Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
File:                     dYYhYjrGyrj2veVSbnopMdYm_ow.mft (raw, json)
Hash identifier:          5hMgQiEuf/c0WvTUp5dWHVI9RcI1DUTlFC3gbhUOyHE=
Subject key identifier:   A0:09:CF:F9:68:E5:D1:4E:B4:B3:F8:8F:F1:BE:4D:B5:2A:1D:4E:F9
Authority key identifier: 75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
Certificate issuer:       /CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Certificate serial:       019E31F34814905D58F155D6C7358C54278E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
Manifest number:          18A4
Signing time:             Sat 16 May 2026 18:01:27 +0000
Manifest this update:     Sat 16 May 2026 18:01:27 +0000
Manifest next update:     Sun 17 May 2026 18:01:27 +0000
Files and hashes:         1: EXopuR5ESiK7_JfMXbRvvwemOwM.roa (hash: /csuVRW3pPg52UWTPGC8VigLMZFh8XPz4sQJGV29ruU=)
                          2: dYYhYjrGyrj2veVSbnopMdYm_ow.crl (hash: cJ9d+U/1CsrancJQ+GWbS9ufKP1kJsA35W29IyVUBVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:f3:48:14:90:5d:58:f1:55:d6:c7:35:8c:54:27:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
        Validity
            Not Before: May 16 18:01:27 2026 GMT
            Not After : May 17 18:01:27 2026 GMT
        Subject: CN=a009cff968e5d14eb4b3f88ff1be4db52a1d4ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fc:f2:47:a8:87:97:30:07:9d:ba:05:b3:6d:
                    21:6b:28:07:b2:49:d8:97:7f:7b:63:21:15:5a:d1:
                    44:cf:42:5b:9a:d6:aa:9f:b6:3c:e4:0b:13:0b:35:
                    dc:41:36:2a:db:67:f4:3c:95:a1:39:94:b2:b5:fc:
                    57:cd:e9:30:d5:81:c3:3c:21:b2:2b:b5:74:4d:b6:
                    1a:dc:da:78:09:2c:2b:c1:b1:cd:b4:88:be:4c:ce:
                    94:93:62:e0:be:1f:49:b9:ad:6f:35:7c:65:25:88:
                    87:4d:95:9b:38:97:4e:c1:36:23:ab:aa:6f:30:be:
                    aa:42:a1:30:cc:4d:10:9d:ac:cd:6b:ef:ec:a9:53:
                    c3:14:f6:5d:41:c8:ae:04:b7:09:ca:60:5f:0f:5f:
                    bd:a0:32:1c:f9:e2:b6:05:bb:3c:39:f8:cd:f4:06:
                    5e:d2:d8:cc:c4:a7:4b:01:f8:ab:70:95:79:f0:3c:
                    aa:21:39:5f:ae:58:90:72:d4:1f:41:2f:b8:85:4e:
                    9d:56:21:a6:47:43:26:9a:4f:a9:c4:fb:8f:5d:32:
                    47:40:e4:d6:13:0f:37:7e:c9:6c:34:57:b0:16:44:
                    fc:08:0f:2c:c2:77:12:d6:ac:ee:bc:e6:f5:8a:36:
                    d2:09:d2:ca:23:d6:b4:34:69:19:70:ff:83:af:2f:
                    5c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:09:CF:F9:68:E5:D1:4E:B4:B3:F8:8F:F1:BE:4D:B5:2A:1D:4E:F9
            X509v3 Authority Key Identifier:
                keyid:75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:2b:94:a1:1e:a2:35:4e:78:12:ec:ac:e7:a5:40:c1:9d:c0:
         98:c5:8a:e1:ef:f7:80:85:05:f1:10:b3:1f:1c:c9:ff:32:70:
         0c:ba:53:85:9b:76:98:e9:a1:7f:6f:59:d5:1b:5b:9b:1d:47:
         27:a1:cd:17:37:60:d5:31:15:4c:49:6a:42:10:e8:88:05:fc:
         35:8d:1d:f8:f0:2b:84:df:1b:38:18:00:94:8b:11:98:3d:56:
         8b:21:06:35:1b:75:dd:3b:67:52:7f:10:45:df:57:ee:e0:87:
         13:cd:3a:bd:95:cb:d2:f5:38:b2:9b:36:5b:f1:bf:e1:e4:4a:
         96:dc:b2:05:07:a8:e7:f2:5f:f8:63:5a:5c:79:70:96:a1:f2:
         b4:37:0e:e4:d4:1b:dd:60:af:dc:c0:90:02:19:1e:2a:23:c6:
         83:f5:05:3f:c0:e9:88:84:93:6e:58:09:ba:3d:09:72:11:db:
         fe:2f:0f:95:d9:e9:59:20:b6:ba:e8:70:48:07:fa:c2:c8:d9:
         60:61:c6:44:9a:2c:ac:b8:7f:80:68:34:96:1d:f7:bf:c2:5e:
         86:ee:2a:ae:d0:49:9d:3c:46:de:5e:5c:2b:8d:cc:3e:37:ef:
         e3:17:ce:02:ab:25:f1:fd:f1:7d:96:6c:ea:ef:22:31:c9:c9:
         47:73:5c:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4x80gUkF1Y8VXWxzWMVCeOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ODYyMTYyM2FjNmNhYjhmNmJkZTU1MjZlN2EyOTMxZDYy
NmZlOGMwHhcNMjYwNTE2MTgwMTI3WhcNMjYwNTE3MTgwMTI3WjAzMTEwLwYDVQQD
EyhhMDA5Y2ZmOTY4ZTVkMTRlYjRiM2Y4OGZmMWJlNGRiNTJhMWQ0ZWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvzyR6iHlzAHnboFs20haygHsknY
l397YyEVWtFEz0Jbmtaqn7Y85AsTCzXcQTYq22f0PJWhOZSytfxXzekw1YHDPCGy
K7V0TbYa3Np4CSwrwbHNtIi+TM6Uk2Lgvh9Jua1vNXxlJYiHTZWbOJdOwTYjq6pv
ML6qQqEwzE0QnazNa+/sqVPDFPZdQciuBLcJymBfD1+9oDIc+eK2Bbs8OfjN9AZe
0tjMxKdLAfircJV58DyqITlfrliQctQfQS+4hU6dViGmR0Mmmk+pxPuPXTJHQOTW
Ew83fslsNFewFkT8CA8swncS1qzuvOb1ijbSCdLKI9a0NGkZcP+Dry9ccwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAJz/lo5dFOtLP4j/G+TbUqHU75MB8GA1UdIwQY
MBaAFHWGIWI6xsq49r3lUm56KTHWJv6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFlZaFlqckd5cmoydmVWU2Jub3BNZFltX293LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zNjcwOGItZDY2Yi00MDdmLTk1NDct
ZjAyMTE2MjI2YTg4LzEvZFlZaFlqckd5cmoydmVWU2Jub3BNZFltX293Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8zNjcwOGItZDY2Yi00MDdmLTk1NDctZjAyMTE2MjI2YTg4
LzEvZFlZaFlqckd5cmoydmVWU2Jub3BNZFltX293LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANCuUoR6i
NU54Euys56VAwZ3AmMWK4e/3gIUF8RCzHxzJ/zJwDLpThZt2mOmhf29Z1Rtbmx1H
J6HNFzdg1TEVTElqQhDoiAX8NY0d+PArhN8bOBgAlIsRmD1WiyEGNRt13TtnUn8Q
Rd9X7uCHE806vZXL0vU4sps2W/G/4eRKltyyBQeo5/Jf+GNaXHlwlqHytDcO5NQb
3WCv3MCQAhkeKiPGg/UFP8DpiISTblgJuj0JchHb/i8PldnpWSC2uuhwSAf6wsjZ
YGHGRJosrLh/gGg0lh33v8Jehu4qrtBJnTxG3l5cK43MPjfv4xfOAqsl8f3xfZZs
6u8iMcnJR3Nciw==
-----END CERTIFICATE-----
Generated at Sat May 16 21:14:46 2026 by rpki-client