36:C6
Certificate issuer:       /CN=958334a4c12ee7bfd36cbf385907c042103436c6
Certificate serial:       019FACACDD4C4DACAC959ED587E0DBBB2338
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lYM0pMEu57_TbL84WQfAQhA0NsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.mft
Manifest number:          017B
Signing time:             Wed 29 Jul 2026 07:00:37 +0000
Manifest this update:     Wed 29 Jul 2026 07:00:37 +0000
Manifest next update:     Thu 30 Jul 2026 07:00:37 +0000
Files and hashes:         1: MrVUIQjfWhMeAygcTn_kB8nchao.roa (hash: CoX55bP+8UcP/V9NHXcXKWX+Bw+cYWaam37t88M/puk=)
                          2: lYM0pMEu57_TbL84WQfAQhA0NsY.crl (hash: vPwS/FKqI74qkeTnH0yWMuw58Io3qIa0zgpcYkmYGJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lYM0pMEu57_TbL84WQfAQhA0NsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ac:dd:4c:4d:ac:ac:95:9e:d5:87:e0:db:bb:23:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958334a4c12ee7bfd36cbf385907c042103436c6
        Validity
            Not Before: Jul 29 07:00:37 2026 GMT
            Not After : Jul 30 07:00:37 2026 GMT
        Subject: CN=cdde09e26911b9d81ce7cbe4b2333636f0cf31a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:34:f1:d0:e0:af:01:b9:6b:17:31:bd:11:cf:
                    b8:70:f1:3d:4d:76:e9:3c:47:98:b0:9c:66:a9:3e:
                    86:b1:83:98:47:61:94:6c:20:a3:8c:19:30:b6:27:
                    d3:16:68:d6:aa:38:28:35:21:55:29:25:0c:41:13:
                    6b:94:45:54:00:d7:6f:82:4e:69:4f:61:ee:da:f0:
                    25:67:25:67:5d:d7:83:f2:71:f3:a8:71:96:14:5b:
                    9a:ec:31:15:b0:63:17:94:96:ed:c7:da:2e:b3:ff:
                    6f:81:9f:9b:c2:e5:aa:17:a6:4f:c6:d4:6f:46:d4:
                    85:dd:c8:4d:8b:08:33:a6:ab:e2:93:40:ef:ed:60:
                    d1:56:84:df:55:07:20:b6:61:ea:cf:b0:4b:b4:41:
                    17:cc:ae:9c:7d:b0:6a:0b:b9:96:f8:07:be:98:c7:
                    82:9a:f6:07:43:dd:7d:d5:fc:ca:7e:63:26:e6:59:
                    e8:56:71:ff:f2:4f:b9:a7:3e:b1:d2:22:8a:e9:0a:
                    d7:50:79:08:83:0c:98:e1:23:9a:98:ed:af:fb:07:
                    74:cd:1e:e9:10:b5:2c:ec:7a:a4:8f:80:fc:cb:50:
                    18:35:00:2b:52:b0:1e:3f:93:dc:05:09:2a:97:73:
                    40:4e:ba:b9:b7:c4:05:22:ab:40:51:a1:d2:73:3e:
                    43:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DE:09:E2:69:11:B9:D8:1C:E7:CB:E4:B2:33:36:36:F0:CF:31:A6
            X509v3 Authority Key Identifier:
                keyid:95:83:34:A4:C1:2E:E7:BF:D3:6C:BF:38:59:07:C0:42:10:34:36:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYM0pMEu57_TbL84WQfAQhA0NsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a3:a1:94:c0:ad:70:6e:0a:cd:e2:80:d7:46:31:d4:d1:c9:
         64:4e:3b:19:89:9f:a1:1c:a0:0f:a4:a3:ea:80:7a:85:c5:09:
         84:72:c2:43:50:52:24:43:22:27:84:1f:e2:2d:c3:7d:33:39:
         78:2f:2b:6a:ca:ef:d5:1a:f4:c4:57:00:5b:25:af:79:55:ab:
         67:90:77:5c:e7:33:f3:32:80:89:6e:0c:f2:b1:67:bf:60:18:
         8a:66:d2:c3:15:4c:07:7c:99:65:3b:5c:10:9c:f6:3c:1f:58:
         02:02:9d:ba:cc:2e:45:80:a0:c5:44:2d:c0:3f:53:25:cb:8e:
         9e:8c:94:c0:8b:d1:aa:63:32:4b:99:6f:ba:ea:8a:23:77:2b:
         7f:3a:c4:e9:68:70:1e:dd:19:0f:17:bd:e5:f7:5d:62:e5:f3:
         fa:f1:a9:6b:7d:fc:4a:d0:b7:49:fa:93:c0:f6:70:b0:35:81:
         2b:35:60:32:7e:97:ca:1c:7a:f3:62:f8:1c:37:d4:d6:72:81:
         ff:92:ef:9d:b2:5d:c9:80:32:eb:7c:f2:30:41:fc:47:be:ba:
         f4:b8:e2:62:da:a7:35:c9:a9:59:34:57:19:c0:2f:c6:16:7b:
         8a:06:35:a4:48:65:b9:2e:d7:2f:3c:3b:ab:9e:44:08:a3:63:
         32:00:2a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:23:11 2026 by rpki-client