Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft
File:                     jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft (raw, json)
Hash identifier:          HCaXrlDiapdySgGSahsZIRcIlLzL+dGO/BNVKMTJ1cA=
Subject key identifier:   3A:44:10:7A:B9:1D:A4:30:F5:53:AF:FA:32:53:E4:24:6D:28:DA:51
Authority key identifier: 8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55
Certificate issuer:       /CN=8f2ae45c509041a796a968953581f51d45bfce55
Certificate serial:       019DB46B67C0093DB9677716F72234AC547F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft
Manifest number:          18D0
Signing time:             Wed 22 Apr 2026 09:00:30 +0000
Manifest this update:     Wed 22 Apr 2026 09:00:30 +0000
Manifest next update:     Thu 23 Apr 2026 09:00:30 +0000
Files and hashes:         1: 1_nGVkzyveL8HLZ_ny0-9H38b-Q.roa (hash: m7KPmdw0ypm5cCsSjSVvSiDVgOTaFEIiCIFtIRscgBM=)
                          2: SknXE_BU2Q0ADbXiuxAkE9e0OLQ.roa (hash: /V6CwDt+vVqQ1NL+JaF4tODqLg44Ncl4VJNfvyDrnac=)
                          3: UeXYudS3zz6fGW0cpai4irNYnHA.roa (hash: wK4XLLpEyJu7nfTn9oE4RSt+zZmL5a3WpTKNSuWO690=)
                          4: jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl (hash: 4pFnFFU52oRdi4iDjCs3MvtDtw15/uvboWrMIyLNMWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b4:6b:67:c0:09:3d:b9:67:77:16:f7:22:34:ac:54:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f2ae45c509041a796a968953581f51d45bfce55
        Validity
            Not Before: Apr 22 09:00:30 2026 GMT
            Not After : Apr 23 09:00:30 2026 GMT
        Subject: CN=3a44107ab91da430f553affa3253e4246d28da51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d2:19:2e:ee:f1:eb:d1:76:bd:dc:1f:0b:91:
                    74:f9:e3:2f:e4:34:f7:d9:49:b8:4b:be:de:8f:6a:
                    e4:61:a7:3c:17:a7:73:74:01:37:bf:47:54:8e:ac:
                    e1:e2:57:dd:bf:72:9a:c6:d1:d3:7a:c5:e1:4a:f4:
                    28:8f:10:a0:90:cd:c3:3c:83:b3:b3:8e:9f:1c:64:
                    6d:ab:88:1f:8f:15:46:14:25:0d:be:cb:8f:9e:b3:
                    2d:2a:94:0d:91:85:f7:93:90:02:74:8e:95:c1:92:
                    dc:8e:92:df:88:00:a3:2e:1e:71:e8:72:0b:aa:3b:
                    b7:bd:d0:d0:1f:6c:6a:0c:4e:23:31:28:86:21:26:
                    66:72:c8:4c:2d:99:4c:4e:c0:07:d4:2c:31:04:ca:
                    17:64:c2:49:d8:c5:c4:f3:a6:24:0f:50:e0:fe:db:
                    ca:0e:64:b0:71:2d:9b:3a:8a:22:18:77:b0:e6:a6:
                    26:a1:7d:62:0f:1d:f8:81:43:d5:fb:f5:8c:1b:e1:
                    85:58:7f:62:50:8b:7f:4d:50:59:a3:73:96:1f:b2:
                    00:c2:86:80:ce:43:2c:67:19:7d:8c:28:11:30:4c:
                    9c:cf:6a:97:6e:e6:a4:ff:84:29:d0:ab:5e:50:7e:
                    9e:6e:1d:7d:df:0d:87:71:d8:4e:50:a7:32:f9:47:
                    01:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:44:10:7A:B9:1D:A4:30:F5:53:AF:FA:32:53:E4:24:6D:28:DA:51
            X509v3 Authority Key Identifier:
                keyid:8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b1:91:4a:12:04:97:0d:ad:3f:9b:ea:f8:20:06:c6:20:6c:
         fd:33:94:71:3e:bd:8d:11:40:f0:f5:86:76:f6:fc:0e:bf:16:
         8a:1e:ef:ab:16:89:89:ae:70:34:a1:82:32:e4:81:db:12:7e:
         86:64:7d:ee:e0:08:27:eb:88:fe:20:86:c9:eb:0e:7a:69:c5:
         87:a9:27:a5:e6:d2:48:26:ac:9c:d2:e6:c3:3a:d0:9f:95:a6:
         dd:93:31:58:ce:74:9c:88:a5:72:9f:2f:ef:6c:18:2c:e7:23:
         5e:ad:76:cf:d1:6d:a9:63:14:82:71:e5:d5:82:f6:3c:46:94:
         3d:1a:bd:ba:2f:1d:db:00:4e:12:5d:15:d9:0b:4d:c3:7e:d2:
         ca:90:21:a9:44:8f:33:28:61:78:2d:a8:81:a0:ba:58:ee:8a:
         58:3a:e7:94:c2:bc:f3:7a:6f:d7:4d:a1:e5:8c:41:72:53:14:
         46:61:dd:d5:0a:49:ff:02:46:5f:94:8e:33:8a:c0:a8:69:4c:
         fd:f0:b3:7c:33:6a:91:f1:17:4b:0b:93:6e:d4:29:10:41:6b:
         c4:6a:27:44:fb:f8:24:a7:4d:a6:e5:e4:0f:94:8c:e8:41:1f:
         9a:eb:11:71:e8:d4:9d:af:5e:3b:66:12:f9:f2:8d:d7:25:29:
         47:52:e2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 14:48:52 2026 by rpki-client