Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
File:                     YQfi4ugXHTGdobxks2w8mF5kbCo.mft (raw, json)
Hash identifier:          ujxIZ5l3eyei1+r5Kj8zS9E3kjVNbuEf7Bk6b9a3mNk=
Subject key identifier:   34:D1:C1:38:04:A8:6B:64:6A:58:31:1E:CE:66:22:04:6E:98:BC:B5
Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
Certificate issuer:       /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Certificate serial:       019DCE2B5EFA307A53E06C390928C523EEDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
Manifest number:          18E6
Signing time:             Mon 27 Apr 2026 09:00:41 +0000
Manifest this update:     Mon 27 Apr 2026 09:00:41 +0000
Manifest next update:     Tue 28 Apr 2026 09:00:41 +0000
Files and hashes:         1: 1-nkqwt04sUMDC9uRx_t8c380GeY.roa (hash: h9/W+wiBRXLJF6MSGvt9b5FtX9V4UYzPeLihbacnCqo=)
                          2: OFtVY85hllJ2JhFdY0oBrhrDglk.roa (hash: ixOZNGs39FuvyZqt7XpiB2gK7lU4Kgko6Nu9gQDJIEg=)
                          3: YQfi4ugXHTGdobxks2w8mF5kbCo.crl (hash: NMtwxmqg9ycZ4/TMtSqQKdjUfHWgfX8jgf2N5ZEmirU=)
                          4: zeXlkkdIl09Dvjdm4ssi_tIY1Bg.roa (hash: hWf1h7aupZ9EKGB6E2iziSGfeT6RpNoa9INKOxiybSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:2b:5e:fa:30:7a:53:e0:6c:39:09:28:c5:23:ee:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
        Validity
            Not Before: Apr 27 09:00:41 2026 GMT
            Not After : Apr 28 09:00:41 2026 GMT
        Subject: CN=34d1c13804a86b646a58311ece6622046e98bcb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4a:6c:7c:76:30:5c:56:14:a7:b1:67:80:08:
                    39:8e:e3:db:99:7c:52:dd:b1:88:62:fc:9b:74:34:
                    c3:da:91:ad:f4:59:ee:32:c7:d5:07:5e:cd:d7:cf:
                    66:69:93:09:4c:27:12:08:5b:c5:99:8b:38:cd:de:
                    bb:5a:23:c9:7e:98:2d:74:f2:d3:84:a2:21:4a:97:
                    96:9e:6d:d8:8a:c9:59:47:81:d4:58:e3:e2:01:39:
                    2d:53:1a:bf:41:95:d7:b5:80:ab:cd:d8:8f:3d:ba:
                    f2:91:1d:63:cf:4e:3d:83:73:da:2b:6d:b5:14:70:
                    fb:99:52:d6:9a:02:74:a7:e0:de:c0:b1:df:23:f3:
                    c9:38:4d:be:7e:e6:00:2b:db:b7:d5:9a:3f:9b:0e:
                    e1:4c:ed:46:60:02:a8:43:1c:12:c2:61:87:51:cd:
                    15:d3:44:d5:e8:12:46:fa:ab:88:af:67:56:10:dd:
                    af:8d:c8:42:2f:1f:41:d8:2b:c7:cf:0a:b2:42:22:
                    63:f7:0d:72:b0:7a:0b:b9:57:44:5a:6d:43:44:6e:
                    2e:a8:ed:bc:01:e5:68:92:7d:eb:ed:f1:fb:5a:eb:
                    80:e3:47:9a:28:0b:ff:17:99:4b:3b:b9:ae:b1:c9:
                    e9:51:e8:af:9d:b7:04:dd:eb:34:7e:e9:71:e5:43:
                    c8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D1:C1:38:04:A8:6B:64:6A:58:31:1E:CE:66:22:04:6E:98:BC:B5
            X509v3 Authority Key Identifier:
                keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:3e:13:83:d1:07:51:98:44:28:34:91:98:f5:9d:0e:10:32:
         f4:f8:4b:e8:29:90:c5:0e:0b:db:83:a8:75:e7:8a:cc:ba:3f:
         bc:78:17:da:81:1f:1b:cf:17:5e:ce:25:1b:20:11:e5:0e:c5:
         51:65:3e:77:19:1b:bd:9e:1c:e9:c9:9b:50:3a:51:75:ef:e4:
         84:86:59:38:da:72:cb:84:f1:06:73:16:be:69:53:a8:d9:82:
         87:c9:e5:0c:a5:a5:ea:4e:ca:5b:1b:b8:a9:1a:ac:b9:da:cd:
         a8:44:b3:aa:1d:bc:e0:c0:b5:94:ee:d9:fe:9d:33:d8:94:04:
         e7:a1:5f:57:59:1f:54:db:84:a2:dd:37:7e:4e:58:58:b5:da:
         f3:4b:52:49:6e:08:1e:5e:5a:16:2a:ca:32:7b:f7:b6:d4:c9:
         1f:8b:7c:e7:ea:ad:f9:b0:03:29:fc:27:b7:2f:69:87:f6:0b:
         c7:14:f5:ac:5e:36:ab:74:9a:9f:74:6d:0b:ec:dc:bc:33:94:
         fa:42:a6:28:3f:d9:eb:05:6a:72:be:78:eb:98:3b:01:f5:07:
         82:a1:46:aa:ff:9e:9a:f2:2c:c0:d7:97:4b:52:6e:cb:8f:24:
         1c:1f:37:3b:3e:ae:99:cd:c9:7d:17:fe:c0:4a:6b:51:b3:30:
         e6:53:2b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:13:28 2026 by rpki-client