Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
File:                     RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft (raw, json)
Hash identifier:          qwZ9NIRHIOuunv1MjA10z+7XR2fhwCaZLxpfvrwdZkU=
Subject key identifier:   21:5A:38:07:98:BB:0C:29:97:19:7A:0A:6D:83:B1:8E:69:B3:06:59
Authority key identifier: 47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
Certificate issuer:       /CN=472694d8a399a3a66f442ec72295c754acbbad41
Certificate serial:       019DEE5BA63354C5878451976AACA5209406
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
Manifest number:          17C6
Signing time:             Sun 03 May 2026 15:01:16 +0000
Manifest this update:     Sun 03 May 2026 15:01:16 +0000
Manifest next update:     Mon 04 May 2026 15:01:16 +0000
Files and hashes:         1: 9Y9_-ghmVyAuliB_ZM6L4N2aR9Y.roa (hash: AlB+NM2coMQme+Vwjxfjbx7bvSYOwHST/cCoDhabdh8=)
                          2: BGx_SKWg0A0x4u2zJMu40hnQx4Q.roa (hash: 3vgm19azZKbua/L5jF2wErVGYC2PH4djUu3AdY79HJs=)
                          3: RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl (hash: djPN0x3Pa6CfIgVQoR7rqf9UxmaOLzCAyhAdRDdaGso=)
                          4: gHq4ZQAB43U72DuDXjjiZ0-2-00.roa (hash: UuXFiLQX/A/tFOUVtGrjRAOGOHSsYt/+KkH7+iWkPIk=)
                          5: xiXKqk3tGFwKj2r6-VSmJj7eq_k.roa (hash: 1zP1wd86zOnUvyVaHLe0E+PkkU2X/81i9Nla1ulLn0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ee:5b:a6:33:54:c5:87:84:51:97:6a:ac:a5:20:94:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472694d8a399a3a66f442ec72295c754acbbad41
        Validity
            Not Before: May  3 15:01:16 2026 GMT
            Not After : May  4 15:01:16 2026 GMT
        Subject: CN=215a380798bb0c2997197a0a6d83b18e69b30659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:06:f8:13:8b:be:e1:7e:3c:8b:c0:3e:78:39:
                    bb:1d:a8:9f:82:eb:b6:61:c3:fd:ba:44:6e:e1:13:
                    27:52:c0:dc:ce:e9:23:09:07:a0:44:c9:30:ce:3a:
                    39:23:09:ce:f6:2d:5c:9e:3b:fb:aa:09:7e:18:a6:
                    b6:d1:74:e7:cc:8d:f1:ed:dd:18:ba:10:4d:26:01:
                    0b:d9:12:cd:75:55:83:fc:cf:a0:90:7c:5c:12:1e:
                    82:da:b5:37:e9:38:be:4b:70:ef:7c:c6:7a:87:f2:
                    92:29:06:c2:6e:34:5f:3e:e9:9a:fc:74:c1:34:f4:
                    02:7a:fe:d8:7f:33:6b:8d:eb:0f:3a:83:95:81:fd:
                    72:5b:22:f5:28:3f:f5:7b:34:9a:87:02:3e:ec:20:
                    6d:e9:e0:2b:99:7a:92:49:cb:35:2f:09:a8:46:c9:
                    99:bb:b8:98:bb:1e:ea:85:75:38:d1:43:76:49:36:
                    9a:02:40:0e:92:a1:dc:b0:aa:18:6f:5b:ff:84:c6:
                    8e:75:51:86:37:ac:fa:f1:53:47:6a:a1:e4:1e:50:
                    7e:63:34:dd:4a:df:f8:1b:2a:ce:81:87:92:bb:d1:
                    82:66:e4:49:61:d8:2c:37:6d:f6:62:44:d2:09:c3:
                    46:a2:85:eb:fc:0d:6c:41:03:60:0f:0e:26:49:aa:
                    8b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:5A:38:07:98:BB:0C:29:97:19:7A:0A:6D:83:B1:8E:69:B3:06:59
            X509v3 Authority Key Identifier:
                keyid:47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b6:48:f3:8d:70:2a:79:86:d8:c0:a6:a2:a6:31:a1:83:53:
         0d:a3:5f:4a:ac:70:16:b0:53:4e:ca:57:14:de:38:b6:18:de:
         b2:fc:6e:9f:3f:ad:8b:4e:7f:1b:0b:e5:e8:59:16:dc:d6:91:
         36:7f:a2:e8:f6:0c:0a:89:23:52:a9:34:2b:c7:7d:53:fb:ae:
         74:ab:01:3d:d2:6b:19:b0:5f:73:2f:2a:db:69:60:6c:54:a0:
         ba:98:ee:07:5f:7e:9b:cb:e2:9d:56:6a:a4:49:36:46:34:60:
         9c:da:fa:67:4a:08:e2:c3:ce:df:c4:b4:ab:86:fb:fe:91:93:
         b4:fa:6c:43:10:90:79:1e:8a:7a:5d:fb:6b:f8:c4:b4:53:81:
         77:bd:c5:34:c1:93:ee:01:80:88:a6:1e:59:fb:12:4e:d9:0e:
         86:95:ef:1a:7c:2a:25:e9:1b:c2:08:73:aa:62:aa:31:05:98:
         db:8b:f1:91:ce:90:78:3f:77:d4:44:ac:33:2c:1c:3a:c7:b0:
         f4:9f:c3:22:a6:d1:dd:1f:44:fc:08:83:45:31:cd:64:23:c5:
         bd:ca:cf:24:b6:de:11:a5:f4:d4:5c:f9:75:cb:46:3d:5e:e9:
         0a:31:78:b7:10:33:82:f1:a1:06:94:92:4c:0b:fe:96:1b:34:
         c8:93:f0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 18:40:43 2026 by rpki-client