Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
File:                     Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft (raw, json)
Hash identifier:          IphEpd19g9HobHa4RBH7yLa7hZED90g+rGRctGx1y14=
Subject key identifier:   4E:C8:7B:CC:3F:45:32:B0:AC:46:81:95:C3:99:2F:E8:64:9D:A0:C3
Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Certificate issuer:       /CN=632e3d037bf0507571b2a068cb90308374ce53ed
Certificate serial:       019DD0BEACF32C09AEBD6E5806B5A1D58A37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
Manifest number:          0B0C
Signing time:             Mon 27 Apr 2026 21:00:50 +0000
Manifest this update:     Mon 27 Apr 2026 21:00:50 +0000
Manifest next update:     Tue 28 Apr 2026 21:00:50 +0000
Files and hashes:         1: NL-GZ6A5efHdGaOTzp86clCa2uc.roa (hash: ncgag6cx1L4BB9efkwTYVUbJ2MuFxWCJXY1VLSVWtpU=)
                          2: UADZ4YVn7TSGISo3JiXNjBmBm_s.roa (hash: N3tP1R0iLr7HsiUesHdYEFoZ03zveLr6qDLnn0E6Gpg=)
                          3: Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl (hash: k8PDFJeRmrCd8h/QV9vKQS0UsedbWVQa7coEUspGmtY=)
                          4: mB45dvu5Htfn5d_oFn0R_Y2_KRM.roa (hash: EtvaMfR4fmUPI0A4y3DpkyLZRtcwYo14fBp9kPpZZx8=)
                          5: utuYkDSjgl6DW6FD4qnbkWDpESc.roa (hash: vNrbl/jL6h1nrgmuIRvfEjHF819EKSekUKjVB/Vl0ek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 21:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d0:be:ac:f3:2c:09:ae:bd:6e:58:06:b5:a1:d5:8a:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed
        Validity
            Not Before: Apr 27 21:00:50 2026 GMT
            Not After : Apr 28 21:00:50 2026 GMT
        Subject: CN=4ec87bcc3f4532b0ac468195c3992fe8649da0c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:01:f9:de:89:95:6f:be:6a:7d:db:03:af:52:
                    55:3f:95:c1:47:3e:2b:1e:79:5c:8b:57:bb:39:7e:
                    78:2d:7b:1b:34:3c:5b:cf:c7:b5:5f:53:e0:82:c5:
                    e7:50:33:00:5d:b7:fd:49:73:b8:2e:8e:59:ef:8b:
                    78:cd:ca:c3:56:82:22:0e:7c:fd:b6:65:1c:fa:59:
                    ee:6f:e4:ec:e4:80:c9:bb:b4:15:89:41:d6:93:20:
                    7e:cc:b8:b7:c4:9c:e4:9c:2c:8d:9b:9b:7c:e5:e0:
                    73:92:2b:03:48:89:94:7d:47:a4:d2:c0:15:3e:e7:
                    e2:60:a3:66:03:ef:1b:98:6d:96:1e:bb:7a:f4:a0:
                    21:6c:5c:4d:9b:15:d9:8f:05:20:a9:56:41:d9:16:
                    bc:58:b6:6b:41:e2:e1:fc:5c:ac:c1:f0:58:4d:27:
                    3c:e3:0f:cc:37:9e:c9:9d:ad:fb:bd:c0:af:fc:2f:
                    dd:e8:1d:f5:31:0f:9b:21:15:6a:3b:69:51:4e:81:
                    0b:2b:d3:41:f1:66:fb:82:8e:b4:fb:a0:26:2a:79:
                    41:43:3b:a1:b6:46:be:4c:15:de:14:1a:b0:e1:ff:
                    44:5f:ad:8b:b7:5c:08:53:96:d7:5b:6b:f3:7d:d1:
                    09:a1:f8:e6:89:5a:de:39:92:f9:9c:44:42:bb:c9:
                    92:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C8:7B:CC:3F:45:32:B0:AC:46:81:95:C3:99:2F:E8:64:9D:A0:C3
            X509v3 Authority Key Identifier:
                keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:31:6e:63:12:5b:8d:bf:a8:57:bd:8d:8b:13:ac:5d:1e:d0:
         df:89:dd:0c:c0:45:f6:e4:0b:d6:99:e7:a1:45:f5:6e:59:f5:
         04:ca:ca:37:b9:db:bd:d7:ac:da:05:93:27:f7:0b:e2:51:1b:
         f0:76:90:6d:30:b6:11:60:14:e7:79:ac:89:d5:93:2e:36:f0:
         7d:62:99:0e:71:a4:6b:ba:33:41:e9:31:94:6f:37:e8:64:7b:
         8a:e6:eb:2f:67:5b:b5:f9:ee:8f:7a:b2:5d:e1:04:b1:e8:05:
         2b:cc:6a:34:8f:9a:ba:6f:58:8e:3f:35:c3:e7:d7:65:a3:01:
         ec:e5:96:44:97:d2:a3:bb:3d:d2:bd:99:2e:72:21:7e:0f:a3:
         e0:c7:82:64:b6:db:da:f1:12:c1:dd:54:cf:ef:3c:06:bf:cf:
         98:bf:d0:9c:6f:70:24:42:21:b9:6b:a9:bf:7f:0d:72:4b:c0:
         63:18:4c:45:81:b1:3a:77:73:de:47:19:0b:21:c7:32:87:5c:
         57:d8:af:fd:76:7b:f6:91:a7:a7:27:bb:05:2f:9f:04:3d:41:
         a0:3f:5a:34:c0:03:7c:cb:ff:d7:9a:e9:6b:b8:39:97:f0:ce:
         26:e6:42:63:0b:70:8e:39:dc:c0:4c:47:0e:a2:1e:81:9b:db:
         ad:e1:96:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:51:20 2026 by rpki-client