Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
File:                     Y14XDZsHxQ0bKa6GliBssUWk8fc.mft (raw, json)
Hash identifier:          Zfr/sGMYiUcNEJJobxVK5/FDVIFLO8Ter8kTgC5nzLo=
Subject key identifier:   63:93:01:7F:0C:98:1C:87:05:A5:8B:61:96:93:75:FC:B6:AA:75:D6
Authority key identifier: 63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7
Certificate issuer:       /CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7
Certificate serial:       019E28EFBA9C7A9E6E654E2CB243D6FAA203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
Manifest number:          0261
Signing time:             Fri 15 May 2026 00:00:59 +0000
Manifest this update:     Fri 15 May 2026 00:00:59 +0000
Manifest next update:     Sat 16 May 2026 00:00:59 +0000
Files and hashes:         1: Y14XDZsHxQ0bKa6GliBssUWk8fc.crl (hash: fN/4fD3PcvnRpFbNjeRYUfUD/Dli11y+evWd7s3JfdQ=)
                          2: w5p1hXEjQ2Xz1V3bTFCKNXnxTbs.roa (hash: BkrEG8IgRqXV47SrXBW3QPf+J5iuuBWyqjvE+aHIr/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 00:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:ef:ba:9c:7a:9e:6e:65:4e:2c:b2:43:d6:fa:a2:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7
        Validity
            Not Before: May 15 00:00:59 2026 GMT
            Not After : May 16 00:00:59 2026 GMT
        Subject: CN=6393017f0c981c8705a58b61969375fcb6aa75d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:76:92:e6:8b:52:11:f0:55:44:80:e9:8f:c8:
                    ec:9c:6b:8a:67:db:bf:b7:fd:57:73:61:2c:4e:a2:
                    4c:11:c1:1d:01:34:a3:2b:28:2b:a3:a8:ca:62:b2:
                    b0:47:db:23:4e:f4:97:e7:99:f1:db:d9:b3:14:21:
                    f2:7d:e9:5b:6c:55:71:db:fe:b2:f1:7f:55:07:15:
                    6c:e2:a9:c4:86:78:76:a5:af:85:c4:b4:ca:46:1d:
                    e7:f6:44:51:d8:69:4c:c2:1e:19:a5:f0:82:bc:59:
                    30:c6:49:27:79:7b:c5:22:da:02:25:8e:22:0b:5e:
                    c7:db:fb:82:c6:6f:0c:d0:1c:d9:c7:07:92:54:b0:
                    06:24:78:29:7a:55:24:3a:59:45:a2:c1:b5:82:a1:
                    96:7e:1c:8c:49:98:58:f1:42:4f:b0:5c:de:cf:ea:
                    2c:f4:41:5e:99:26:4b:4c:2d:b7:f3:4d:72:ee:1b:
                    f8:15:28:1c:00:67:78:bb:e3:57:e6:88:4c:f7:62:
                    19:d2:90:ae:e8:eb:a0:42:67:31:bd:f3:60:91:38:
                    17:44:45:db:1c:f6:2c:66:70:e0:0b:4c:15:a3:fe:
                    bc:96:2c:88:63:ea:f3:90:d4:a0:ee:cd:9f:8f:bc:
                    36:36:b7:fa:40:aa:ca:6d:41:e9:99:b1:74:c0:db:
                    54:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:93:01:7F:0C:98:1C:87:05:A5:8B:61:96:93:75:FC:B6:AA:75:D6
            X509v3 Authority Key Identifier:
                keyid:63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:32:d3:b0:09:6c:e4:67:20:e1:48:bc:c5:59:bc:5c:4f:f8:
         bf:a0:e6:c9:46:90:bc:82:2d:f3:ca:30:40:ec:c8:3f:bb:51:
         cf:b5:6e:25:b0:fb:2f:a3:5b:50:68:be:9e:5a:66:ce:ff:61:
         96:ee:6d:f9:1d:e3:d7:69:b7:ae:e5:9d:af:5a:48:d4:ef:1c:
         bb:d4:aa:02:3f:ac:ca:05:9e:6d:b0:c5:fc:50:5f:ea:28:44:
         31:0f:2a:c9:ad:8a:57:01:2d:94:b2:79:29:17:7e:df:ac:d3:
         33:a5:8f:8c:16:51:d7:09:f5:14:72:ca:49:39:e0:47:fc:02:
         49:be:0c:eb:87:3d:ea:63:78:ed:a8:9d:86:00:27:e4:7f:34:
         6a:e1:e6:91:2f:22:11:1a:d6:ef:5d:dd:e4:19:8b:12:ae:37:
         c0:f6:5b:c0:46:b3:5a:41:ee:97:d8:fa:4b:a4:79:78:2f:bc:
         b6:a6:08:f8:b1:07:07:58:3b:fa:57:4c:79:88:d1:16:d6:d4:
         81:4d:d1:fe:8c:62:05:69:68:39:6d:9c:9b:f1:8a:b1:d8:b9:
         1d:d6:ca:43:ca:51:f4:3d:9d:93:1f:ee:ea:2a:b6:47:e8:dc:
         aa:93:33:7d:32:23:dc:f5:89:09:76:d7:f1:17:8c:38:94:57:
         a2:1c:8f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 10:15:19 2026 by rpki-client