Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
File:                     ycAtQjT0vE6HVV5BwDd51WIKUVU.mft (raw, json)
Hash identifier:          WXAa/crE3kHDYm5F5E0BlNWJaN4eJE2ZGNMylK3VNqI=
Subject key identifier:   5D:91:3A:B7:38:3C:78:C6:0C:19:61:88:AE:74:80:2B:A7:D9:35:C0
Authority key identifier: C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55
Certificate issuer:       /CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
Certificate serial:       019D9AE384650A5D48DACD262A7E6238B3FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
Manifest number:          0B49
Signing time:             Fri 17 Apr 2026 10:01:34 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:34 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:34 +0000
Files and hashes:         1: FMQ4xU5rGzBy9XfN6xkHNPPuK2w.roa (hash: VpW8Q4PIVbHWidRFeTd9pn+aHZWxpeF2VrUK329P7b4=)
                          2: OJY6iE54MT93V4GP2ZSvbOq5K4Y.roa (hash: 4QTAC5eFNbrr/GKOsA3KxkrPE1SA8Il65VwGfi0JgLQ=)
                          3: sP3xxrP16BVYtRejuodDQfjDjnY.roa (hash: rhdnZt+TyfSBG9e9GLDjxat3cDe+UxxerHxAqaJJWko=)
                          4: ycAtQjT0vE6HVV5BwDd51WIKUVU.crl (hash: UJAmraTuICFyHBetBibOGxtLxqWXJ/WR2P0ZitOa7zc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 10:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:84:65:0a:5d:48:da:cd:26:2a:7e:62:38:b3:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
        Validity
            Not Before: Apr 17 10:01:34 2026 GMT
            Not After : Apr 18 10:01:34 2026 GMT
        Subject: CN=5d913ab7383c78c60c196188ae74802ba7d935c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:41:81:3d:ab:08:9d:d8:f6:e9:bb:84:07:b6:
                    c8:1f:d2:af:52:e1:91:6c:1a:91:83:4e:31:9c:70:
                    0d:81:94:6c:21:57:01:16:ec:eb:8e:e2:c8:cd:22:
                    8c:9b:11:1b:f4:bc:0e:05:6d:68:6e:cf:a0:49:9f:
                    19:83:25:dd:d2:61:8a:41:57:4d:6b:e4:2b:01:65:
                    9d:70:c9:39:1b:a9:6a:38:c4:dc:1b:c4:44:d0:ce:
                    5d:25:69:25:94:f5:c8:dd:17:3b:6a:ff:70:c8:15:
                    11:55:a7:59:0a:61:b2:d2:55:6a:c2:5f:e4:b3:2d:
                    25:2d:d6:a1:23:8b:23:54:76:46:55:39:fc:21:32:
                    9a:cc:aa:a1:cb:ca:8c:9c:b4:8d:d5:a6:04:22:97:
                    61:d9:34:a4:f7:9f:e7:f6:6f:ba:30:3a:53:d1:3b:
                    30:5b:e9:08:9c:12:90:3a:9c:f5:b8:bf:00:e9:f1:
                    a9:28:84:f8:16:48:0f:ba:f3:9d:38:aa:59:57:6d:
                    13:a0:47:81:e4:39:e8:eb:f6:ea:a5:39:90:74:f3:
                    7e:27:9e:19:ad:bf:1d:ea:70:84:0c:58:cf:d6:73:
                    c7:5b:46:cf:d1:36:87:dc:a0:da:b5:a4:d6:1e:b4:
                    52:5c:cd:cd:86:4b:50:fd:83:b7:74:d4:08:43:ee:
                    ef:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:91:3A:B7:38:3C:78:C6:0C:19:61:88:AE:74:80:2B:A7:D9:35:C0
            X509v3 Authority Key Identifier:
                keyid:C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:6f:6f:54:15:0a:7a:46:5b:ea:23:48:05:32:69:9c:f6:46:
         b0:5c:59:9b:fd:9d:43:93:55:4e:6b:8e:2b:52:d9:c1:3a:a1:
         86:28:cf:82:92:77:0d:f8:14:77:ac:01:76:f1:bf:79:b9:23:
         32:13:e3:64:2c:a9:14:73:42:d1:fe:f3:56:b1:3d:83:0f:c6:
         63:5e:f3:b5:3c:35:fd:c9:49:37:91:70:32:27:d0:f6:b1:fb:
         89:59:a0:54:fd:54:0c:5d:81:25:84:f7:6b:24:38:b4:e6:0e:
         20:62:18:55:23:c0:ef:00:87:71:01:52:d3:cd:63:f5:8d:dc:
         00:95:51:72:aa:ed:47:14:33:d0:b1:93:e6:e2:70:f4:cf:ba:
         d9:e1:21:cc:0a:d4:4e:91:e6:15:84:d3:08:09:dc:8d:9b:be:
         90:b8:18:91:8c:af:6e:03:aa:df:ae:43:44:50:93:dc:12:26:
         98:36:21:11:0c:6f:eb:55:00:7f:df:2d:bd:63:d5:c4:10:ad:
         e5:e0:7a:fd:e4:21:31:39:e5:c5:8c:4e:d2:59:5d:46:19:f3:
         79:af:6f:ff:d6:0c:32:20:5d:e1:c9:50:79:ce:b7:a0:a0:7b:
         25:0a:74:f4:cb:a3:f8:32:9c:95:ae:da:a7:83:9f:b3:ef:4e:
         24:cd:80:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a44RlCl1I2s0mKn5iOLP7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YzAyZDQyMzRmNGJjNGU4NzU1NWU0MWMwMzc3OWQ1NjIw
YTUxNTUwHhcNMjYwNDE3MTAwMTM0WhcNMjYwNDE4MTAwMTM0WjAzMTEwLwYDVQQD
Eyg1ZDkxM2FiNzM4M2M3OGM2MGMxOTYxODhhZTc0ODAyYmE3ZDkzNWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkGBPasIndj26buEB7bIH9KvUuGR
bBqRg04xnHANgZRsIVcBFuzrjuLIzSKMmxEb9LwOBW1obs+gSZ8ZgyXd0mGKQVdN
a+QrAWWdcMk5G6lqOMTcG8RE0M5dJWkllPXI3Rc7av9wyBURVadZCmGy0lVqwl/k
sy0lLdahI4sjVHZGVTn8ITKazKqhy8qMnLSN1aYEIpdh2TSk95/n9m+6MDpT0Tsw
W+kInBKQOpz1uL8A6fGpKIT4FkgPuvOdOKpZV20ToEeB5Dno6/bqpTmQdPN+J54Z
rb8d6nCEDFjP1nPHW0bP0TaH3KDataTWHrRSXM3NhktQ/YO3dNQIQ+7vaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2ROrc4PHjGDBlhiK50gCun2TXAMB8GA1UdIwQY
MBaAFMnALUI09LxOh1VeQcA3edViClFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWNBdFFqVDB2RTZIVlY1QndEZDUxV0lLVVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82ODUyMzItZjVlOS00MWQ2LWI5NGUt
MWE2Y2U1ZmFmOTE2LzEveWNBdFFqVDB2RTZIVlY1QndEZDUxV0lLVVZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82ODUyMzItZjVlOS00MWQ2LWI5NGUtMWE2Y2U1ZmFmOTE2
LzEveWNBdFFqVDB2RTZIVlY1QndEZDUxV0lLVVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMm9vVBUK
ekZb6iNIBTJpnPZGsFxZm/2dQ5NVTmuOK1LZwTqhhijPgpJ3DfgUd6wBdvG/ebkj
MhPjZCypFHNC0f7zVrE9gw/GY17ztTw1/clJN5FwMifQ9rH7iVmgVP1UDF2BJYT3
ayQ4tOYOIGIYVSPA7wCHcQFS081j9Y3cAJVRcqrtRxQz0LGT5uJw9M+62eEhzArU
TpHmFYTTCAncjZu+kLgYkYyvbgOq365DRFCT3BImmDYhEQxv61UAf98tvWPVxBCt
5eB6/eQhMTnlxYxO0lldRhnzea9v/9YMMiBd4clQec63oKB7JQp09Muj+DKcla7a
p4Ofs+9OJM2AQQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:30:06 2026 by rpki-client