Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
File:                     yex331ntcqVFfezmpT0F7QrmAKo.mft (raw, json)
Hash identifier:          uqCqgnSOEa5UPeySG0NPUHhW1EUUe+6EdOFaeLMQwo8=
Subject key identifier:   74:B4:74:75:DD:DB:CF:1C:0C:1B:02:2B:B5:32:1D:0F:49:95:B5:78
Authority key identifier: C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA
Certificate issuer:       /CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa
Certificate serial:       019D9886677AAD0F3D3170273B240D5A3770
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
Manifest number:          18C1
Signing time:             Thu 16 Apr 2026 23:00:38 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:38 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:38 +0000
Files and hashes:         1: LgvbuVV_52WynAHYpwvRHpZVnNI.roa (hash: 2NYmdNRzlmlK0EtbozdXHwFXd15kCmUNnu2aelmVQRI=)
                          2: yex331ntcqVFfezmpT0F7QrmAKo.crl (hash: j7qe/JjREcN88FhblcvXi/FO+M5MpfPfw6AwEUNY97U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:67:7a:ad:0f:3d:31:70:27:3b:24:0d:5a:37:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa
        Validity
            Not Before: Apr 16 23:00:38 2026 GMT
            Not After : Apr 17 23:00:38 2026 GMT
        Subject: CN=74b47475dddbcf1c0c1b022bb5321d0f4995b578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:24:f6:b7:74:30:b4:c4:64:e3:11:90:f7:
                    ca:f9:60:a1:e6:ee:81:02:ea:a7:3e:11:27:c0:6d:
                    aa:ed:ad:6a:51:c2:8a:93:49:d1:b9:27:cd:0e:94:
                    9b:5d:a1:c2:5e:1b:f9:9a:68:4f:cd:43:9e:eb:19:
                    1f:fa:8b:7f:5f:c7:71:db:ce:c5:2f:b6:8b:a2:20:
                    62:13:da:04:3c:aa:d8:b5:ea:2e:03:ae:cc:3e:b5:
                    01:3f:97:13:f4:ed:8d:de:5b:a2:e4:16:1f:21:18:
                    d6:43:8f:87:42:7b:ce:0f:cc:f0:70:ca:d1:a7:e4:
                    f2:05:38:6b:5d:dd:fe:c6:e0:31:de:ee:c5:93:fa:
                    16:31:13:3f:58:54:b2:05:fe:14:67:2b:39:39:22:
                    98:d2:8f:7e:3e:fa:08:13:48:de:27:3f:6f:fc:5e:
                    92:bb:a9:a5:af:b9:b6:5e:dd:5d:a2:5e:90:2b:9c:
                    7f:74:45:37:d8:c4:08:1f:ac:ad:6f:43:a3:2f:b4:
                    bf:57:a0:38:8f:5e:a7:f7:cc:c8:c5:78:cf:10:c9:
                    cc:9f:10:b6:3e:3a:1f:d3:f6:ae:75:17:aa:5b:e0:
                    a6:12:e0:b1:5f:8c:23:cb:01:92:73:1c:cd:86:f2:
                    8b:d4:23:aa:e4:78:2e:c8:02:a5:41:a7:9f:f4:e7:
                    79:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B4:74:75:DD:DB:CF:1C:0C:1B:02:2B:B5:32:1D:0F:49:95:B5:78
            X509v3 Authority Key Identifier:
                keyid:C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ea:2e:d0:e5:b4:ef:87:ba:be:f5:f2:ff:97:04:6e:54:ea:
         a6:54:47:4e:97:88:8a:31:08:d6:f2:6a:17:b0:15:28:34:15:
         c4:81:05:61:54:44:4b:c9:46:ac:61:ce:33:d1:87:8a:3e:a6:
         46:3a:d6:cf:18:ea:e4:80:9c:73:32:66:a7:f2:5c:8d:36:28:
         67:2f:d7:db:cc:72:60:d1:d8:b4:d4:ba:3d:70:60:7a:89:52:
         3d:74:df:9a:f5:58:cc:c3:b8:4d:88:89:40:76:33:f9:b0:aa:
         31:4f:04:50:dc:c8:dd:ff:ba:fe:1a:97:9a:dc:5a:3e:6c:34:
         81:0b:ae:aa:71:e4:ba:83:01:b5:e2:b0:a8:c0:3c:ea:e7:77:
         a1:c1:6b:e4:21:26:01:29:c6:be:33:21:7b:76:6b:d9:ac:e4:
         ff:a0:98:8a:d3:66:b0:e0:3b:74:b4:af:61:f1:a3:86:c8:e0:
         28:13:2f:2e:15:de:e5:18:fc:e1:37:30:39:7e:12:9e:ed:49:
         90:04:24:4f:fe:a6:78:10:8e:20:1b:91:3b:22:a5:ec:9e:5d:
         1e:33:f4:fc:b0:5f:9b:fd:d2:a5:18:61:18:17:b9:52:e2:2d:
         c1:92:4c:cb:92:e7:fe:ef:01:97:18:04:a4:fb:a2:3c:1f:57:
         47:88:db:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:18:23 2026 by rpki-client