Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
File:                     yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft (raw, json)
Hash identifier:          axyQd0W8N3vCwTi5pgVYIEhUHTINky4hXdFt49G0KWQ=
Subject key identifier:   58:FA:99:1E:84:A3:F1:B8:C4:8A:A7:CE:25:E4:21:21:56:FD:A9:42
Authority key identifier: CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
Certificate issuer:       /CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Certificate serial:       019DA29C0DB07229D52F8AEC0781B51FA487
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
Manifest number:          18CB
Signing time:             Sat 18 Apr 2026 22:00:29 +0000
Manifest this update:     Sat 18 Apr 2026 22:00:29 +0000
Manifest next update:     Sun 19 Apr 2026 22:00:29 +0000
Files and hashes:         1: FuIBir0i-y7SEGRI15m4Ui_zA_0.roa (hash: VPkd3ytwbWG1Sl01GeIeuQbGU6zTZUHeBBof8XyrtUU=)
                          2: hEKeHB_HwWdm6YwqDL4rLU_ikEo.roa (hash: +KO33p55Ic+lVnlR+TIJivqrXb9HN4n63k+7GR880Ng=)
                          3: jzWys3LhqUMk6bdrR3m0wvK8IUQ.roa (hash: eUY96707RIGkVAKREkjXDqXCVYEyY1vwd6gYVeK0EmU=)
                          4: nf4A4HCstvpa-65TJj04mTKWQoM.roa (hash: sgwGBrZAZly4O4y3WPWRW8wBHIIzPULSvh12WgBbRv4=)
                          5: yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl (hash: WG+OQ0dcSDsWWo28cDvnmoG2kqbkc54b3gSyvuJ1Huo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 17:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a2:9c:0d:b0:72:29:d5:2f:8a:ec:07:81:b5:1f:a4:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
        Validity
            Not Before: Apr 18 22:00:29 2026 GMT
            Not After : Apr 19 22:00:29 2026 GMT
        Subject: CN=58fa991e84a3f1b8c48aa7ce25e4212156fda942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9c:6c:e4:43:ae:8e:36:df:06:1a:01:e5:af:
                    62:d2:3a:00:1b:53:14:28:ce:fe:8a:37:a0:16:89:
                    0e:38:57:fc:da:b7:52:12:21:45:ab:8b:43:e8:76:
                    9e:ee:5d:00:4a:c2:4a:ca:58:f3:1f:3c:e8:23:bb:
                    a8:85:4e:87:b3:1c:e9:95:38:61:fe:fe:15:8f:f7:
                    0c:0a:ed:2c:36:ed:28:2d:fe:3a:17:b1:df:51:33:
                    5a:9f:f6:97:7f:fb:0d:52:ed:77:96:da:09:2b:01:
                    e8:ae:ff:16:75:2f:7d:35:ea:f8:79:2a:a0:3b:9a:
                    46:ab:17:3d:7b:59:93:b8:f2:49:64:dd:f8:c2:20:
                    26:69:3c:bb:f1:17:a7:67:69:41:cc:4b:25:b9:65:
                    54:95:a2:7e:1a:d5:d4:37:5d:9a:8c:33:89:fa:2f:
                    de:61:d5:b1:bd:88:69:dd:d4:7d:5b:03:9f:11:79:
                    93:fb:17:61:6d:32:25:37:0a:ee:51:7a:52:a0:31:
                    92:1c:d8:2e:b0:27:1b:cc:95:1d:cc:85:99:05:8b:
                    29:fb:7b:be:43:d2:ec:3a:7f:a9:0d:19:ce:6c:86:
                    f1:ef:f3:35:0b:84:88:93:72:d1:ee:60:40:aa:33:
                    24:f0:8e:c8:e8:9c:0d:03:82:c3:a0:fa:77:c4:c8:
                    54:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FA:99:1E:84:A3:F1:B8:C4:8A:A7:CE:25:E4:21:21:56:FD:A9:42
            X509v3 Authority Key Identifier:
                keyid:CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:7c:67:ba:f8:76:69:b6:a5:63:1a:fb:fb:15:53:38:08:4d:
         ca:e4:5b:8c:78:25:35:9c:97:1d:4f:68:c5:f5:93:6e:8e:34:
         9b:29:00:ed:a4:16:62:9a:39:42:ed:40:bd:c3:e1:8f:a8:96:
         c6:90:5e:5e:07:43:72:bf:d4:76:c0:a6:d4:65:95:80:b2:9a:
         b9:00:87:c5:ee:06:3b:80:6f:f2:e2:72:8d:21:17:b5:ca:0e:
         9f:ca:91:e2:29:1e:e2:0f:09:52:23:be:54:98:bf:37:fc:ca:
         cf:b0:e8:b0:da:b3:ba:9a:69:d6:10:1c:d8:0e:ae:b1:50:95:
         00:9d:58:fe:46:ac:09:fb:9e:61:85:3a:c0:d7:fe:0f:51:8b:
         5e:01:61:2d:05:2e:c8:a9:72:f6:a8:8c:57:db:03:9b:b7:35:
         67:a4:86:da:da:38:07:57:6b:37:34:5f:e7:df:eb:71:83:fb:
         08:f2:80:b6:a2:e1:f1:86:46:f6:2c:05:26:aa:f3:7a:2f:49:
         3a:55:e1:0f:46:95:1e:25:79:d2:07:a2:82:0c:d1:bf:c9:d1:
         71:57:78:a1:11:01:d4:5c:4b:95:b0:7c:ee:8c:b6:e4:63:37:
         ab:b0:76:ae:6b:07:fb:80:46:95:ef:a8:ea:c8:5e:0c:6d:82:
         d6:9b:23:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 00:55:11 2026 by rpki-client