Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
File:                     YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft (raw, json)
Hash identifier:          cTifFySg8rqetGNZxkEHtAJ+CIqsa9jPoyABxEESoHM=
Subject key identifier:   D0:8F:28:05:3D:E2:BA:B5:22:37:C7:BD:82:88:E0:EA:D0:ED:16:A5
Authority key identifier: 60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C
Certificate issuer:       /CN=60c44dff71879863ea71442023b7f354dc3dad7c
Certificate serial:       019E3F777D20A2FEBA23B5C2392EC33C2EC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
Manifest number:          097C
Signing time:             Tue 19 May 2026 09:00:55 +0000
Manifest this update:     Tue 19 May 2026 09:00:55 +0000
Manifest next update:     Wed 20 May 2026 09:00:55 +0000
Files and hashes:         1: CJowFgb4ICGp3Wfh7jHnULJU2M0.roa (hash: bL65BGdIxVmyrRBt+KdvOpVuUTY76scln+WxP6WN3rg=)
                          2: T5IQ4IhshTRiFenVlDb9H-uzNG0.roa (hash: 6i4yB4JY7PrncdZg9kkNq7TpPmD1RLEzHYX4D9lyu0U=)
                          3: YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl (hash: SkXsaOmFrd1Tle/8/F8MCfAxTkgYTHS2elNROUE4dG4=)
                          4: yWjq8tMegtSp646tNouua0rKzbg.roa (hash: dzGbAHT2B+kr637o2+fV8atD4a06Lybf+LGMSMU8Kl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 20 May 2026 09:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:3f:77:7d:20:a2:fe:ba:23:b5:c2:39:2e:c3:3c:2e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60c44dff71879863ea71442023b7f354dc3dad7c
        Validity
            Not Before: May 19 09:00:55 2026 GMT
            Not After : May 20 09:00:55 2026 GMT
        Subject: CN=d08f28053de2bab52237c7bd8288e0ead0ed16a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2f:ad:50:fc:16:46:9b:d5:6e:8f:37:ed:54:
                    1a:68:0f:56:ff:dc:09:33:6c:b3:b5:1f:de:8d:88:
                    ab:9b:9b:1e:cc:39:46:ff:ff:c7:c2:6f:95:63:ba:
                    b9:92:46:19:62:59:25:b1:3e:88:7d:ac:cf:c5:05:
                    4d:49:10:d3:0b:1b:8b:39:15:27:bb:87:b7:1c:ed:
                    c7:4b:85:f3:b4:a3:3e:53:00:50:25:76:5d:62:e9:
                    ee:b0:0c:23:ea:fb:ff:65:e7:86:7b:5d:d2:ad:03:
                    16:28:e5:0e:2f:07:09:b4:74:fd:ad:71:63:6b:9e:
                    56:54:f5:c4:92:36:50:fb:d3:8f:a2:d9:e0:ae:db:
                    bc:9a:f4:5c:dc:2a:51:80:2a:12:9a:08:eb:01:04:
                    c1:96:30:3f:40:b2:12:44:94:2c:c9:10:28:06:5e:
                    3b:c3:ef:a1:1a:c5:be:33:0e:7b:b4:77:5a:bb:41:
                    17:3d:19:de:ea:80:11:f6:3b:98:5b:26:54:aa:11:
                    9d:09:69:2f:f1:92:28:a2:0f:19:95:63:bf:ac:a1:
                    96:4e:0c:33:97:90:8a:ca:20:4d:05:13:52:1a:06:
                    a3:8f:49:29:0f:fe:db:13:23:d3:99:24:30:58:a5:
                    39:71:74:10:22:bd:e9:8e:61:ca:e0:c0:6d:eb:31:
                    2d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8F:28:05:3D:E2:BA:B5:22:37:C7:BD:82:88:E0:EA:D0:ED:16:A5
            X509v3 Authority Key Identifier:
                keyid:60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:77:4a:aa:cd:cd:00:05:17:29:b0:28:37:7c:a0:07:f4:14:
         cd:10:54:5b:c7:5f:b9:2e:99:83:5e:54:d0:32:74:ea:eb:e7:
         e1:c9:47:ff:a9:07:51:60:47:7e:54:e9:6a:4c:fe:f2:ce:9a:
         24:5c:88:f2:58:5d:a3:b3:a3:66:6e:af:bb:8f:21:da:56:cc:
         96:d8:8e:ec:4d:50:f3:4c:93:a0:8b:ec:36:ec:4d:c3:63:02:
         61:a5:fd:53:01:fb:d0:43:f1:17:91:77:f9:eb:84:ca:d2:db:
         cc:17:37:ae:a2:bf:74:f7:1d:e0:e7:01:ad:7d:c4:a4:32:85:
         c2:1e:fb:48:98:24:af:f5:01:a3:57:76:6e:89:2c:c1:c6:ef:
         38:ab:a9:6f:e8:ea:51:bc:df:98:4c:2d:f7:51:7f:4f:81:30:
         58:d3:18:77:41:26:d9:2e:17:c9:fe:cb:d6:24:a1:6d:cd:de:
         1b:b7:a5:b6:08:9d:53:7e:a0:7e:df:92:86:77:93:b8:87:7e:
         1d:37:8e:f9:d7:08:a0:c3:08:17:66:7f:ae:c2:c4:b6:de:d2:
         d8:25:d1:30:63:ad:25:7b:3c:dd:87:bd:28:28:02:37:70:a2:
         3f:90:04:61:f5:75:b8:ba:2c:bc:1c:a8:e1:d3:fb:2f:58:13:
         b1:46:91:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 15:45:51 2026 by rpki-client