Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
File:                     YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft (raw, json)
Hash identifier:          918XzxoLFHURJUp8LYGScNv5EdeZ8PcKA14twheMRrE=
Subject key identifier:   5E:F2:5F:D3:B8:3A:FA:94:41:68:F2:AE:F9:41:57:ED:CE:51:28:AB
Authority key identifier: 60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
Certificate issuer:       /CN=6050099e335409db03ac1133d164f02a0d5dc66f
Certificate serial:       019E30E0E7BCC96BD8DC0C484D6D4AC6EEE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
Manifest number:          0DB9
Signing time:             Sat 16 May 2026 13:01:46 +0000
Manifest this update:     Sat 16 May 2026 13:01:46 +0000
Manifest next update:     Sun 17 May 2026 13:01:46 +0000
Files and hashes:         1: YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl (hash: QCgkWXK4LDMh6/q6I3z0sHuOWdPCuZpjVjl7VL+8jcY=)
                          2: e2fLwwNnC7_gQ85Q33UfXuK3PBc.roa (hash: GaXv8AkKDgccbaFAmhisldDeR5nblYKbBIpd1n6r6Ec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:e7:bc:c9:6b:d8:dc:0c:48:4d:6d:4a:c6:ee:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6050099e335409db03ac1133d164f02a0d5dc66f
        Validity
            Not Before: May 16 13:01:46 2026 GMT
            Not After : May 17 13:01:46 2026 GMT
        Subject: CN=5ef25fd3b83afa944168f2aef94157edce5128ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2a:9a:ac:26:d9:26:dc:c5:de:7c:d2:50:6d:
                    26:9d:3c:8b:de:5f:09:e6:d0:df:a6:d9:6e:5b:5e:
                    71:55:d5:4d:0d:fc:72:0b:31:98:64:e9:5a:ef:61:
                    15:7e:b2:64:c4:88:1e:c7:ab:a9:0c:77:95:42:e8:
                    a6:d7:7b:46:2b:88:cc:f8:ab:e4:ec:1c:1b:73:f1:
                    51:47:0f:8e:bf:73:62:09:ac:4e:65:bb:7f:9c:7d:
                    05:c0:b2:01:85:fd:19:6a:41:f0:cc:4a:54:b7:40:
                    4e:3b:a8:b9:c7:3b:d7:30:57:49:21:34:a2:5e:1a:
                    41:7d:a1:7a:e3:29:11:f2:68:8a:ae:92:ee:bb:f2:
                    e2:9b:35:d8:ea:61:f0:92:65:b8:ed:1f:74:cf:e3:
                    b8:0e:a5:03:5d:0a:9e:db:4f:a6:35:5a:b4:12:5d:
                    e6:60:7f:0b:08:35:f2:9a:12:d2:52:3e:93:4d:cf:
                    06:b0:25:d5:9a:db:fa:71:db:9f:90:94:f2:18:b9:
                    40:f2:cf:fe:7c:bc:cb:80:f7:14:e3:99:28:5a:1c:
                    8e:35:06:8d:2e:e9:27:19:b9:1f:82:7f:b0:03:c8:
                    d1:b0:54:55:15:3e:e3:3e:b8:19:cb:a8:bb:af:99:
                    bd:08:32:e2:bb:09:fb:43:35:fd:49:54:cc:fb:be:
                    97:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F2:5F:D3:B8:3A:FA:94:41:68:F2:AE:F9:41:57:ED:CE:51:28:AB
            X509v3 Authority Key Identifier:
                keyid:60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:f0:01:e7:64:01:96:03:4f:c1:23:6c:97:b1:62:b2:75:19:
         71:4c:e8:32:57:5c:22:72:0a:36:98:d8:b9:c4:98:13:18:77:
         cd:0f:f1:d1:07:5f:4f:54:d6:20:49:30:cd:a0:a0:7e:ea:3f:
         76:f3:89:a3:69:41:7a:b5:80:ab:aa:2d:50:2b:56:f6:c3:18:
         3b:18:42:f2:b2:2c:fd:b4:42:85:0f:6f:a9:bc:89:f7:a9:72:
         27:48:ef:76:32:14:3c:43:3e:13:e6:69:5d:1a:81:b0:3c:2d:
         5f:af:da:97:53:c6:0c:d2:95:b4:58:6c:21:24:8f:6e:ee:c0:
         2f:04:ff:d9:59:a7:8c:84:5b:b1:07:ed:ec:28:17:3b:86:a8:
         cf:81:ef:3a:34:37:38:8b:a5:60:9b:1c:11:bb:fa:89:62:f6:
         3d:95:9e:97:7c:cf:df:85:cc:ff:ca:c2:3e:1e:3c:a7:71:e5:
         1e:ee:7e:2d:fe:79:61:c2:c8:8e:24:0c:46:cb:ba:b9:0f:1b:
         3a:81:30:4f:eb:97:7f:53:ee:ee:9c:ed:00:be:56:11:4d:aa:
         22:78:f8:9e:91:42:84:a9:81:01:0e:b7:c2:70:29:af:3c:fc:
         49:a6:ad:92:51:79:5d:63:b2:ee:19:0d:0f:ed:84:ea:ac:98:
         93:1e:3e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:11 2026 by rpki-client