Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
File:                     YTdPxOqwDUHB7uR_37ABB4x0-oU.mft (raw, json)
Hash identifier:          O36ESYPnkSqkc3Tx7AbgO3S3l5JFUGDBOV2rj5mvtWM=
Subject key identifier:   96:59:27:A6:65:B5:C9:63:46:70:79:34:26:05:F2:A1:13:FA:2B:33
Authority key identifier: 61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
Certificate issuer:       /CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Certificate serial:       019DA2D383E7A9143A185A28F55ACB2E8E7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
Manifest number:          0815
Signing time:             Sat 18 Apr 2026 23:01:03 +0000
Manifest this update:     Sat 18 Apr 2026 23:01:03 +0000
Manifest next update:     Sun 19 Apr 2026 23:01:03 +0000
Files and hashes:         1: 7eP7TwNaRBKXgHVXQPj9yKJaIEQ.roa (hash: ilu1OaDtcIPxYeaNVeuS9YaTFPbuPd9sYiHNRmOaCMs=)
                          2: YTdPxOqwDUHB7uR_37ABB4x0-oU.crl (hash: rlJdILPLSqhzcCHoE566RD/bQvOo0l6chz2lMAKgSpQ=)
                          3: t6QTeO_UUKyvQ6rnuFTVQVtV-d8.roa (hash: lkQHddLK92kTmS7mRA5Mrvzd/PdOAJ8/DAOJGdqwGqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 23:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a2:d3:83:e7:a9:14:3a:18:5a:28:f5:5a:cb:2e:8e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
        Validity
            Not Before: Apr 18 23:01:03 2026 GMT
            Not After : Apr 19 23:01:03 2026 GMT
        Subject: CN=965927a665b5c963467079342605f2a113fa2b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:08:b4:e1:50:4a:50:7e:82:5b:82:90:70:7f:
                    13:03:0b:d9:e0:c7:17:c1:28:ab:14:aa:d1:68:f0:
                    eb:9e:68:6a:28:fc:9b:4d:f2:58:3c:9a:df:63:ec:
                    6b:1c:42:3d:ea:bc:68:5f:48:fb:c9:39:c1:52:0e:
                    56:9a:ae:8d:e1:0b:c3:2d:71:c0:b7:43:5a:68:87:
                    54:cc:a6:c2:aa:c5:1d:44:98:db:17:76:31:fe:ea:
                    18:a7:48:59:c5:25:19:e5:24:78:12:1f:90:74:d0:
                    2a:a0:7b:6d:84:a6:3c:f0:72:07:2a:c7:d7:23:0c:
                    ed:f5:b5:21:96:9b:79:c7:da:49:93:ed:4b:41:23:
                    71:b3:e5:1e:ec:39:41:73:4d:11:1b:13:ca:94:26:
                    eb:8a:67:13:ff:5f:31:7d:1d:85:50:a2:23:a5:78:
                    57:4d:08:cf:43:e8:40:88:12:2d:2a:57:b9:47:63:
                    56:9c:f0:97:9d:ec:bf:d2:6f:19:79:d1:a6:99:15:
                    d3:13:81:62:1b:9b:24:96:da:39:0a:88:8c:36:33:
                    38:b4:f9:9f:45:1b:7d:78:d3:08:45:ac:fe:37:4b:
                    da:53:47:aa:45:21:58:e5:bc:6d:e1:4a:2d:49:b9:
                    72:66:d3:e0:96:c5:14:4e:1f:aa:27:ab:84:ba:09:
                    1e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:59:27:A6:65:B5:C9:63:46:70:79:34:26:05:F2:A1:13:FA:2B:33
            X509v3 Authority Key Identifier:
                keyid:61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:fc:97:d3:0a:ef:d4:54:0e:d7:80:f7:7b:94:b3:fc:0d:96:
         12:e4:31:8c:c5:08:4a:f8:fd:37:97:e4:a8:70:a6:26:21:c2:
         69:4d:1a:d9:fc:25:8a:66:8a:4a:d4:34:c8:41:5b:e3:d5:19:
         bc:c9:1f:c0:91:53:12:4f:5d:ad:9b:d8:8b:a1:f3:19:cf:7c:
         f9:85:3b:ec:7b:6c:f7:46:81:60:11:85:67:63:09:b0:21:24:
         9c:31:96:f9:bb:fb:f7:61:a6:c5:93:bd:8a:3f:f0:fc:99:6d:
         6f:19:40:45:2c:62:50:50:d5:35:eb:94:51:b5:1a:a7:28:55:
         00:0e:2f:f9:a3:25:74:a2:ac:45:d8:1e:3e:13:75:2f:1c:f0:
         76:0f:59:45:d7:c4:2c:8a:a4:83:93:ed:2e:5c:a7:b9:64:9b:
         84:27:b6:37:29:d9:f1:75:5c:ee:2a:02:b6:25:93:cd:db:da:
         8e:c5:c7:1a:05:5b:62:77:b0:60:3d:3d:59:16:7f:2f:81:0c:
         53:72:a4:05:f8:73:cc:76:39:7d:0d:8f:f2:14:ae:94:a2:3d:
         41:31:41:2f:3e:9a:c4:01:3e:11:1b:a7:a7:04:52:4f:6c:2d:
         ae:9f:23:dd:15:54:74:25:d0:29:dd:87:e4:3d:fa:e7:cc:7c:
         4b:85:8f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:51:14 2026 by rpki-client