Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
File:                     y_I74RFfAiqiadnOpDm7i0kjB-I.mft (raw, json)
Hash identifier:          SLZG5r0mwjq5IyzUM2ObFuyrHYl2IapWcOGzNrSYA6c=
Subject key identifier:   C6:2C:19:5A:50:57:2D:34:AD:5F:17:99:FB:E9:C4:E5:07:DC:2E:A1
Authority key identifier: CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2
Certificate issuer:       /CN=cbf23be1115f022aa269d9cea439bb8b492307e2
Certificate serial:       019E02F4D66A7756F4B2686556955BF061AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
Manifest number:          18F8
Signing time:             Thu 07 May 2026 15:01:00 +0000
Manifest this update:     Thu 07 May 2026 15:01:00 +0000
Manifest next update:     Fri 08 May 2026 15:01:00 +0000
Files and hashes:         1: gTn5FRcz1WjHbFIUzmESIJRxMLs.roa (hash: 3+4+41QBJiY0s+CghRUoKRon+yDRu0Zt5Sbg75kXtZc=)
                          2: sxT3f0dvZnHHcSZ34lCIOZ9GuVw.roa (hash: pBbjOXEXTBhzJuJASEYw2dI37yzvRUATFTwvTf15Ndw=)
                          3: vx4wFGxK42R6qe2Ojjm-3TboKKQ.roa (hash: sq7lKfoyNzXqh8ifJ6Y3jNbECu87UDlvl3/h5jz4zpo=)
                          4: y_I74RFfAiqiadnOpDm7i0kjB-I.crl (hash: 186BIENe12XS8a2cgMha4+1mpWumbfMIauil7AldXI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 May 2026 14:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:02:f4:d6:6a:77:56:f4:b2:68:65:56:95:5b:f0:61:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbf23be1115f022aa269d9cea439bb8b492307e2
        Validity
            Not Before: May  7 15:01:00 2026 GMT
            Not After : May  8 15:01:00 2026 GMT
        Subject: CN=c62c195a50572d34ad5f1799fbe9c4e507dc2ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:99:ae:b4:1e:31:90:d1:c8:c9:5b:da:87:bb:
                    25:f1:97:ba:28:07:b0:12:f1:27:ca:20:1a:a0:48:
                    6d:2c:38:96:a6:ca:4f:9a:ed:4f:28:00:20:74:29:
                    f2:cc:fa:11:ca:dc:87:c6:76:4e:51:5e:4f:c9:99:
                    11:2b:87:75:7a:7f:e2:5f:42:fa:ba:52:37:d5:c4:
                    87:84:9f:7a:db:9c:ad:5e:e8:23:e6:e2:95:29:2f:
                    be:d8:6c:2d:36:bc:2f:ba:ac:2b:24:51:70:c0:be:
                    fe:2b:96:bc:14:b1:08:c4:90:0c:95:c3:69:bf:2f:
                    88:f1:55:22:38:db:51:7d:77:08:27:7c:79:ab:e1:
                    1c:c8:b1:cc:a4:32:22:a2:92:35:12:47:c0:cf:7a:
                    87:11:73:b9:19:85:9c:34:aa:a9:74:53:24:a6:b6:
                    12:9c:69:90:d9:2b:0e:5b:75:ca:31:6e:32:4f:b4:
                    3d:e5:0c:1f:dd:23:ec:a7:9b:93:f4:42:9c:c6:1e:
                    f7:0f:68:b0:7e:07:73:eb:25:d1:de:f1:12:13:86:
                    4d:c9:28:55:00:53:57:c4:a9:87:3a:cb:a4:28:80:
                    76:9a:09:81:62:1c:ec:8b:af:d5:83:c5:84:81:92:
                    b2:d4:99:64:fd:1b:dd:43:d5:90:9a:69:4f:7a:ff:
                    cb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2C:19:5A:50:57:2D:34:AD:5F:17:99:FB:E9:C4:E5:07:DC:2E:A1
            X509v3 Authority Key Identifier:
                keyid:CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:00:6f:3a:ff:9c:4b:52:21:68:90:43:6b:43:1e:aa:58:73:
         99:68:b6:b0:6a:b3:02:9c:fd:a8:23:e2:99:e7:80:5c:ec:aa:
         7a:36:b9:0e:3b:c3:48:52:16:45:4c:ad:ef:61:35:03:5a:6c:
         69:ed:24:8d:ce:88:da:26:19:66:1a:0d:4a:57:af:f5:84:78:
         f5:f3:b7:a4:ee:bd:cc:14:3e:f1:30:e3:c0:66:6a:c6:7b:b9:
         30:0a:92:8c:0f:0f:85:c7:ab:b6:62:c8:e7:08:ee:cc:4a:3c:
         68:94:5b:49:98:f2:9a:a3:dc:36:90:a6:6e:8e:5f:fe:70:4b:
         c0:22:63:f0:28:02:e8:91:fd:58:a1:bb:89:9b:de:99:61:be:
         34:d6:70:82:ce:f5:d4:71:b3:8a:d0:4e:30:d1:11:0a:d0:dd:
         37:f7:26:eb:58:04:39:be:00:61:47:b8:70:d3:fc:a8:9a:cf:
         11:3c:51:51:c2:3a:38:21:ec:a9:a2:4e:46:cb:5a:97:25:6b:
         03:84:7b:49:eb:e0:e0:c4:32:b2:2f:48:13:d0:27:77:0b:d9:
         f8:45:9f:c8:c4:ba:68:a5:f1:de:cf:2e:a3:6a:fe:6f:2d:80:
         ef:f2:8b:b1:4a:b7:6f:35:15:02:19:55:91:80:51:6c:ce:aa:
         a0:d0:b7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 20:44:36 2026 by rpki-client