Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
File:                     YgsENUY3RvXyN9k2h77C6s8iRVE.mft (raw, json)
Hash identifier:          z3+Ggyh4hBYpkKVbHrR1t9n9gL50YomtrkWh243Up2o=
Subject key identifier:   E7:75:B9:8F:F0:D6:85:52:EF:15:B4:79:C6:60:79:2E:7D:4C:08:7D
Authority key identifier: 62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
Certificate issuer:       /CN=620b0435463746f5f237d93687bec2eacf224551
Certificate serial:       019E2994D36FED4393BCE2F97CA6B3D62DBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
Manifest number:          0AEE
Signing time:             Fri 15 May 2026 03:01:19 +0000
Manifest this update:     Fri 15 May 2026 03:01:19 +0000
Manifest next update:     Sat 16 May 2026 03:01:19 +0000
Files and hashes:         1: T9qIl1S9tQz4tEVjrSKAWFbOqcg.roa (hash: h4jSuRvvCuZIkrJ0uLJKVCyM1giPtJIbarHhGQfdVf0=)
                          2: YgsENUY3RvXyN9k2h77C6s8iRVE.crl (hash: AK9iiF9vXu8gCQlcT9qGBkO6cL/N+mMK1XnAGW9PUNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 03:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:94:d3:6f:ed:43:93:bc:e2:f9:7c:a6:b3:d6:2d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620b0435463746f5f237d93687bec2eacf224551
        Validity
            Not Before: May 15 03:01:19 2026 GMT
            Not After : May 16 03:01:19 2026 GMT
        Subject: CN=e775b98ff0d68552ef15b479c660792e7d4c087d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8d:a7:f8:3d:d1:54:40:02:7b:0c:ba:cc:45:
                    00:b6:79:02:10:71:b5:ac:4a:39:6c:0b:9d:e8:4f:
                    da:dc:42:80:83:05:46:3b:a4:11:09:96:85:db:13:
                    bb:40:87:93:35:b0:a6:26:42:ec:4a:da:ee:2e:8d:
                    ed:9a:8c:17:4a:81:a7:09:f4:ac:d2:d4:e3:d3:9e:
                    34:96:83:a6:7e:70:52:01:09:bd:08:cf:a0:e9:44:
                    7c:83:58:77:89:5d:ff:70:94:12:4e:02:bf:9f:f1:
                    86:81:66:31:07:4b:7c:bd:7c:cc:cf:2b:48:53:ec:
                    fc:fd:07:82:e3:d0:91:fd:36:7f:31:c8:66:91:53:
                    87:8a:24:84:a2:3d:37:f5:ae:05:2b:56:1b:fd:77:
                    ad:aa:55:ed:51:63:a2:8d:29:24:7c:66:71:ae:d8:
                    5b:11:9c:43:c5:4d:f0:49:4c:b6:f3:7a:d0:8d:b6:
                    66:99:7d:65:4a:bf:08:56:45:bc:b4:f7:e7:7c:39:
                    d9:9c:dc:6c:75:68:2b:bf:8e:aa:c7:88:1a:0a:e4:
                    09:a0:90:fd:c6:6d:6a:bb:cc:b8:20:69:0f:a3:da:
                    7e:ac:7f:f9:f6:54:99:fb:b5:e7:35:32:4d:f4:73:
                    22:df:ab:fc:3d:1f:87:0a:6e:1b:16:17:29:1b:c7:
                    0b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:75:B9:8F:F0:D6:85:52:EF:15:B4:79:C6:60:79:2E:7D:4C:08:7D
            X509v3 Authority Key Identifier:
                keyid:62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:0a:c6:a5:c1:b5:99:13:93:f1:be:ca:37:d5:fc:4b:13:72:
         fa:e0:1c:e0:98:55:4a:4c:c8:34:f5:09:54:86:25:1c:96:21:
         73:d0:84:e2:53:b4:96:c0:d3:6c:a8:60:a7:cd:f6:ad:d1:52:
         94:d1:4a:77:0e:35:a3:d5:65:50:90:69:61:3b:5f:ef:08:ed:
         c5:03:14:81:26:ba:69:03:4d:cd:3a:66:40:6a:10:58:8e:43:
         94:42:29:33:48:95:f8:cf:0d:44:9c:47:21:f5:c3:2f:17:f3:
         ce:71:df:ad:af:3c:60:af:10:cc:af:b3:43:7c:85:5c:46:eb:
         5e:5a:31:6e:96:a2:2d:87:3e:09:12:86:2d:0e:29:81:4b:9a:
         a2:2e:18:df:da:ce:a4:7f:78:22:67:7b:13:5f:a3:67:75:3a:
         ff:a3:5d:9c:de:a1:c7:5c:23:b2:ee:b2:d9:eb:47:11:4d:39:
         61:3f:f4:9e:71:c2:9d:b3:5c:6c:ee:98:30:70:8f:f7:dd:23:
         5b:e6:ba:f9:7e:26:be:a0:ae:1e:e0:70:70:ca:17:ea:00:c8:
         41:56:f7:a3:30:e0:99:e4:9d:4a:68:c5:5a:7b:cb:36:7c:93:
         33:da:cb:78:7a:5e:e2:56:44:9b:52:91:ec:7b:a9:1f:ba:a3:
         08:fe:f8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 13:27:52 2026 by rpki-client