Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
File:                     YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft (raw, json)
Hash identifier:          0e8nqImtJ8lBwEBtwRMUgjB7VdmK/9HhaHD/DYL8jQY=
Subject key identifier:   4B:06:F9:E9:8C:5E:E1:71:4A:D3:F4:0E:C7:40:BD:34:37:7B:00:97
Authority key identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
Certificate issuer:       /CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Certificate serial:       019E3261001A262D545258B5B8B9764A6837
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
Manifest number:          092D
Signing time:             Sat 16 May 2026 20:01:18 +0000
Manifest this update:     Sat 16 May 2026 20:01:18 +0000
Manifest next update:     Sun 17 May 2026 20:01:18 +0000
Files and hashes:         1: 1xbn_UMCw0INiad24Fz-EfLf1Gw.roa (hash: SZrNeUwfQoqqElnDWbZPqxb5PbXGACF+9AzBOt+xfa8=)
                          2: 6XExm7Uo-EU0Ms0tsb7xKnyJkVk.roa (hash: BWgqT1gKxehU5OIENtOQqrP4y0cmP4jYKvHGk1A4LAc=)
                          3: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl (hash: gtFckHxIfCXx4ljwCw7ULe/nfASfqMdYvpSaQ0e3LEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:61:00:1a:26:2d:54:52:58:b5:b8:b9:76:4a:68:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62c66267943d413cdf760dc6850104c1c0fc1d65
        Validity
            Not Before: May 16 20:01:18 2026 GMT
            Not After : May 17 20:01:18 2026 GMT
        Subject: CN=4b06f9e98c5ee1714ad3f40ec740bd34377b0097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0a:1f:02:18:99:29:56:f4:75:30:88:81:33:
                    60:d9:4c:7a:35:3f:1d:17:f4:6e:9b:81:15:c7:36:
                    2d:b6:7e:40:dc:06:e5:e2:e4:4d:d6:a1:ae:2f:5e:
                    20:9f:07:7e:04:51:94:a3:74:a6:9b:ee:66:cd:b6:
                    56:49:74:06:d1:cf:4e:39:f6:0a:bd:0a:a0:7b:ae:
                    a4:e1:36:7f:81:bb:2d:d4:56:77:bf:af:4d:ac:19:
                    b0:1d:e1:6e:3e:dd:24:df:c1:5f:7c:65:e0:83:13:
                    eb:e5:51:1d:eb:53:55:46:17:03:c9:9e:cd:12:ea:
                    7e:cc:c8:4d:61:52:58:24:62:b6:54:1f:5c:51:e0:
                    cc:2b:4c:e3:f4:d7:04:00:11:bc:f7:4d:37:29:d2:
                    d1:16:e4:cb:35:72:be:a3:76:a2:f6:16:ea:d5:30:
                    60:ae:d4:8f:c8:d4:f2:58:83:ae:ec:fe:23:63:74:
                    4b:cd:2d:be:b5:0c:dc:75:ef:de:65:4b:04:5a:ab:
                    d8:69:0c:19:c6:03:8e:f7:e2:09:44:a2:f3:72:4c:
                    f7:c3:cf:ec:e6:5e:be:f5:42:7a:fa:65:e0:92:4f:
                    24:49:fa:34:58:7b:5f:c4:41:21:e1:55:7d:7a:74:
                    5d:0c:1c:8f:b5:a4:d7:e3:e7:fd:67:1c:16:97:2a:
                    b2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:06:F9:E9:8C:5E:E1:71:4A:D3:F4:0E:C7:40:BD:34:37:7B:00:97
            X509v3 Authority Key Identifier:
                keyid:62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:34:2d:c0:d6:8d:94:e9:7d:0f:42:43:24:62:a5:b7:ee:3f:
         19:f1:d5:58:08:73:38:fd:92:c3:ca:9e:5c:a0:e9:5c:a5:a7:
         4c:05:72:b9:3d:84:b4:97:2e:c0:66:90:62:97:0e:4b:2b:60:
         b2:b3:82:15:97:b6:6a:8a:9a:4a:51:01:fc:23:46:88:3b:3e:
         99:43:43:80:bd:bc:0a:41:e2:b8:0e:cf:5a:36:cd:3b:5e:1a:
         89:93:34:f6:f1:70:ac:b5:f9:0c:96:25:af:6f:fd:06:91:4c:
         78:ae:b4:b3:0a:df:b7:17:d3:15:2d:09:9b:cf:62:e1:42:a9:
         97:f8:12:8d:d9:d4:76:a5:14:9a:2c:3c:b3:90:63:32:48:af:
         88:3e:44:ac:77:8b:3a:a8:40:c9:96:cc:c2:11:97:fa:d4:7f:
         d5:c4:a8:89:f3:3f:71:c6:8a:e3:c4:a5:33:cb:f4:f3:61:a4:
         f2:05:7a:88:e0:f7:28:ed:e5:7f:22:06:82:f4:57:59:c5:db:
         4a:72:14:b7:5d:7d:e5:a6:f3:1b:9e:ba:b5:10:98:5f:cd:40:
         0b:cd:70:47:c9:15:7a:91:50:15:ee:25:57:55:6c:b5:77:0f:
         d7:1e:2e:c1:60:66:3b:f4:66:4d:8e:48:2a:cc:ea:09:ec:be:
         62:28:1f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:30:51 2026 by rpki-client