Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
File:                     ypyYDqoWFBtcSBXGOJyiWz8u13w.mft (raw, json)
Hash identifier:          tKZvRJOZyEBPJj1nEhdC9V4OpWZSZit1g3Ly63oj1rE=
Subject key identifier:   51:31:4E:A0:45:3A:96:83:E1:16:D3:14:3D:22:AD:F4:49:C5:8E:50
Authority key identifier: CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
Certificate issuer:       /CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Certificate serial:       019E292714F3D5587DBC2FBBF9A430C94B1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
Manifest number:          190E
Signing time:             Fri 15 May 2026 01:01:27 +0000
Manifest this update:     Fri 15 May 2026 01:01:27 +0000
Manifest next update:     Sat 16 May 2026 01:01:27 +0000
Files and hashes:         1: AbBA99jT8eQOwVRDlfvpJvgpbPo.roa (hash: STn2llVbUbpZKFu8EoltWnBFEcnPCMGc/9TugXrP4cw=)
                          2: ypyYDqoWFBtcSBXGOJyiWz8u13w.crl (hash: vM3xe++UzP3xcNJ1ODbe/X+RZt4kfcsvWuG5foaao/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 01:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:27:14:f3:d5:58:7d:bc:2f:bb:f9:a4:30:c9:4b:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
        Validity
            Not Before: May 15 01:01:27 2026 GMT
            Not After : May 16 01:01:27 2026 GMT
        Subject: CN=51314ea0453a9683e116d3143d22adf449c58e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3d:3e:0d:7e:90:a5:2d:c1:73:6b:24:30:7e:
                    f8:ce:21:2b:04:a7:ba:f0:63:4b:a7:78:f1:4b:7c:
                    c0:06:22:c9:7a:e6:ae:b5:7b:93:73:43:8f:17:d4:
                    4f:09:70:c7:99:0c:11:a6:47:ec:85:4e:45:14:bd:
                    a6:bb:e2:dc:69:f4:5d:12:1b:38:85:de:a2:4e:bd:
                    6e:07:f8:9d:40:3b:3a:76:34:8b:da:7c:d2:1c:f2:
                    2a:1b:37:80:58:0a:12:65:58:98:79:76:93:60:d5:
                    bc:42:2b:77:03:02:1b:ac:b4:ab:8c:e7:01:d4:67:
                    db:4e:07:8b:3e:e4:87:47:9f:c4:3b:52:78:90:6a:
                    ac:1f:7e:ab:fc:f2:7e:a7:78:2b:4c:eb:6c:92:d6:
                    aa:20:ae:5d:3f:c4:0e:a5:21:4a:db:87:86:48:91:
                    ab:fb:c6:d7:77:d3:e6:5d:99:1f:ff:57:78:ff:16:
                    ef:3b:a5:67:b8:83:00:43:a2:70:6a:91:68:a2:94:
                    d0:32:32:92:4f:1a:f8:fa:39:a4:16:e1:95:b5:d1:
                    cf:eb:d8:62:23:1d:09:d2:6a:98:cf:30:94:6f:0e:
                    3a:32:3d:21:ac:f8:03:4f:fe:22:d1:cc:77:0f:cd:
                    8a:67:c0:a7:34:a6:b4:1c:f3:38:09:8c:b4:75:48:
                    82:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:31:4E:A0:45:3A:96:83:E1:16:D3:14:3D:22:AD:F4:49:C5:8E:50
            X509v3 Authority Key Identifier:
                keyid:CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:8c:bf:e9:cc:52:b3:57:15:42:ee:bf:26:1a:e5:34:0b:73:
         0d:6a:06:8e:6c:a1:14:18:e4:1f:bc:33:e1:6a:de:33:41:c1:
         c4:37:64:69:0d:23:6c:17:b0:42:8f:50:2a:20:d4:09:1b:75:
         09:bb:ed:1c:38:c8:12:3b:3b:13:89:8d:7b:d9:8f:ba:c8:f5:
         be:00:de:10:3e:36:11:ba:ce:b5:09:41:f6:21:49:15:35:8c:
         a3:a8:f0:a3:d5:d1:88:25:b4:0f:75:f2:f8:b4:e0:6d:d9:de:
         3a:f6:f6:fb:d9:b2:92:48:f5:a7:18:5e:ef:d7:3d:32:d5:d0:
         9c:8f:44:18:56:71:af:fe:d7:90:44:eb:88:44:e6:ad:a7:88:
         31:4b:f1:ad:13:60:98:cc:fd:38:28:e6:82:22:3d:ee:af:39:
         eb:02:b4:90:67:db:ca:e9:bb:b2:da:a4:9e:53:1c:4f:84:b3:
         65:15:01:b0:1c:f8:f7:3b:f2:0e:19:e3:5d:9b:fc:88:7a:71:
         92:79:b5:cc:43:65:be:a3:85:25:ee:4a:eb:35:c5:a9:a1:0e:
         c9:16:ba:2f:d7:7c:15:c4:9c:9b:51:a3:ef:0b:ed:c5:11:3b:
         5a:fb:eb:e1:f6:64:23:dd:8b:2d:60:d2:c4:77:62:b4:b3:19:
         05:56:c6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:21:41 2026 by rpki-client