Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
File:                     Y9krglYVmJTSubJfTYWYbBcnI8M.mft (raw, json)
Hash identifier:          OBKq+giCJUSYcDhw5Ytq4wxjSJLVv1XZ4AiBMq66sYA=
Subject key identifier:   47:34:06:72:E9:6E:2D:10:34:F4:BF:88:A7:CA:8A:6C:37:A8:5F:CE
Authority key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
Certificate issuer:       /CN=63d92b8256159894d2b9b25f4d85986c172723c3
Certificate serial:       019D9818E43F77496C5DEBD09A5152563892
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
Manifest number:          108B
Signing time:             Thu 16 Apr 2026 21:01:01 +0000
Manifest this update:     Thu 16 Apr 2026 21:01:01 +0000
Manifest next update:     Fri 17 Apr 2026 21:01:01 +0000
Files and hashes:         1: 1-K_7lWF7x2JD5CuVFElsT4jaLrQ.roa (hash: PKDin6Um4bSNTv37OWWtMgZ7JZ9EcI4/Ix0ai+0uf0w=)
                          2: Y9krglYVmJTSubJfTYWYbBcnI8M.crl (hash: rbZUz1BsiOThcXPhTAdMENwTilRE71fAnX1HNyP1fnE=)
                          3: xFnp4xhF4j51ZyapByot5v2VVNM.roa (hash: nHijCQmyGonC7rxNnLaWT4q1K25yNVP8EcOiDNsgLp4=)
                          4: xrTDRH7W_ATocCsWo-qnqpB60jc.roa (hash: rcqIWslEK1fTssayqywxJbPZu5Bp13nM9n6B2zco1Xg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:e4:3f:77:49:6c:5d:eb:d0:9a:51:52:56:38:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63d92b8256159894d2b9b25f4d85986c172723c3
        Validity
            Not Before: Apr 16 21:01:01 2026 GMT
            Not After : Apr 17 21:01:01 2026 GMT
        Subject: CN=47340672e96e2d1034f4bf88a7ca8a6c37a85fce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:98:cd:fb:32:ea:1f:7b:ee:17:dd:8d:19:
                    5f:75:14:5d:df:f5:46:3f:bc:72:14:4a:37:26:a5:
                    76:47:c2:4e:53:0c:06:8d:a3:b5:02:1c:98:60:52:
                    d6:95:74:ac:f2:e4:a0:95:40:74:fc:2e:be:44:a2:
                    47:17:65:d3:6c:98:79:b5:2f:29:53:a8:ff:82:36:
                    d0:64:2a:fa:04:b5:90:90:86:a4:41:d7:76:12:83:
                    30:c3:51:e2:b4:9c:a5:d0:11:cd:65:09:c5:7f:7c:
                    06:cb:00:14:ed:cd:dd:70:01:a8:99:e6:5c:74:54:
                    00:16:b3:8d:79:53:96:c1:cc:7c:60:b4:af:2b:23:
                    18:bd:f4:8a:fd:9b:a0:9b:2c:ea:15:70:eb:f4:35:
                    62:c6:30:75:16:5b:6c:34:cb:01:04:94:67:1b:92:
                    3c:53:87:69:0d:d7:69:57:c2:d0:40:4e:14:a9:07:
                    7c:b8:41:a9:59:2e:a2:aa:a9:6c:ee:f1:d8:80:33:
                    2e:28:f0:65:60:04:27:41:45:b6:69:7e:cc:83:f6:
                    dc:00:a4:75:10:47:e8:96:25:4a:9e:7b:85:62:22:
                    75:5b:b2:04:9d:15:15:df:f2:a3:d6:35:fd:45:97:
                    21:80:d6:e0:c1:86:57:d7:ee:37:62:73:0a:02:e3:
                    50:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:34:06:72:E9:6E:2D:10:34:F4:BF:88:A7:CA:8A:6C:37:A8:5F:CE
            X509v3 Authority Key Identifier:
                keyid:63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:07:fd:82:56:79:f3:43:f5:74:c4:ca:1c:0e:dc:b2:55:79:
         3a:5b:c5:5b:7a:dc:ff:f6:a6:c6:96:a0:68:f1:ec:52:c7:7e:
         c8:51:4c:c4:bb:f7:e9:46:0b:62:7b:28:78:28:7d:a1:e1:dc:
         de:dd:0b:e5:00:9a:0c:df:ce:13:96:2a:ed:a2:d3:12:9e:dc:
         12:74:de:00:71:e1:ad:c8:c2:65:c8:9a:0e:71:53:e9:fb:af:
         07:12:ea:2e:6d:a7:ac:fe:ea:25:96:b1:7b:34:be:60:f6:e2:
         d1:15:12:7a:3e:73:86:18:f6:52:92:bb:1e:de:72:f0:06:48:
         bb:45:6c:0a:7e:70:97:14:de:2e:bb:cd:c6:7b:1e:32:fd:f3:
         19:f1:2c:97:46:e4:6f:59:4e:ce:56:e5:26:9d:c8:82:54:b7:
         00:29:15:ef:47:e3:ad:9f:22:c9:c8:a4:1f:fb:c1:aa:26:80:
         b6:7c:72:41:7b:70:d4:57:f0:66:a1:00:ef:0e:e8:fe:ea:a6:
         af:2c:bf:92:ce:7a:f0:de:8d:7e:c1:31:4a:a1:42:0a:44:19:
         4e:e5:24:c2:b0:2b:f8:ce:23:c9:49:d8:94:a9:c0:7e:01:17:
         73:7b:22:bd:5c:39:28:5a:80:cb:42:db:5e:59:2a:d3:cf:e7:
         e9:74:72:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:34:52 2026 by rpki-client