Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
File:                     yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft (raw, json)
Hash identifier:          YlCx1XtjgGDbGZ/NHdAphAhVYdWORMW/8tZTflbh6a4=
Subject key identifier:   44:C3:2F:9A:14:EB:D2:60:4B:0C:51:F2:0A:21:E3:36:EA:2A:33:1F
Authority key identifier: CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
Certificate issuer:       /CN=cb36180ab4542d6eee66d9f99030df71236ce264
Certificate serial:       019E2ADDD6FE1B22FF156721CD96FA67686B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
Manifest number:          1754
Signing time:             Fri 15 May 2026 09:00:41 +0000
Manifest this update:     Fri 15 May 2026 09:00:41 +0000
Manifest next update:     Sat 16 May 2026 09:00:41 +0000
Files and hashes:         1: HNYjnMa8XonNqZQ0AY5BlHwMzX8.roa (hash: 93bbzx6/nbiayVdplAT1nOdB7pkJO7+NMwUpbbLpb2Y=)
                          2: yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl (hash: oRY6LnTk89LCfkCoFSzHVhj7wC2QdInZWDz7b6c43xM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:dd:d6:fe:1b:22:ff:15:67:21:cd:96:fa:67:68:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb36180ab4542d6eee66d9f99030df71236ce264
        Validity
            Not Before: May 15 09:00:41 2026 GMT
            Not After : May 16 09:00:41 2026 GMT
        Subject: CN=44c32f9a14ebd2604b0c51f20a21e336ea2a331f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:fb:4d:ee:f2:95:18:16:ac:2b:52:5b:6d:
                    aa:c6:94:ee:76:cb:72:5f:cd:83:5f:13:ee:c0:54:
                    f2:92:0d:55:be:d5:a7:3d:7e:e6:82:70:70:6d:ae:
                    8c:47:b1:02:c5:29:a8:a6:82:96:f5:2b:8f:1b:0c:
                    0a:62:80:d3:09:0e:52:33:92:59:33:ff:d0:99:cf:
                    53:31:54:3e:dc:08:b7:46:e6:b0:99:70:f9:f1:f1:
                    7c:b2:cc:32:67:2e:70:e3:b2:f4:2d:52:ad:b1:a1:
                    44:5d:b7:ae:04:02:00:33:3a:00:8b:c8:68:28:dd:
                    b4:2b:ac:3f:cb:5e:20:1f:bf:c8:cc:67:16:50:48:
                    2e:99:8e:2a:66:6e:35:78:1e:28:2f:b5:d9:59:58:
                    a2:68:e2:89:2a:46:58:83:81:c2:ca:df:43:e5:90:
                    09:44:27:df:aa:2a:f9:53:f4:57:62:cc:4a:a6:d2:
                    0c:c8:cd:05:63:bb:e2:b0:73:49:55:07:54:2a:00:
                    2b:b6:b3:11:ae:55:00:cb:3b:44:6c:2b:22:f6:51:
                    37:eb:82:14:e2:c6:34:e6:87:04:29:11:50:f3:ce:
                    6a:15:59:49:b6:11:3e:16:0a:94:ab:67:1c:fd:f5:
                    20:b1:01:99:81:12:03:22:46:a3:09:d2:1a:49:38:
                    db:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C3:2F:9A:14:EB:D2:60:4B:0C:51:F2:0A:21:E3:36:EA:2A:33:1F
            X509v3 Authority Key Identifier:
                keyid:CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:b6:9b:2f:4b:ab:11:c1:93:1a:f1:6d:7a:6a:27:a4:ec:02:
         02:84:c9:d7:20:db:47:6d:5c:b9:80:8f:6a:7c:56:1d:8c:ee:
         8b:f7:2f:8f:c4:2d:8d:0c:76:77:dd:8e:43:c8:43:76:46:d6:
         99:82:05:59:f9:36:29:b9:23:b9:03:cd:c7:c6:76:93:14:9b:
         80:72:b8:89:28:d7:2e:ed:2d:ca:35:fa:e5:8f:24:31:6a:25:
         1a:bb:b3:f8:b3:07:ee:aa:38:62:c2:50:c9:e0:99:2e:17:07:
         9d:75:de:bb:1f:c5:37:bb:7c:6a:7e:5f:1c:d5:94:44:43:af:
         35:62:5d:22:42:b8:25:70:1a:05:70:bc:a0:79:8f:a9:71:11:
         92:ea:ee:19:a8:c6:b2:0d:d3:da:e8:3d:21:42:fe:7c:90:f0:
         b3:be:f1:51:11:50:c3:d7:cf:3a:ef:95:13:96:47:b2:b6:17:
         b3:e3:63:d3:5a:0e:9d:0b:23:79:5a:2d:4f:0f:bc:e6:2c:43:
         57:c3:37:ad:e1:28:e4:79:8f:2e:bb:5a:12:e3:29:ea:d1:af:
         c4:f2:ea:4c:8f:49:1f:32:1d:57:5c:c2:59:1e:81:93:29:7f:
         9f:79:94:c2:18:16:ec:77:3f:35:8d:ac:ce:fe:22:26:9a:ee:
         3e:a1:bd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:54:05 2026 by rpki-client