Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
File:                     yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft (raw, json)
Hash identifier:          fVWVm3EzDY/nlBQv1CAw6KD2pwKzl6JVXJlgtEYaWOg=
Subject key identifier:   29:35:A6:FF:BF:7F:AB:ED:B7:81:41:03:21:F6:43:8B:39:65:D8:1D
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Certificate issuer:       /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial:       019FADF644F2EAEE76652B15F2A1C94449BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
Manifest number:          16BD
Signing time:             Wed 29 Jul 2026 13:00:25 +0000
Manifest this update:     Wed 29 Jul 2026 13:00:25 +0000
Manifest next update:     Thu 30 Jul 2026 13:00:25 +0000
Files and hashes:         1: _SwAckWBp8isMhZUKjw_8MX2PbQ.roa (hash: DdPCOva+CEkdSFj4rwktdG8ykIu5k66PhfcbhD6raBk=)
                          2: yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl (hash: 14p3ZkKIbA/vjJiosJ4NcYoIc9Gi6NTDevERdgWmDdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:f6:44:f2:ea:ee:76:65:2b:15:f2:a1:c9:44:49:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
        Validity
            Not Before: Jul 29 13:00:25 2026 GMT
            Not After : Jul 30 13:00:25 2026 GMT
        Subject: CN=2935a6ffbf7fabedb781410321f6438b3965d81d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:be:df:94:4c:df:6a:cc:ee:4b:4f:1a:90:ea:
                    6d:d5:f2:a8:d5:ad:3f:a3:10:6a:16:9a:6e:5e:73:
                    79:0c:4b:fd:18:0e:31:bf:e2:79:45:a0:a5:eb:78:
                    b1:c7:04:bc:3a:89:66:dd:16:2c:cf:7f:6d:d1:a6:
                    05:64:12:47:8d:51:c2:f8:56:db:58:65:e9:d5:67:
                    2a:1e:33:bc:f2:a7:4e:97:d9:b7:45:44:48:7b:c5:
                    21:86:e1:30:42:ab:aa:5f:db:81:7a:b9:40:0d:15:
                    ea:68:93:aa:c2:bb:bb:8d:b9:5a:89:12:e4:84:08:
                    3c:81:75:b8:2f:5b:c6:da:57:0e:98:1b:b5:06:e9:
                    ab:26:0c:1c:29:8e:86:78:be:b9:b8:a9:33:25:45:
                    79:46:a0:76:7f:c8:7d:05:6f:88:83:61:b7:a6:a0:
                    e0:b6:a6:88:6f:2d:c7:5b:6f:99:f9:56:9d:8b:88:
                    ac:5b:58:fd:25:31:67:96:0c:ec:e7:ad:4a:11:3c:
                    f6:ca:f4:db:30:84:60:73:1c:36:4c:b0:e6:d8:13:
                    67:58:b7:cb:19:79:3c:54:5d:46:ad:35:91:4e:c4:
                    d4:65:13:02:8a:46:fb:30:d8:d7:b7:88:2a:ad:c3:
                    16:13:dd:e9:af:fb:2a:3e:e6:64:b7:8e:21:ee:87:
                    5b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:35:A6:FF:BF:7F:AB:ED:B7:81:41:03:21:F6:43:8B:39:65:D8:1D
            X509v3 Authority Key Identifier:
                keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:b7:65:20:27:d0:b8:80:cf:5b:be:73:63:69:d0:6d:e6:bd:
         b9:34:3c:70:96:db:c2:e9:74:00:21:ac:e3:42:64:53:d8:7a:
         3d:c6:97:56:db:70:26:01:cb:a1:f3:47:a4:e2:20:f6:2a:c4:
         ad:fb:63:10:6a:46:83:96:fa:6d:71:ad:f7:ca:53:44:cf:2e:
         21:22:ea:e1:2d:67:80:7a:af:cd:d1:51:a7:f7:7f:d6:48:b1:
         b3:e1:a6:2c:03:13:0a:52:8b:7b:ae:be:5e:f7:65:a7:f6:13:
         2c:cb:f7:b8:7f:48:5d:68:d0:d7:19:0f:ef:81:3f:13:e9:8d:
         53:f0:07:d9:3d:a6:b6:f7:2b:4e:b2:b4:88:47:f1:ad:9b:ec:
         24:80:aa:51:3e:0d:b7:e2:76:60:d9:fb:f8:b8:5f:55:af:32:
         27:b5:20:66:99:65:ae:7f:a7:b3:39:9f:04:c1:9b:7f:97:e8:
         8c:5a:f7:6b:93:cc:bc:f2:04:98:3a:64:9b:ea:81:ee:f7:04:
         62:a3:e9:6d:0c:7f:82:ad:e5:41:e1:5d:04:c1:b9:be:9a:be:
         2f:91:a5:f2:db:27:f3:ca:69:a7:38:9f:45:36:11:43:e2:be:
         ea:1e:33:14:6e:ac:03:72:ef:e0:c3:b1:c6:00:e8:3d:a1:17:
         e8:f4:89:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:21:45 2026 by rpki-client