Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
File:                     YbBXiaToJL6BA953DcJcWT7z_co.mft (raw, json)
Hash identifier:          GJEykacprCYzROuZNAddhpOVWutnqCDBFINZzITxduo=
Subject key identifier:   E9:C7:10:DA:E5:4C:53:A7:6E:EB:24:BB:83:88:FF:9F:51:D9:C7:79
Authority key identifier: 61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
Certificate issuer:       /CN=61b05789a4e824be8103de770dc25c593ef3fdca
Certificate serial:       019E2927822EDC4F6979D1BED6117F50BF18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
Manifest number:          14BA
Signing time:             Fri 15 May 2026 01:01:55 +0000
Manifest this update:     Fri 15 May 2026 01:01:55 +0000
Manifest next update:     Sat 16 May 2026 01:01:55 +0000
Files and hashes:         1: 0FXE-aMYDoHsJWIgYZ6p4cTAvIc.asa (hash: m9vFjKk2IkfNxMT1oBT/EqvBwRhxlH++eft+dvmvzfI=)
                          2: B1xlxtkgltJzqbUtpT-T2k7OjtI.roa (hash: qZlWNzGPdE+IKxAZlX53rTWx5ECKk+OZ5/kaPPhGDH4=)
                          3: YbBXiaToJL6BA953DcJcWT7z_co.crl (hash: bIGdmYjd2fLkrKU9r/JxRpcaCxdtOGHzgUqvMp4Tu9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 01:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:27:82:2e:dc:4f:69:79:d1:be:d6:11:7f:50:bf:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b05789a4e824be8103de770dc25c593ef3fdca
        Validity
            Not Before: May 15 01:01:55 2026 GMT
            Not After : May 16 01:01:55 2026 GMT
        Subject: CN=e9c710dae54c53a76eeb24bb8388ff9f51d9c779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:79:87:5a:3a:c3:45:b7:6f:58:30:f8:c9:16:
                    a3:f9:22:2e:19:32:77:77:00:c8:52:11:d5:fe:c9:
                    af:58:d8:23:98:c1:b2:8b:6a:19:a4:29:36:70:48:
                    22:77:34:f3:75:fa:bb:a3:35:88:cc:b6:7e:3e:85:
                    e8:ee:02:01:3a:dc:e0:ee:9a:fe:17:cf:a5:3b:9f:
                    32:8c:f5:7f:de:ae:91:fb:44:0a:02:60:d3:f6:26:
                    22:76:d2:13:66:7c:71:be:aa:d5:6c:b1:65:d1:74:
                    b6:02:c9:80:e4:81:21:11:4d:79:3d:c6:9b:13:b4:
                    80:c0:ee:d1:6a:23:38:9f:70:1e:92:e2:40:6d:61:
                    2c:e5:9c:f7:26:1e:11:2e:d1:dd:b9:82:55:24:61:
                    26:b1:ce:26:29:f7:a9:87:cf:d3:32:17:2f:76:50:
                    bb:56:34:dd:b2:2c:7c:fd:74:9b:96:69:6b:02:54:
                    98:c5:32:e9:d6:59:cf:d1:c1:bb:b8:0e:89:33:40:
                    a7:c4:77:27:c5:63:05:15:3b:7f:b0:1e:1d:21:fb:
                    67:f6:e5:7a:66:7c:e8:79:52:cf:79:0e:f5:b4:9c:
                    b7:75:fb:d6:ce:d4:4a:54:e8:22:3e:fd:1d:df:92:
                    2a:10:d1:f7:49:c9:ad:f7:3e:b4:ea:f5:f7:d0:b7:
                    81:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C7:10:DA:E5:4C:53:A7:6E:EB:24:BB:83:88:FF:9F:51:D9:C7:79
            X509v3 Authority Key Identifier:
                keyid:61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:c8:3e:5f:84:2c:8a:68:ed:b4:2f:a2:72:62:48:bf:cd:ec:
         c8:2b:37:26:58:17:de:87:66:1a:39:c8:04:af:be:6b:11:93:
         ce:cb:f5:d9:46:2a:4d:71:76:6a:47:60:3c:26:6e:c8:6c:82:
         98:c2:c8:cc:50:76:d4:51:a0:a6:e7:bb:bd:73:cf:5a:46:65:
         5a:03:a7:0c:2f:7e:1f:5f:11:ed:b4:74:b4:48:da:0e:37:32:
         e4:43:53:45:12:18:8e:d2:1a:e6:3e:27:6b:fd:d8:ee:aa:f6:
         eb:d0:fd:16:04:49:3e:54:11:a3:a1:92:16:bd:0d:6c:45:09:
         7e:c1:10:6c:7c:fb:5d:cc:c2:4c:30:35:c1:4e:49:43:db:0e:
         71:77:63:a9:64:83:a5:9a:f0:2b:21:74:3c:1e:5d:09:99:3f:
         b5:ce:4d:e9:68:c4:a0:97:e3:12:8e:07:d7:75:0f:ea:67:f8:
         2d:20:c8:19:e7:e8:e6:4f:53:86:dd:55:5e:9d:41:42:03:86:
         6e:05:a6:68:9c:ee:95:3b:88:97:1d:d8:7e:12:2c:40:ac:f7:
         cc:48:24:cd:9b:7a:68:56:0d:c2:26:f5:b6:6e:3c:3d:83:f6:
         b6:c1:63:4c:26:a2:fa:e3:67:10:3e:f4:8d:1b:1a:09:22:d9:
         d1:85:d3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:42 2026 by rpki-client