Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
File:                     YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft (raw, json)
Hash identifier:          cAlMYBC56PyPpZNKRmy4ZQCB27oli056c0FISWWXiq0=
Subject key identifier:   F2:D9:AB:2E:B4:5E:69:CD:75:66:68:9F:03:5B:A9:6B:B4:87:FA:E6
Authority key identifier: 62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
Certificate issuer:       /CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Certificate serial:       019D97E1BE6C01C3EA63DA2B58EABBF96318
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
Manifest number:          18C5
Signing time:             Thu 16 Apr 2026 20:00:47 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:47 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:47 +0000
Files and hashes:         1: DrwW4sKSqTZEXvxPzEr4f3uBsog.roa (hash: GYviIhAWt+rJxTgokFxh6w4GldBuIX4UFW6S+3JXsHk=)
                          2: P98wNmnJTHdJLeeJu4aYozQSfd0.roa (hash: KbHvAeiSMHCPMC0OSmiZKSqrSyacLzZFYJdIlBywl7g=)
                          3: YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl (hash: FBrHq6I6261OPvZwkrp2XNFkgOV2FrCfkWXp/Rw3fTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:be:6c:01:c3:ea:63:da:2b:58:ea:bb:f9:63:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6284cfa7844340237fe59a3825b54f3f77ed8532
        Validity
            Not Before: Apr 16 20:00:47 2026 GMT
            Not After : Apr 17 20:00:47 2026 GMT
        Subject: CN=f2d9ab2eb45e69cd7566689f035ba96bb487fae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0a:dd:72:a5:c5:6c:4f:3e:42:7b:d1:a8:47:
                    1c:d9:29:d4:d4:7a:74:7a:53:66:9c:d1:c8:1f:b7:
                    f6:31:cf:95:1f:37:dd:f1:05:44:87:e1:f4:62:cd:
                    9f:ee:c6:49:99:df:e9:a6:c1:d7:2f:c4:19:d7:27:
                    98:2b:fa:d7:7d:fe:ce:a0:69:3a:37:6e:33:73:2a:
                    e1:58:7a:49:cd:fe:d2:57:97:7c:a0:2e:b9:c5:e3:
                    a1:d5:d1:1b:78:4d:78:17:c1:0b:e2:1b:60:83:ce:
                    ed:3d:ad:ce:a4:c4:76:b2:67:e6:e7:13:70:b4:76:
                    65:d2:50:78:dd:c8:d2:36:16:15:08:00:b8:1e:8a:
                    9d:68:f2:b1:7a:3f:88:18:75:af:85:45:4a:88:09:
                    5d:6a:14:f4:a6:28:fd:9f:0b:08:c2:28:bb:a6:de:
                    2d:64:8f:16:2c:a7:1f:ca:72:0e:94:8b:93:90:f1:
                    97:04:1b:d9:ed:5a:ff:2b:16:68:8c:32:c3:93:93:
                    8c:0a:5c:ff:46:0a:0c:d6:89:06:73:33:61:ec:5f:
                    c6:87:50:cf:d4:b0:bd:2a:29:66:64:e8:88:c2:22:
                    45:d7:ee:1e:f6:cc:01:50:d4:32:f0:ec:02:bb:77:
                    06:b3:82:49:06:19:06:cb:c6:26:98:b8:83:ea:c7:
                    71:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D9:AB:2E:B4:5E:69:CD:75:66:68:9F:03:5B:A9:6B:B4:87:FA:E6
            X509v3 Authority Key Identifier:
                keyid:62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:8e:fd:f0:65:f2:21:b8:43:a0:4b:b3:21:00:af:6f:ff:70:
         38:dd:f0:e2:66:72:29:3b:11:e7:7f:91:09:5c:0b:d9:15:a5:
         e9:2c:27:f1:9c:cc:f5:c7:aa:e4:aa:ef:93:62:ef:0b:ad:2e:
         ac:ca:79:c6:6c:d8:bd:ba:2c:51:0c:74:c7:12:71:9a:45:ed:
         28:8e:be:34:2f:5a:f6:d7:85:12:27:d0:81:0d:0e:31:7a:2a:
         1f:8d:b6:2e:e6:5a:00:ab:83:8d:bb:26:9f:19:05:aa:85:91:
         84:dc:eb:80:dc:30:e2:13:ba:69:33:24:06:5a:ad:6d:7c:8d:
         58:62:92:1b:3b:92:c3:58:90:4d:07:3c:0a:3f:0e:5e:1a:bb:
         a0:4a:a1:32:f0:14:d2:c4:63:e7:69:6b:70:56:c6:e2:9c:b1:
         64:d3:ad:77:2e:c5:e8:8e:6d:28:c6:3d:f7:a5:af:f6:b4:89:
         98:06:47:f3:50:e4:b4:8c:6e:70:be:57:91:d0:ff:48:1d:82:
         ad:c7:72:19:b0:1e:49:36:22:95:e6:0a:ce:b1:dc:08:82:dc:
         0a:75:33:23:2e:99:d8:f5:92:19:41:67:09:ea:74:86:1e:bf:
         01:c5:7f:ee:16:7a:78:fd:2c:0c:fa:bd:47:1a:4f:10:33:50:
         a1:1d:94:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:52:30 2026 by rpki-client