Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
File:                     _Yk4EweuXjsbqGWM2n7iraQUFEc.mft (raw, json)
Hash identifier:          9c0gqoJS/juHHCYo6C5DeMoGbhQ4WesiUkhxggJFHU8=
Subject key identifier:   96:FC:78:83:3D:4C:80:11:09:D2:FB:A0:66:0E:11:56:E8:D3:F1:3A
Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
Certificate issuer:       /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Certificate serial:       019E33AA6E49EF4DB80C9DC81138318136FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
Manifest number:          1431
Signing time:             Sun 17 May 2026 02:01:07 +0000
Manifest this update:     Sun 17 May 2026 02:01:07 +0000
Manifest next update:     Mon 18 May 2026 02:01:07 +0000
Files and hashes:         1: _V1LSsZtamsE4WXP60Yw8QNvv70.roa (hash: 86294W5FbZlicyPxaf1Bh5Vh3kJ1iu3Y1KxTGDfYWAk=)
                          2: _Yk4EweuXjsbqGWM2n7iraQUFEc.crl (hash: e2bbxa/BYYCtN/b7rhyEafS3yXSHIQ/XuImoJ3S9Tyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:33:aa:6e:49:ef:4d:b8:0c:9d:c8:11:38:31:81:36:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
        Validity
            Not Before: May 17 02:01:07 2026 GMT
            Not After : May 18 02:01:07 2026 GMT
        Subject: CN=96fc78833d4c801109d2fba0660e1156e8d3f13a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:2c:c3:b3:af:b5:27:4f:b4:32:9f:fb:80:
                    3f:c0:ff:92:4e:3a:55:ef:2e:44:1c:8c:84:6e:70:
                    47:93:94:db:bc:81:bc:03:22:51:05:d9:4b:7e:89:
                    f6:e5:d0:08:8b:d2:b9:ef:4d:3b:2c:20:41:c8:a5:
                    f0:b7:b0:2d:fd:ec:23:19:be:bd:c4:97:27:7a:d2:
                    61:f3:b9:f2:51:55:57:20:41:81:ff:6b:97:e0:fb:
                    28:ab:9b:cd:07:44:9a:c3:5f:48:a9:ee:8e:1a:d8:
                    bb:70:d0:aa:a4:95:b3:4f:c4:83:3e:42:9f:34:9f:
                    0a:2b:42:c7:d2:0a:11:e2:25:e2:68:5b:7e:41:c5:
                    4b:14:8d:01:97:5a:42:5c:8a:97:c9:a9:9d:72:b1:
                    11:37:dc:85:41:1e:97:6c:ef:ff:79:90:5e:ba:50:
                    fc:5a:63:25:f7:a7:6c:20:6a:2c:2a:27:51:4d:88:
                    63:11:7d:1f:fb:c2:b7:2b:55:83:b7:ad:53:83:a2:
                    80:7e:65:22:ac:75:be:c9:b8:ef:c7:fd:68:75:42:
                    94:e2:08:04:43:3d:01:c6:5b:b2:a4:8a:2f:29:ed:
                    e2:21:e6:fe:03:37:a0:64:c5:00:6f:24:2d:94:7a:
                    7d:d6:aa:71:bb:86:e2:79:b7:6e:2e:8d:74:5d:31:
                    bb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FC:78:83:3D:4C:80:11:09:D2:FB:A0:66:0E:11:56:E8:D3:F1:3A
            X509v3 Authority Key Identifier:
                keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:a4:4c:a6:5d:bf:d0:cc:73:bb:24:35:fe:05:d4:81:c6:da:
         f2:5e:ec:24:85:de:aa:ef:f9:8e:08:1a:b5:72:22:65:05:46:
         bf:5e:6a:37:79:88:ac:c7:ab:d3:6d:eb:3c:b3:f0:ee:64:50:
         5b:e0:58:76:e3:5d:bc:33:81:01:60:d3:fe:76:05:7a:4c:d3:
         fc:66:f1:70:e9:dd:8f:36:df:ae:44:9a:d1:2e:0c:77:13:7d:
         7e:12:65:ea:d3:f1:f6:35:07:c5:4d:de:4e:ba:73:8d:dc:0f:
         8c:de:59:8d:01:87:44:08:43:ca:59:d3:a8:ec:18:fa:6c:35:
         42:a4:77:49:40:b5:cd:6c:8f:3a:62:b6:bf:40:15:06:4e:95:
         85:62:e9:ac:eb:c8:f3:9f:09:01:31:08:8f:a7:0b:06:82:eb:
         27:69:fe:cf:3e:0e:e2:6f:ec:5e:bb:d9:83:c4:5e:95:49:74:
         a4:20:c1:5c:b5:6a:a3:a4:ae:c9:7f:16:39:30:1d:a4:4c:8e:
         c8:b9:ff:9a:2c:35:2b:c2:80:37:70:b5:0a:e4:cd:58:2e:bc:
         40:5a:6c:27:c5:74:a2:32:c5:3e:3d:17:5f:84:fe:d3:a1:fe:
         65:e0:fd:53:df:62:b5:31:9f:eb:54:fc:de:ae:36:4e:c0:22:
         24:db:d8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 05:12:48 2026 by rpki-client