Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
File:                     yZE15YfLs4vh63tt6cSAKdBF0nM.mft (raw, json)
Hash identifier:          DtLqVcz+HsiTe39o2bhMweCiJewPMKzgAV3Ndyd9xHQ=
Subject key identifier:   99:C1:DB:A5:F0:13:75:4F:ED:1E:5E:76:1A:E5:CE:E2:FA:24:4B:F8
Authority key identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
Certificate issuer:       /CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Certificate serial:       019DCD18F0EB64B2D824FA76081533F67EDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
Manifest number:          0630
Signing time:             Mon 27 Apr 2026 04:00:56 +0000
Manifest this update:     Mon 27 Apr 2026 04:00:56 +0000
Manifest next update:     Tue 28 Apr 2026 04:00:56 +0000
Files and hashes:         1: Y5vED9_-DcGMaaxbEGOZus8MwVQ.roa (hash: G2iq16qjDO2AmE19u6Mdnenb3I/Kvxji/seB7NO5CFY=)
                          2: gKtjzQMB06yDauEd9zVELt-Geqk.roa (hash: ON0aCx2enNugObjEPugyFFI494d+5BTaKTrArKDjsJI=)
                          3: sLC5YO5xONWk4v-wyFAtQfaIubc.roa (hash: RnXdiuhlkryBeMlrPXhg5Tc0W7BvyjnuvWyXURl030k=)
                          4: yZE15YfLs4vh63tt6cSAKdBF0nM.crl (hash: OCBvT0pK2jrhFeJR5BJGJWFXWoxbB65wDWEDff/ASg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 04:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:18:f0:eb:64:b2:d8:24:fa:76:08:15:33:f6:7e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c99135e587cbb38be1eb7b6de9c48029d045d273
        Validity
            Not Before: Apr 27 04:00:56 2026 GMT
            Not After : Apr 28 04:00:56 2026 GMT
        Subject: CN=99c1dba5f013754fed1e5e761ae5cee2fa244bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1c:e4:94:57:3a:45:20:1f:52:9e:02:58:ec:
                    17:0c:5d:5f:eb:23:4b:e2:23:af:ed:60:1d:0f:84:
                    d6:96:18:0a:91:a9:ee:cf:9d:89:16:a2:2d:05:e1:
                    2e:6e:ba:10:95:7c:ea:57:0f:5a:65:79:b2:6d:a6:
                    d0:0b:5a:b8:a9:13:83:8f:0f:68:be:9f:f1:3e:8e:
                    1e:71:a7:2b:e9:ca:b1:7a:a7:e8:98:c9:b8:92:aa:
                    4b:c5:5c:0b:c1:72:ba:8c:9f:76:e5:94:05:cd:5b:
                    71:f7:8a:76:4a:1f:85:f3:df:17:01:b5:ff:b1:d7:
                    71:1d:35:fb:75:ba:59:af:98:5a:0c:b5:a7:48:79:
                    20:17:ee:4c:e6:66:39:0a:c5:10:4d:65:63:4e:c5:
                    84:2a:69:5b:0f:20:a5:18:05:1b:51:ad:25:49:c1:
                    0e:2e:6b:8f:38:53:a9:b5:a3:3a:91:a5:ae:8d:c7:
                    a5:45:99:19:49:5f:45:da:d3:1a:80:23:65:3b:cd:
                    69:98:3a:1c:70:f1:cf:c6:44:23:7f:33:c0:28:77:
                    cf:20:55:03:27:34:30:ea:d4:0b:78:6c:5e:f5:68:
                    87:8a:26:45:0e:e0:c8:9b:78:16:5e:36:01:cf:5b:
                    2e:dd:8d:ea:88:db:27:8f:3d:1a:58:92:6e:e4:ad:
                    c9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C1:DB:A5:F0:13:75:4F:ED:1E:5E:76:1A:E5:CE:E2:FA:24:4B:F8
            X509v3 Authority Key Identifier:
                keyid:C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f8:ac:1e:d9:54:04:a4:a2:70:f1:93:ca:0c:c9:49:c2:e7:
         e6:89:82:59:c4:42:01:f2:fb:ba:7a:17:f8:75:48:b1:15:08:
         03:92:b8:24:fe:90:7e:7f:d9:4f:10:de:4c:6e:6b:9e:ae:1c:
         cd:6b:c3:c6:7a:cc:d5:8d:d2:3e:7e:ca:6d:f6:e6:d8:43:56:
         88:44:c0:bb:0f:70:1d:09:91:d4:4e:36:da:0a:37:60:5e:bd:
         e2:eb:91:1e:ed:35:18:16:f1:93:df:5b:5f:ca:41:a6:76:bf:
         d4:63:d6:ef:dd:7c:4f:fc:fe:cc:11:9e:cb:d0:7e:c1:be:16:
         55:49:fa:ac:29:5e:66:eb:c6:e1:12:8a:50:52:98:76:6c:a7:
         93:42:22:c4:9c:40:a9:0f:8f:29:92:87:31:54:4f:5c:67:83:
         2c:9c:e9:93:d1:be:64:51:c0:bf:81:94:0e:ac:9a:a7:23:88:
         d2:be:a3:23:cc:c4:68:81:19:8c:9d:be:27:15:f0:ca:c8:e0:
         5d:79:ac:85:2c:63:36:be:59:9d:e9:2d:3e:f4:2e:54:59:b2:
         fe:c5:4f:31:b6:b7:18:a3:60:04:cb:ca:02:25:99:66:97:66:
         61:b4:fa:33:ca:87:b2:e0:af:70:2d:6e:08:af:55:12:9a:c8:
         01:ff:91:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:35:22 2026 by rpki-client