Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
File:                     YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft (raw, json)
Hash identifier:          117mpSGHf7xVRwU//hS/Rvw7YkKNmXtC1mMwXS/cniQ=
Subject key identifier:   CA:F9:23:67:7B:52:EE:BA:F4:46:83:4B:E7:37:46:82:44:F6:44:47
Authority key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
Certificate issuer:       /CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Certificate serial:       019E2A7079EBF520B41DB9AB39357C37D8DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
Manifest number:          0D4D
Signing time:             Fri 15 May 2026 07:01:14 +0000
Manifest this update:     Fri 15 May 2026 07:01:14 +0000
Manifest next update:     Sat 16 May 2026 07:01:14 +0000
Files and hashes:         1: 8y6CSuTPq3UxhTyIPDkLzey39TU.roa (hash: d0MlsOE7YxSPTJhFI0bSHyZQVZmMtG9CLdrDZmVT9Fg=)
                          2: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl (hash: dRxq+GHGquAu2o4gvk4XmVS2t+EwSoxca1ugI5+wxfE=)
                          3: gEzEJ6XiEvkU7WE0W5L45VqOyXU.roa (hash: M/qvtMRQ3XJJlTOVAUv0L9u5CgWgEkXMKqMCgmgXNVM=)
                          4: uiEPOruYyynMnv0DkemAao-QO_M.roa (hash: zwZ/t6zJRBJasigAc2EM1YRTTVM6B1E25xzsECcPnU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 07:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:70:79:eb:f5:20:b4:1d:b9:ab:39:35:7c:37:d8:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
        Validity
            Not Before: May 15 07:01:14 2026 GMT
            Not After : May 16 07:01:14 2026 GMT
        Subject: CN=caf923677b52eebaf446834be737468244f64447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:46:8d:8e:1d:ff:51:f8:85:76:ad:26:d7:f1:
                    15:ef:81:94:59:b1:be:14:45:34:e3:14:40:cd:5b:
                    eb:71:e4:a0:cc:cc:07:60:50:9e:73:f7:38:b6:46:
                    56:c8:64:87:b2:b5:84:a2:1e:47:85:ab:bb:36:6f:
                    8f:05:5e:7d:3f:09:5e:a3:4a:fc:0d:24:4d:8c:03:
                    7b:b7:ed:a2:2b:dc:69:e0:29:c3:15:94:19:d2:f2:
                    ff:a7:3f:8f:7b:2f:91:c2:8d:3e:10:b4:3a:47:4c:
                    1f:76:0b:29:1c:32:39:9c:d5:4c:1e:14:a1:d3:90:
                    d1:ea:b6:eb:77:75:3c:2b:83:23:22:8b:c1:21:e7:
                    8e:3c:33:81:71:f1:b7:3e:e3:9d:50:f2:09:da:a2:
                    41:51:5a:7b:99:89:80:49:46:96:1d:bc:d4:a0:cd:
                    66:50:45:70:cd:41:e2:52:15:a1:34:18:fb:2f:f0:
                    b9:15:3c:da:02:ec:18:ab:97:fd:b6:e8:a6:3d:91:
                    9c:4f:72:59:91:6c:44:3b:9d:93:db:9d:66:ed:e1:
                    dc:0a:df:0d:ac:fd:eb:e9:94:8d:19:19:8f:0e:69:
                    08:8c:11:87:fb:c9:5e:c0:78:b6:cf:6c:5b:74:2d:
                    15:2c:a7:6f:5c:96:99:a3:21:61:26:bd:74:90:9e:
                    c9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F9:23:67:7B:52:EE:BA:F4:46:83:4B:E7:37:46:82:44:F6:44:47
            X509v3 Authority Key Identifier:
                keyid:60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:34:d0:26:49:9f:14:74:03:8a:46:6e:dc:92:0e:27:32:1d:
         90:91:b2:f5:7b:1d:cf:77:c7:12:4d:5d:50:83:86:9f:36:1d:
         48:7a:4f:55:0c:b3:81:49:44:c3:9c:9e:58:b6:46:a9:14:78:
         6c:0e:69:0b:97:9e:6f:d3:92:09:6b:b4:76:ee:e0:d0:49:e1:
         eb:19:c2:09:cd:9c:6e:74:01:43:bf:b9:94:74:97:7e:2f:4a:
         d3:eb:54:b6:ff:66:25:6d:81:b5:7e:ca:3e:8d:b4:a1:ed:e2:
         5b:b5:f2:1f:54:f4:96:94:07:32:44:b9:e1:11:33:1b:bd:dd:
         a6:5d:61:68:fa:1c:13:49:3d:05:95:4f:eb:71:96:e9:23:c1:
         3c:8b:1f:0e:62:6a:4e:d5:4d:04:d0:4f:cb:26:18:08:3b:ac:
         0d:ef:76:36:64:87:af:7c:98:ca:82:cc:84:3c:dc:ac:84:f7:
         75:e4:e1:ad:ce:fd:5a:4e:bd:f2:d1:ab:7b:aa:6b:45:64:8e:
         fb:28:51:f6:32:ee:33:cc:87:72:d3:79:51:e2:7c:2f:a1:13:
         68:b9:4d:a0:08:42:53:41:a8:6c:04:ff:e8:e3:2b:74:3d:a1:
         a9:ad:2e:64:5f:8d:e6:bb:54:98:43:40:bb:8c:61:c0:df:9d:
         f9:fd:f9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:38:04 2026 by rpki-client