Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
File:                     YVdYrqR51PMqnonpgI8w7fwjsuc.mft (raw, json)
Hash identifier:          lmpzqrxJac1foOh2D2PCNCpOOAjF/uR83AMiLsFk+L8=
Subject key identifier:   CD:B2:60:A9:46:11:0E:CB:3E:B2:EA:C2:FD:D3:AD:6F:6C:6F:BE:2E
Authority key identifier: 61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7
Certificate issuer:       /CN=615758aea479d4f32a9e89e9808f30edfc23b2e7
Certificate serial:       019E284BB12BBD9A71A9757B2F9A0DF5479B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
Manifest number:          0136
Signing time:             Thu 14 May 2026 21:01:49 +0000
Manifest this update:     Thu 14 May 2026 21:01:49 +0000
Manifest next update:     Fri 15 May 2026 21:01:49 +0000
Files and hashes:         1: AVMt1IkFQkpQTFPhcJiPQebWyaw.roa (hash: qqeo1sr3KufApWxnZYHLgx99+UAI5SwVQeJY/6Jm77o=)
                          2: HTkWVqwWdYMU9-z901Fkn7FF9qw.roa (hash: 84JM0NxqvFzDNFSOBlDrmX34vQu0On4QXXv7AseJZbk=)
                          3: MMWviOYCBW0u-v9YnjmnhatFDV8.roa (hash: yRtMl95uh8M4yTrzp5OTDyFY8UopBvd6bRvc/jRLsfc=)
                          4: YVdYrqR51PMqnonpgI8w7fwjsuc.crl (hash: dT4HOl6YWn+Ij8cYulViydAj6l6wHYahvAEviQv8He4=)
                          5: _VWZ0XjMvcGoTelbVe1k8IzzHlo.roa (hash: G04H0qYQyU9/pfzI/sNJzq68+ieZrRS73Fbf1e3vIW8=)
                          6: cCA0wjgUUO3sAdPTJXUOJCpOGaU.asa (hash: vuAaHA0d+fmntVENPlaiPGFPGkTEzsB/M+vM35Fie4s=)
                          7: hLbS1YYILQ9sQxDeGkNOA1MpSJs.roa (hash: aCviuUzfEy79q4aOge+wEpAQjNz6H04AGobOXXp8iek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 21:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:4b:b1:2b:bd:9a:71:a9:75:7b:2f:9a:0d:f5:47:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615758aea479d4f32a9e89e9808f30edfc23b2e7
        Validity
            Not Before: May 14 21:01:49 2026 GMT
            Not After : May 15 21:01:49 2026 GMT
        Subject: CN=cdb260a946110ecb3eb2eac2fdd3ad6f6c6fbe2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:75:00:c3:98:b6:93:9c:cb:5b:d3:c6:45:5a:
                    12:18:27:48:aa:de:20:68:3c:3f:07:42:57:0c:e3:
                    38:22:17:64:00:16:de:b6:5e:70:e4:d0:5c:47:3a:
                    69:0f:e2:58:a5:d7:66:12:4a:0c:cf:49:62:fe:c5:
                    b3:47:0b:f0:65:1e:c7:ac:b4:ec:45:49:47:f9:50:
                    33:46:93:c8:65:cb:28:61:03:4c:89:ab:44:2f:48:
                    5f:08:b4:b3:76:62:5a:ea:7c:5f:49:cb:72:d3:ea:
                    56:c8:05:eb:51:70:bc:58:e9:35:88:61:dd:3c:6d:
                    a5:a4:07:87:3e:98:27:48:65:26:7c:74:15:39:9b:
                    59:d4:ea:b7:70:b8:cc:10:63:3a:b9:f7:c9:f3:79:
                    80:e5:2c:4d:46:63:49:81:e4:97:9a:32:22:68:96:
                    93:ce:c0:24:72:05:c9:47:bc:5f:39:73:92:02:4c:
                    4f:f8:1f:5d:0e:2f:45:cc:10:a1:60:8a:0f:79:da:
                    87:57:3e:4d:2c:5b:6a:b4:fc:4b:6f:89:ed:9f:fe:
                    e5:12:75:c1:1b:94:fd:09:cd:11:14:ed:90:ea:83:
                    19:60:96:0c:cc:e6:2b:47:57:c3:e7:7b:2a:ca:bd:
                    f1:30:85:0d:6b:9d:ab:0f:ab:c1:14:f8:c8:63:3b:
                    8b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B2:60:A9:46:11:0E:CB:3E:B2:EA:C2:FD:D3:AD:6F:6C:6F:BE:2E
            X509v3 Authority Key Identifier:
                keyid:61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:9e:15:01:b1:cf:16:58:2c:32:36:a1:cd:e4:44:6b:8d:58:
         e9:25:fb:9c:84:e6:ff:62:3b:df:81:44:16:31:45:83:31:d9:
         ef:21:2f:12:80:1c:59:39:2b:1b:e1:59:f1:a0:14:ca:b7:f0:
         72:0b:b2:17:99:6a:d8:35:86:24:fd:06:44:6f:55:38:eb:02:
         8d:36:ab:4e:75:67:3c:f8:14:64:f1:29:62:73:13:38:49:f4:
         b3:7a:33:c7:f6:5e:d6:ef:8c:e5:17:03:49:de:e8:57:41:87:
         de:b4:40:0b:94:50:1b:c3:94:7f:e3:3c:48:f5:f3:3b:e9:ed:
         bb:df:bd:2f:3f:30:94:16:86:68:3e:28:83:c8:ad:0b:18:3c:
         5b:69:32:04:d4:ce:fa:e7:74:62:bf:e8:3f:ad:38:d1:1e:fd:
         cd:f9:bc:5c:7d:60:d0:d5:e1:cf:e5:02:f7:e7:10:f1:66:ee:
         2a:47:2a:f1:57:e5:84:04:35:0d:f0:eb:7b:d0:83:7f:e3:be:
         89:c4:d3:63:2f:b4:a1:9d:3c:2e:aa:84:7a:b6:1e:b8:c7:15:
         b0:be:8a:c8:eb:52:a3:7c:99:5c:ae:01:c0:94:9d:e6:ba:36:
         36:1c:62:80:ae:50:6f:29:19:6a:fa:5e:55:b8:8f:2e:83:24:
         45:e1:24:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:16:24 2026 by rpki-client