Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/yUq4SzgPMuOxVvyjcKKE_LB2Grc.mft
File:                     yUq4SzgPMuOxVvyjcKKE_LB2Grc.mft (raw, json)
Hash identifier:          dNhL+MgoH7NNwd6byEF60qrzkMrsXnLP5Ezhxnd19+E=
Subject key identifier:   4A:B0:1D:3E:43:E3:95:3D:C6:3A:26:CB:2D:32:F0:73:1F:B5:D0:97
Authority key identifier: C9:4A:B8:4B:38:0F:32:E3:B1:56:FC:A3:70:A2:84:FC:B0:76:1A:B7
Certificate issuer:       /CN=c94ab84b380f32e3b156fca370a284fcb0761ab7
Certificate serial:       019E2BF0E4EA7596398905AB384DAC1C7A06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yUq4SzgPMuOxVvyjcKKE_LB2Grc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/yUq4SzgPMuOxVvyjcKKE_LB2Grc.mft
Manifest number:          51
Signing time:             Fri 15 May 2026 14:01:07 +0000
Manifest this update:     Fri 15 May 2026 14:01:07 +0000
Manifest next update:     Sat 16 May 2026 14:01:07 +0000
Files and hashes:         1: 9vZ-bh78nQSisMvdujS-2j3jEKQ.roa (hash: 9I7QrI133VXhhj9mm/9D7pspc5I/xtLd60jZL9gznBc=)
                          2: yUq4SzgPMuOxVvyjcKKE_LB2Grc.crl (hash: vKiRS10aXUF07GXdqvlcjXuFY6CsapV59CRBmU4kmN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/yUq4SzgPMuOxVvyjcKKE_LB2Grc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/yUq4SzgPMuOxVvyjcKKE_LB2Grc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yUq4SzgPMuOxVvyjcKKE_LB2Grc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:f0:e4:ea:75:96:39:89:05:ab:38:4d:ac:1c:7a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c94ab84b380f32e3b156fca370a284fcb0761ab7
        Validity
            Not Before: May 15 14:01:07 2026 GMT
            Not After : May 16 14:01:07 2026 GMT
        Subject: CN=4ab01d3e43e3953dc63a26cb2d32f0731fb5d097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2c:59:35:93:14:c7:5a:1e:6b:1a:35:cb:94:
                    94:8c:98:44:b4:00:ec:73:f6:4b:89:9d:30:53:b4:
                    85:1e:d9:40:47:18:da:c4:2f:f1:99:6d:b7:24:83:
                    c8:a5:9a:f5:40:82:ac:38:3a:4d:4e:14:c4:a4:b6:
                    f4:a4:e8:09:b1:c3:de:0b:02:d7:53:37:aa:49:15:
                    fd:63:81:cc:3b:c5:10:68:c8:71:a8:72:cd:51:df:
                    03:e8:f5:88:8d:90:20:83:f9:7b:b0:9f:8a:03:3f:
                    80:16:11:b0:7d:36:e4:bd:11:a6:c5:66:89:34:c6:
                    bf:95:64:d0:fe:b3:48:fe:04:12:7b:c2:d6:c8:fd:
                    37:d0:b1:0a:67:64:d8:63:86:57:d0:5e:c2:45:41:
                    53:41:d4:82:43:dd:2d:07:ff:3e:1a:3d:dc:e2:80:
                    4f:b3:df:45:77:62:4c:bb:2e:c6:a7:c9:fc:ce:13:
                    f4:6d:3d:97:85:1b:df:30:2f:32:0e:fc:a6:6c:a9:
                    a7:46:b1:e3:37:f5:04:71:da:20:de:a2:77:b1:09:
                    02:4d:5a:b2:ba:e6:b1:df:5d:1e:6d:4e:e7:3b:00:
                    fa:c8:44:de:80:0e:8c:41:51:40:3d:9f:d8:4f:49:
                    03:d4:3c:6d:bb:ba:b4:63:e9:69:dc:1c:c5:cd:48:
                    ad:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B0:1D:3E:43:E3:95:3D:C6:3A:26:CB:2D:32:F0:73:1F:B5:D0:97
            X509v3 Authority Key Identifier:
                keyid:C9:4A:B8:4B:38:0F:32:E3:B1:56:FC:A3:70:A2:84:FC:B0:76:1A:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUq4SzgPMuOxVvyjcKKE_LB2Grc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/yUq4SzgPMuOxVvyjcKKE_LB2Grc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/yUq4SzgPMuOxVvyjcKKE_LB2Grc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:7a:49:5e:9f:b4:88:27:60:17:b0:d8:d4:cb:c9:c9:8d:f6:
         b3:18:70:8c:33:e4:82:f5:19:d4:96:7f:04:18:1e:d9:0e:8c:
         7e:22:25:9a:18:6a:c6:4c:42:5b:b8:e6:4d:1d:47:5b:83:b8:
         93:76:dd:4e:4a:8e:98:6d:5e:d2:13:44:39:68:83:78:7f:12:
         5e:25:90:99:a3:ba:4c:16:c5:91:60:58:3c:b7:bd:cd:eb:bb:
         37:2b:91:39:a8:8f:c0:7e:7a:3e:86:d0:52:59:e4:d9:2c:04:
         23:be:7c:dd:ae:67:65:c2:ee:8a:26:d6:31:02:0b:b0:f8:2c:
         98:59:a3:85:3d:06:9f:86:ee:07:a9:77:b8:96:8b:3e:6d:8b:
         be:d2:04:48:4a:d6:42:c1:51:a2:44:f3:d9:99:fd:08:16:fc:
         95:9f:65:c0:6a:6e:e6:2f:cb:64:f3:7c:58:ca:24:89:42:98:
         b6:e6:45:e1:d5:1a:2e:f3:93:13:74:9e:22:62:9c:54:8c:ee:
         91:f9:04:3d:99:76:e0:ef:97:66:2a:b4:df:59:66:2c:93:d9:
         55:e9:56:d7:75:82:ea:c9:87:cd:bf:f9:e4:ce:8f:95:fd:e0:
         41:fc:e7:9a:7c:49:68:45:4a:95:4e:e5:92:26:f4:fb:d2:b0:
         cc:50:11:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 19:00:26 2026 by rpki-client