Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
File:                     YYzEbXHnhIl4SIlh17UauhVB88Q.mft (raw, json)
Hash identifier:          tMqW8XbWS+FEuaHbU3lpAGlAhop04RzYXbmWfpu0E5o=
Subject key identifier:   7D:04:6D:48:0D:8F:79:39:2F:68:82:3E:67:5D:C7:14:98:57:F3:4C
Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
Certificate issuer:       /CN=618cc46d71e7848978488961d7b51aba1541f3c4
Certificate serial:       019FA899D673C3189FE68F11B8935C2D0D38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
Manifest number:          08DC
Signing time:             Tue 28 Jul 2026 12:01:21 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:21 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:21 +0000
Files and hashes:         1: 6rOwkiiwPMSDxttw83Oe03eKzrw.roa (hash: TUFJPMQ+agFJKUgYR8BN1zSkPDdsC9rfa9hlgnJj66I=)
                          2: NXzgYU-C6vYUH9piPE5IVfQUDws.roa (hash: 7H+XPAkztFsa8CV9iN0q4tQ4EIhX9svKu9hI+JunkN0=)
                          3: YYzEbXHnhIl4SIlh17UauhVB88Q.crl (hash: cL1DqKsA2aoXZfhjUe8qcug0XkdbfcAYUxrvvMTMAUs=)
                          4: q5tcHMC53hVldl9vmJfxMoSPLXw.roa (hash: iSEcJDYplK+Xu/KP8Xlxc71CNA1iyM93A92Fn+WGFtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:d6:73:c3:18:9f:e6:8f:11:b8:93:5c:2d:0d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4
        Validity
            Not Before: Jul 28 12:01:21 2026 GMT
            Not After : Jul 29 12:01:21 2026 GMT
        Subject: CN=7d046d480d8f79392f68823e675dc7149857f34c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6c:61:b8:25:99:22:d2:29:4a:6d:89:cf:af:
                    94:d6:59:dd:ee:2a:39:b3:33:d7:89:33:22:06:9d:
                    3b:67:b6:88:28:ed:ad:e6:16:b8:52:3d:26:74:17:
                    c0:00:91:da:e0:41:87:31:9c:ff:ef:c5:b1:a1:c0:
                    eb:0f:93:43:fa:73:7e:7a:e7:0f:b7:94:7c:3e:39:
                    e9:2e:b0:f5:36:d5:fc:07:93:89:19:37:43:53:5c:
                    51:2c:77:7a:7e:ed:6b:0e:c0:20:7e:43:8c:19:72:
                    5c:c2:36:54:ef:61:ac:be:b4:37:4c:0f:9e:c6:fc:
                    42:68:f0:75:48:d4:fa:a9:cb:d8:4c:98:5c:3a:bd:
                    de:e1:c6:a5:64:0d:21:77:5f:4a:07:be:10:92:a9:
                    10:83:32:a5:07:07:cd:2b:7a:14:d7:a1:c4:7c:74:
                    db:4c:c9:2a:9c:0e:85:3e:2b:5c:a9:b6:93:cc:c8:
                    ba:d7:ea:d6:78:86:3f:d9:a4:28:8a:64:44:d4:2b:
                    03:a4:21:17:89:fc:be:26:41:b3:65:45:c0:ba:8c:
                    88:d7:d5:0a:f2:d3:72:ee:b8:ec:f8:c0:e6:bd:97:
                    e6:07:3d:cc:23:e3:78:aa:19:b6:98:7e:df:2a:0e:
                    18:b5:67:b7:33:7b:cd:4e:a1:bb:6d:3c:a2:67:f2:
                    17:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:04:6D:48:0D:8F:79:39:2F:68:82:3E:67:5D:C7:14:98:57:F3:4C
            X509v3 Authority Key Identifier:
                keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:c3:40:1e:3b:2a:42:5e:2a:03:b4:39:df:e1:1c:ad:be:44:
         9d:6a:e1:25:48:e3:75:9c:b4:82:b9:e6:bc:a4:23:35:0d:6b:
         d8:d8:9a:e4:50:7f:54:e1:4b:89:a4:ee:97:40:29:c7:50:5e:
         dc:57:29:8a:63:2a:72:3b:ec:f8:8c:5e:4c:bc:07:bf:16:dc:
         82:08:77:6d:2b:4e:14:27:5a:5a:d2:1b:89:5b:02:df:5f:49:
         09:4e:2e:af:8e:0c:41:37:e0:0d:75:5a:59:fe:ca:47:f0:90:
         53:1d:93:a3:a1:58:16:77:a4:df:7c:34:eb:b3:e8:f9:a4:60:
         43:a3:4d:f7:db:0d:4a:b4:43:1c:63:0a:9b:3c:d6:87:c3:8f:
         b9:a2:e5:27:73:87:52:a1:0f:1f:8e:df:90:b6:35:df:76:ec:
         38:cc:5a:ba:e4:10:26:de:c2:d1:f4:a6:a6:30:f6:13:55:7a:
         63:9f:0f:c9:ec:68:d3:ef:02:1a:f3:3c:00:37:14:c1:b3:97:
         47:6e:e9:17:9e:9c:2c:14:db:5b:46:27:d7:9b:03:dd:52:c3:
         0e:be:18:b5:ef:2e:39:fd:db:0b:69:69:29:2f:0f:8c:ea:7c:
         ea:28:08:9e:18:62:35:d2:d1:41:2e:57:f7:48:09:66:8f:9a:
         07:00:1f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:36 2026 by rpki-client