Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
File:                     KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft (raw, json)
Hash identifier:          V0JES0fa6SJxzoHTVYyGXeg4u7H3PLLx2jIDfQrCsbQ=
Subject key identifier:   B2:AD:AA:AE:10:A4:03:2B:96:74:C2:66:42:10:4F:1F:19:52:83:B1
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Certificate issuer:       /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial:       019D9B506262068F69C6BCD37873AB9E9869
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
Manifest number:          10BC
Signing time:             Fri 17 Apr 2026 12:00:29 +0000
Manifest this update:     Fri 17 Apr 2026 12:00:29 +0000
Manifest next update:     Sat 18 Apr 2026 12:00:29 +0000
Files and hashes:         1: 1v9efWQrAg4BDId3pIk4c44PmVw.roa (hash: k5/SBN1yEQUS0XU3i/I69dLXfbTEMO/myKBAP0hZNns=)
                          2: Ev6njxlgrpkstlUTyTcSCnkdFjo.roa (hash: 1/+G7Xn066bxLccaxINtt3wyPu+3d9kx1mTaF8ip+vA=)
                          3: FPBOE7r5OOktznz_3R2UIQrsuM8.roa (hash: 6/NtjVoPaKYVIjf6r5FmS/9bjWk6fdeQYR7Lu+clilk=)
                          4: GIqN1aolnCf-NZ3vtmoB1lfLhXU.roa (hash: WTQP5hxTgdnCG02OhJAjM1ZJsLN9CqYhLQ4bOesYr7M=)
                          5: KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl (hash: NErWwwLW0L6YvjEWZpJ9p3yenZ2XvHPpoC6M1R51Rrg=)
                          6: ax3hJrj1jKccen4LkvygGa6u_zk.roa (hash: YPVLrZ9Q05uGWBIZMWGr1R3Ivd6hvxv84SERSuRddso=)
                          7: i8kJNIdYqQmfEonJPIFF62WXUQU.roa (hash: VsuHI3Fj0R4Bibi8JuUm8YU4QqMFawXkLB4DTLwJzfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:50:62:62:06:8f:69:c6:bc:d3:78:73:ab:9e:98:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
        Validity
            Not Before: Apr 17 12:00:29 2026 GMT
            Not After : Apr 18 12:00:29 2026 GMT
        Subject: CN=b2adaaae10a4032b9674c26642104f1f195283b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d7:21:b3:d0:19:d1:92:fd:6d:7e:2e:06:23:
                    39:4e:b1:20:80:b8:e7:ff:50:55:f0:d6:e4:b9:3a:
                    7d:e9:7e:30:ce:3b:b2:79:c4:68:ed:7b:bf:b5:60:
                    07:4b:b7:38:d9:5c:a5:51:f0:c0:6e:d9:e4:05:93:
                    8d:0c:a0:76:57:1b:38:fc:f1:eb:f9:cc:59:94:93:
                    0b:3f:87:e6:2e:b1:d9:3b:8c:43:1e:b5:99:0e:f5:
                    eb:0d:76:cb:46:6b:5d:e2:53:4a:78:a4:9b:57:c9:
                    32:7c:34:d1:b1:17:c6:19:a0:78:1e:5a:70:22:63:
                    8a:6b:9e:b3:a8:e6:93:1b:c4:6c:09:43:6f:2f:d7:
                    28:ab:ff:22:a4:9e:66:ab:a5:26:31:32:12:17:5c:
                    d7:6c:b5:ec:66:c6:62:9f:53:e7:c9:3f:6c:75:a0:
                    f9:7c:eb:b9:dd:c7:5d:cd:6d:eb:fe:fe:21:9a:79:
                    22:21:ab:cd:31:94:6a:7f:ba:47:44:52:98:61:38:
                    ea:b2:90:d9:f1:8b:84:ab:78:dc:56:54:c5:00:b5:
                    b9:56:4f:e0:25:65:91:89:ed:b2:3d:8b:b3:4c:36:
                    a8:5b:d7:81:63:ea:63:d1:eb:2a:14:bf:e4:d4:df:
                    42:f7:91:d1:45:61:6b:29:00:c3:94:e3:b7:75:eb:
                    35:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AD:AA:AE:10:A4:03:2B:96:74:C2:66:42:10:4F:1F:19:52:83:B1
            X509v3 Authority Key Identifier:
                keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:6f:b0:56:fb:82:e3:0f:c6:47:73:1f:93:6b:85:34:76:d9:
         fe:23:04:61:c1:0b:9f:a6:9a:00:48:37:38:56:d1:04:49:16:
         fe:04:f4:59:77:06:ca:49:17:c8:a9:e5:1f:18:6f:f1:8c:51:
         b3:44:5f:e5:33:c4:8a:dd:b7:ee:ba:0a:c1:ff:89:a3:6b:ec:
         24:c8:1a:f6:35:f2:36:b4:26:58:4e:e1:8f:78:0c:7e:a9:07:
         35:60:c1:41:df:82:44:b9:c1:bd:20:f7:ee:95:1d:6a:ac:ac:
         6f:81:b5:c6:ab:df:b2:a4:73:4b:84:cf:73:fa:87:6b:dc:ea:
         66:eb:84:e6:df:cc:b6:f4:d0:8c:28:95:04:92:80:1c:86:67:
         62:55:15:b8:2b:a8:0f:0b:d5:2a:af:75:bd:ab:ea:0a:d9:27:
         04:0e:30:fb:65:a1:5a:aa:99:12:ae:84:28:8b:18:78:0e:80:
         ed:81:8f:a3:c6:90:60:a5:04:a2:c0:a0:10:20:b6:42:92:bf:
         6c:8e:af:84:26:3a:a9:f1:3c:86:9d:74:7c:21:0c:35:bb:82:
         6c:9d:25:0f:fd:42:ba:5c:82:12:22:97:be:05:9b:83:b9:b4:
         9a:ea:a4:e3:11:0d:63:02:e1:f3:8b:2f:10:e3:b4:7a:30:b2:
         35:58:11:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:50:28 2026 by rpki-client