Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
File:                     YhGQEidXeAf0toyLjyX76pxyB2I.mft (raw, json)
Hash identifier:          ls4ryUjmIsgl6XfHr0GxAMkD8Zxg2p7oWMhHwwgGenQ=
Subject key identifier:   DC:96:33:99:70:E7:7A:0F:F6:1F:EE:8D:FB:EC:FF:B4:B4:C1:7C:E8
Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
Certificate issuer:       /CN=6211901227577807f4b68c8b8f25fbea9c720762
Certificate serial:       019E314E02AC322ED6E6905CF70FA9FF07DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
Manifest number:          13D4
Signing time:             Sat 16 May 2026 15:00:56 +0000
Manifest this update:     Sat 16 May 2026 15:00:56 +0000
Manifest next update:     Sun 17 May 2026 15:00:56 +0000
Files and hashes:         1: OVXT6gUHNs92I_TpJokrvNCUI_k.roa (hash: GunbA4sCmSgthfWeCRgymGCKQHjNQ++TdcqNZ9NqpfA=)
                          2: YhGQEidXeAf0toyLjyX76pxyB2I.crl (hash: cdx4NX+tRF4omlj/n/tiawHEqIlSrpWopO9R7b5MiIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:02:ac:32:2e:d6:e6:90:5c:f7:0f:a9:ff:07:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762
        Validity
            Not Before: May 16 15:00:56 2026 GMT
            Not After : May 17 15:00:56 2026 GMT
        Subject: CN=dc96339970e77a0ff61fee8dfbecffb4b4c17ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c3:8f:8f:14:a4:cc:58:2c:40:4f:ad:fa:be:
                    a1:ae:4d:83:08:06:a9:19:22:f4:2b:a3:57:ad:4d:
                    8b:4d:eb:7c:e3:42:f3:93:55:5c:13:9a:d5:80:d1:
                    e3:95:6f:14:1b:d0:62:a9:2e:fe:3e:44:16:d2:57:
                    9b:1f:05:44:6b:79:ea:3b:01:58:27:51:4e:1d:28:
                    24:56:64:0b:d9:09:f8:d1:9b:bb:0b:fb:fb:6c:75:
                    b2:80:99:69:74:d0:74:28:a4:10:65:3d:e3:b8:90:
                    2d:9a:2a:25:4f:be:5c:13:55:c5:c5:88:45:1a:21:
                    90:4f:ae:a6:f9:e0:d6:1b:4e:86:58:10:dd:29:72:
                    ed:21:d9:45:7a:65:75:74:db:6b:52:24:41:77:36:
                    36:80:2a:1c:d6:78:5e:84:8b:7d:dd:33:2f:c2:92:
                    da:d3:40:13:a1:45:dc:e2:62:83:3a:d1:bd:11:cb:
                    b1:3a:66:7c:19:dc:f0:0a:27:ab:d3:e9:6b:b1:1f:
                    ee:92:e1:c0:a9:b9:63:d3:c8:8a:9e:88:4c:f1:51:
                    22:bd:ac:a1:6c:88:db:20:c8:9c:f3:2c:2a:f7:2c:
                    0b:cc:43:bf:71:0f:56:8e:71:76:50:e2:f3:78:19:
                    45:67:66:8c:b0:15:ae:df:5a:9a:1e:cf:3c:e5:8b:
                    a4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:96:33:99:70:E7:7A:0F:F6:1F:EE:8D:FB:EC:FF:B4:B4:C1:7C:E8
            X509v3 Authority Key Identifier:
                keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:eb:3f:99:f2:99:95:8b:29:0d:9f:73:7c:06:ab:1d:1d:18:
         f9:23:4d:23:71:46:4b:d8:84:c3:98:7e:8c:8e:ea:67:76:f2:
         66:65:ed:79:af:1f:bb:cf:89:2e:c2:67:80:dc:92:80:fa:9f:
         73:50:04:b2:f2:4e:02:6c:78:e8:da:99:84:ce:f8:fe:4a:3d:
         de:c4:34:32:a9:88:95:ed:a7:7b:aa:f5:ed:a8:20:d5:63:67:
         c2:26:8b:ae:b6:63:fe:c8:47:ff:b0:4c:51:3a:ec:90:fd:3a:
         13:b0:f2:0d:75:48:ba:e6:da:1c:90:4a:d9:e1:70:05:36:99:
         3f:3d:02:9f:48:39:6e:c3:69:fb:bd:db:91:3a:d6:68:72:e4:
         08:cc:43:ba:6e:3d:72:29:8d:6a:5a:a8:6e:ea:b7:7f:7a:c3:
         62:95:2f:c2:43:d7:ec:b5:93:9c:33:1c:9e:a6:97:33:ee:99:
         ca:5f:87:c5:4f:1b:e9:1f:e2:3d:c5:ed:04:d1:b7:34:e0:54:
         2f:3b:24:69:2f:2a:5f:53:94:aa:82:aa:ce:fe:1d:3e:3f:66:
         50:68:76:9b:56:f7:ff:a4:47:58:8a:ac:8d:a4:91:85:25:23:
         c2:9a:b3:80:d9:ad:d8:04:18:ce:4f:d5:43:29:91:db:9e:60:
         24:45:00:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:30:36 2026 by rpki-client