Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
File:                     ysIWQb28-sJMVLakhZSDxeQWQLY.mft (raw, json)
Hash identifier:          XqSHyqzPSIlQCTrHcWSQJOT4/HrGfAYl7Dh/9oz01JY=
Subject key identifier:   EB:DE:A9:C8:28:F7:86:C7:C5:36:D4:61:92:02:E9:DB:9A:66:43:30
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Certificate issuer:       /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial:       019DEE2530CEFE79EDFCBBEA6D4F78EAB125
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
Manifest number:          18F4
Signing time:             Sun 03 May 2026 14:01:47 +0000
Manifest this update:     Sun 03 May 2026 14:01:47 +0000
Manifest next update:     Mon 04 May 2026 14:01:47 +0000
Files and hashes:         1: 3I0ccbWDDm2AJ0Og3v2UYgTm0kU.roa (hash: vjrwzp/zqZBxc6wOSE5N6kztkRal6ScIrhGe+5Xi3bI=)
                          2: MEjN6NiBRUno6jMiVrI76qBgUXE.roa (hash: s2vQYXj0w7LOeK8L7upi2AL1yMhCtXme3TjzeGEM0n8=)
                          3: ZknLlp2vh9WJk0H7iXXLOw9c2pU.roa (hash: S6ynW8hTvcrSOBVEp2ULNqC2ZlGWhPVxKi1FBjbkc4c=)
                          4: ysIWQb28-sJMVLakhZSDxeQWQLY.crl (hash: JX3B7T5SJN0Jz0RHqqLY5VhK8tvvoSgOkpcoJnUU9uQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ee:25:30:ce:fe:79:ed:fc:bb:ea:6d:4f:78:ea:b1:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
        Validity
            Not Before: May  3 14:01:47 2026 GMT
            Not After : May  4 14:01:47 2026 GMT
        Subject: CN=ebdea9c828f786c7c536d4619202e9db9a664330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bc:38:a0:0b:ea:e5:d3:67:7d:13:41:8d:f8:
                    14:b9:f8:b9:6d:8e:55:48:e8:3a:f4:bd:23:0b:77:
                    d5:6b:fe:c8:64:35:5e:da:d4:c6:db:3e:57:68:3e:
                    ee:a4:84:1a:a4:30:75:ef:87:02:0c:d0:8a:94:b3:
                    11:87:c1:53:5f:05:e9:b2:17:8f:3f:14:a9:a9:fe:
                    7e:69:b9:04:54:89:5d:24:29:fa:2c:aa:a8:c8:62:
                    99:c3:81:80:1c:2c:58:f5:35:6f:33:53:24:60:a5:
                    56:32:d7:8d:64:09:e2:92:fa:39:cb:ec:64:13:3f:
                    ca:fd:62:b8:86:50:c7:cd:dc:ad:b9:b2:39:d4:08:
                    b6:03:38:3c:b2:59:3c:f8:30:e0:be:30:a1:37:ad:
                    52:82:16:3d:d2:15:5d:eb:1b:7f:78:14:28:db:80:
                    5e:ce:0d:87:d5:a3:22:1c:75:6f:fb:c1:8b:c8:d2:
                    08:37:9e:b2:8f:4a:18:70:e1:60:c9:b5:88:2c:e2:
                    92:d1:e9:53:87:ab:0f:07:99:5c:26:d0:a1:06:68:
                    81:55:27:16:2d:48:18:84:ef:25:ff:1b:6c:6c:6c:
                    59:c3:63:a2:6f:5c:67:59:a2:7b:c3:42:a4:57:66:
                    af:bb:07:c4:38:10:ef:8e:51:23:1c:31:8e:d2:c5:
                    93:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DE:A9:C8:28:F7:86:C7:C5:36:D4:61:92:02:E9:DB:9A:66:43:30
            X509v3 Authority Key Identifier:
                keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:5a:e2:6c:0a:89:06:e9:ab:8c:ae:6f:32:3e:c8:e9:19:15:
         0c:a4:58:20:6f:46:2c:97:02:2c:56:1e:81:40:1c:d1:7f:77:
         3f:0f:46:1b:b2:11:e6:81:b9:ad:6e:5e:b4:80:99:0f:84:9e:
         1c:4d:a5:e0:a5:8d:06:41:f2:93:1c:27:38:0c:88:a3:21:ed:
         dd:02:f1:2b:4a:61:6d:00:ee:01:31:4a:34:8a:1a:0d:b8:07:
         9f:2f:2f:d5:33:f0:b3:cb:b5:cd:c1:e5:19:8a:ab:d0:8c:df:
         88:66:f7:3c:33:51:68:cf:3d:a1:a5:8d:ec:75:25:b7:d8:58:
         4b:36:11:6f:c5:18:e5:2b:b4:d6:d1:44:c8:a0:a2:9b:f9:b5:
         04:74:6a:eb:15:c3:82:e0:32:8f:14:15:25:d2:f2:3d:4f:8b:
         93:f1:64:01:e2:d5:59:e4:7f:af:47:98:46:59:3f:cf:1f:ce:
         b6:32:81:36:4d:13:47:48:d7:62:44:62:09:6b:41:a9:6a:da:
         b8:f7:60:a7:93:12:7d:4d:a0:79:6a:40:2d:0d:60:4f:f9:4d:
         d7:09:8c:6a:3b:aa:f6:fe:ab:82:82:5d:7a:53:4c:26:96:ae:
         81:83:1d:92:d1:b1:21:7a:d5:19:b7:fb:f1:39:97:ac:c1:f1:
         8b:62:2b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 16:13:08 2026 by rpki-client