Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
File:                     YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft (raw, json)
Hash identifier:          lazJYQTGDNVjgzDKYJyzqZc/2JPtNILLwa6P9O0Dqec=
Subject key identifier:   44:EE:BD:19:7F:39:B5:34:BD:71:29:A4:13:38:4E:24:87:9F:01:E5
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Certificate issuer:       /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial:       019E29CC7956A9A1CC7184E0AE2C5D314C88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
Manifest number:          197B
Signing time:             Fri 15 May 2026 04:02:06 +0000
Manifest this update:     Fri 15 May 2026 04:02:06 +0000
Manifest next update:     Sat 16 May 2026 04:02:06 +0000
Files and hashes:         1: 1ZMsVQGAWg2it-JAEuC_i_hCIyc.roa (hash: ZLAKov/0hadhlGoY/KwpJKZ7o/B0xm108yvYfzR8PiE=)
                          2: 4dzv8ZUCzL8D043G29d4Vay_L1A.roa (hash: 1/yelAOHz555q/lBgGrJ6Dvvgooi9UHUahxGzfdOfoE=)
                          3: WhS9iKVaUFg38uZaHtFMBX5xGXA.roa (hash: AUcEJ+4tf05fJdicnZl50BMdPlLmWRqkiu+wHdC3Q9g=)
                          4: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl (hash: pqn9LahGFWGdq69IrfgadD+Fo9LoTYRNx8Y9TZNyx+U=)
                          5: lFA8TCmOsUwcRT-IH5-xMnLIn9g.roa (hash: rLmZAKicjwEflAKkEb3bhMZ1sp7aW6UtUzE6SYNtwFo=)
                          6: p1MVFW1JPFQ6f-h728WIfEC56Bg.roa (hash: BgJ/Uv7EIetRPcg9hT8aA4XXL6AwMO8c50H3eXJ7Mno=)
                          7: yM-BRopjf51qtduhIy15MptpHyA.roa (hash: cYXBlJN/z+ptyvUxLCa1zDp3B5VQu0MKslmhphO0gbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:cc:79:56:a9:a1:cc:71:84:e0:ae:2c:5d:31:4c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
        Validity
            Not Before: May 15 04:02:06 2026 GMT
            Not After : May 16 04:02:06 2026 GMT
        Subject: CN=44eebd197f39b534bd7129a413384e24879f01e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:6c:eb:07:1a:5f:8d:e1:b6:4b:15:bc:53:
                    05:47:c1:7b:0c:05:d6:b7:cd:14:54:d4:30:87:8d:
                    8a:96:4b:55:74:a5:7e:84:c1:0f:fc:d2:35:10:e6:
                    f3:1d:30:7b:e7:b4:67:9d:b2:31:9f:c0:aa:45:9a:
                    f7:7a:ed:ce:af:31:0e:c0:57:1e:37:96:10:f6:8e:
                    f0:93:7f:4b:74:8c:63:09:b4:fe:a5:b9:5c:bf:6f:
                    6f:59:62:e0:62:af:68:12:8d:21:20:ff:3c:d1:e0:
                    fc:0d:2a:c9:02:70:d3:f7:cb:31:75:ab:2d:99:4a:
                    ad:3d:67:e6:bc:ad:13:2b:22:36:cf:37:ae:fe:fd:
                    99:9e:f4:e6:e3:d3:28:ca:00:09:e2:cc:7d:f9:8b:
                    71:e3:b0:7b:68:43:42:4e:88:ae:09:20:67:39:1f:
                    d4:74:d5:a9:08:3f:4b:31:39:d0:a8:d2:33:9d:51:
                    a3:88:89:ec:dd:1e:b7:9b:cf:7e:d6:9e:4a:46:05:
                    99:4d:94:af:3f:5a:40:07:aa:2a:1f:71:88:bc:a0:
                    29:29:01:3c:72:30:c6:29:9d:53:54:33:2e:e0:d3:
                    7a:4b:8c:33:a0:77:a7:fb:77:19:0e:41:78:54:66:
                    7b:a6:61:82:51:66:fb:0b:d2:4b:45:ed:e5:02:0a:
                    9b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EE:BD:19:7F:39:B5:34:BD:71:29:A4:13:38:4E:24:87:9F:01:E5
            X509v3 Authority Key Identifier:
                keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:2f:48:87:de:dd:16:dd:4d:c8:1c:27:5f:98:29:e4:f7:4f:
         15:2a:93:f7:7f:44:bb:54:b7:2f:21:ee:71:5d:80:79:ca:5a:
         a0:d9:41:87:1b:7e:de:73:df:ad:75:a3:46:f7:f8:4c:21:eb:
         1b:51:c8:c9:1e:d9:2c:3c:75:f2:4c:d2:36:09:e1:57:a2:11:
         1d:cf:f8:5f:a8:83:b1:d3:64:c7:16:68:bf:6f:c9:a0:64:a7:
         b7:25:1d:97:e7:b7:97:6f:b2:34:68:7f:df:6f:a3:a7:e6:cf:
         55:28:a7:cc:03:c8:5b:71:fc:38:05:05:46:d2:41:15:8c:ce:
         8e:3e:fb:fa:3b:e5:aa:d5:1b:d9:7e:c7:20:a6:f9:93:25:25:
         e9:a4:7f:25:45:6e:bb:02:e0:ac:1a:9e:18:a1:8b:a2:d3:bb:
         e0:f4:0a:f7:cb:79:c3:40:13:7b:bb:98:b9:ce:83:98:bd:a9:
         f8:4d:5e:44:38:5f:63:8c:ab:98:c7:b3:65:2a:40:50:8c:71:
         79:b2:ef:a2:32:38:7e:7d:07:3c:56:dc:aa:78:be:c1:68:01:
         fe:57:77:ac:10:22:78:04:22:c7:fb:94:f6:e9:34:0e:de:66:
         59:bc:f3:61:20:06:d0:c3:18:87:77:52:16:23:89:00:51:f9:
         c7:7f:66:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 12:03:02 2026 by rpki-client