Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.mft
File:                     _yNu-MNnK1qw0si3J_fkUU6EV0s.mft (raw, json)
Hash identifier:          nptO3EfdvnCC0GqoUicAVS7SP9fH+FBLE7zEpIOYx4o=
Subject key identifier:   AB:BD:EB:28:65:9D:A7:D3:21:BA:CD:C0:49:6F:34:83:D0:30:0A:25
Authority key identifier: FF:23:6E:F8:C3:67:2B:5A:B0:D2:C8:B7:27:F7:E4:51:4E:84:57:4B
Certificate issuer:       /CN=ff236ef8c3672b5ab0d2c8b727f7e4514e84574b
Certificate serial:       019E2A399B7B9B721B1B880161F2AD90F002
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_yNu-MNnK1qw0si3J_fkUU6EV0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.mft
Manifest number:          011D
Signing time:             Fri 15 May 2026 06:01:18 +0000
Manifest this update:     Fri 15 May 2026 06:01:18 +0000
Manifest next update:     Sat 16 May 2026 06:01:18 +0000
Files and hashes:         1: X_T0FWjs8sv99TO96Nigw_PWdoI.roa (hash: IF+H0gvY6TuEuAilrDvZ1qnXKE+yBwSYsjOx1dwn1C8=)
                          2: _yNu-MNnK1qw0si3J_fkUU6EV0s.crl (hash: rmrtrKvR7DhHqKEJYLNrQuIx55/k583R/nNkaONEbxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_yNu-MNnK1qw0si3J_fkUU6EV0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 06:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:39:9b:7b:9b:72:1b:1b:88:01:61:f2:ad:90:f0:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff236ef8c3672b5ab0d2c8b727f7e4514e84574b
        Validity
            Not Before: May 15 06:01:18 2026 GMT
            Not After : May 16 06:01:18 2026 GMT
        Subject: CN=abbdeb28659da7d321bacdc0496f3483d0300a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e8:26:f5:83:be:67:c3:7e:03:c8:fb:d4:84:
                    18:26:85:e7:42:22:f1:e9:3b:0b:1e:a2:d7:e4:cb:
                    b4:2b:ef:73:c4:26:d5:dc:d4:77:b1:60:de:c3:fd:
                    17:ae:5c:61:57:93:c6:72:6b:d5:9b:d6:fb:75:80:
                    93:7c:1b:bc:e3:03:ae:f2:b4:e1:26:92:f3:0f:cd:
                    43:03:05:06:0e:b6:fe:98:bd:79:7b:51:9c:63:6f:
                    70:a8:97:07:e0:d1:18:95:51:d8:f9:9d:e6:f1:fd:
                    8b:07:0c:09:37:be:d1:a7:30:e8:db:9c:f6:cc:6d:
                    d3:37:b3:c1:a2:57:48:fd:38:d1:5f:94:c9:fb:71:
                    cc:3d:68:d2:97:95:1e:ac:7c:c2:e1:8a:b6:f6:9d:
                    63:0e:59:d6:dd:4b:d0:bd:91:e9:b7:7a:d8:e4:0a:
                    c7:ff:b3:41:69:9c:45:76:1f:0b:64:56:49:1b:0a:
                    94:f2:6f:4c:d9:6b:71:9f:86:47:98:6a:da:70:83:
                    0f:6e:13:47:09:cb:5a:6e:5f:28:f5:77:21:60:16:
                    04:b3:94:1e:72:78:da:44:5e:a8:26:a1:56:2f:3b:
                    21:ac:f7:9e:a1:79:46:c6:8b:98:6a:33:68:fb:f0:
                    5d:0c:cb:2f:86:b8:64:ad:72:c3:b9:a5:2e:f4:49:
                    74:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BD:EB:28:65:9D:A7:D3:21:BA:CD:C0:49:6F:34:83:D0:30:0A:25
            X509v3 Authority Key Identifier:
                keyid:FF:23:6E:F8:C3:67:2B:5A:B0:D2:C8:B7:27:F7:E4:51:4E:84:57:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yNu-MNnK1qw0si3J_fkUU6EV0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:b1:c6:e5:d7:eb:b4:09:0a:54:24:0a:22:a4:1e:2d:1a:19:
         a4:3e:70:99:76:7c:cc:e6:d4:e7:a0:78:53:f0:62:f1:7e:35:
         22:ca:c2:d3:a7:b6:d5:7e:e6:6e:26:4e:be:d0:1b:07:02:22:
         2b:30:2e:1b:82:10:d3:78:1f:5a:77:e3:67:03:5e:97:19:3c:
         f7:87:42:f6:2b:63:8b:6e:23:53:c5:de:2a:b4:f6:06:57:0f:
         13:65:0e:85:04:13:ec:59:9e:32:79:40:45:68:a1:ee:a0:00:
         23:77:00:f2:aa:67:8a:a6:aa:65:68:06:6e:78:12:04:11:c9:
         c9:07:9b:79:13:2f:02:d9:4f:94:32:a9:4b:20:9e:68:64:02:
         70:de:83:1b:e8:f8:d9:67:9b:0f:0b:84:ef:d2:54:3b:1c:25:
         ef:ce:84:eb:1b:62:bf:fe:60:9f:6e:ad:f7:4d:23:82:bd:17:
         e6:61:09:10:9e:a1:c2:72:e3:55:b6:bb:86:39:28:42:1b:f6:
         4c:c5:f6:b3:a1:1e:72:dc:2d:43:9a:77:a1:4c:85:42:6f:fd:
         48:17:76:d0:6a:38:38:42:fc:ff:3e:eb:ee:f6:46:7e:54:b9:
         93:2f:ea:d2:01:4d:d7:c9:a6:c9:4c:63:c9:50:72:a0:76:97:
         53:1d:97:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 13:29:43 2026 by rpki-client