Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3e46eb-1ee5-4d00-9f06-c976463b7e0c/1/RYYKw_LILnYscXB-YHYOM7mWLpY.mft
File:                     RYYKw_LILnYscXB-YHYOM7mWLpY.mft (raw, json)
Hash identifier:          6lIf9u85ZquoaJU1nGQblIABd5O7ZAfE5yhsRnj3x5I=
Subject key identifier:   F9:F1:7C:DE:43:D5:9B:EC:77:79:76:78:B1:0A:E5:7D:80:F7:29:F1
Authority key identifier: 45:86:0A:C3:F2:C8:2E:76:2C:71:70:7E:60:76:0E:33:B9:96:2E:96
Certificate issuer:       /CN=45860ac3f2c82e762c71707e60760e33b9962e96
Certificate serial:       019D9BBE3B6740F8CA50BADE025CEE9CF377
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RYYKw_LILnYscXB-YHYOM7mWLpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/3e46eb-1ee5-4d00-9f06-c976463b7e0c/1/RYYKw_LILnYscXB-YHYOM7mWLpY.mft
Manifest number:          57
Signing time:             Fri 17 Apr 2026 14:00:28 +0000
Manifest this update:     Fri 17 Apr 2026 14:00:28 +0000
Manifest next update:     Sat 18 Apr 2026 14:00:28 +0000
Files and hashes:         1: RYYKw_LILnYscXB-YHYOM7mWLpY.crl (hash: m7pmXSPlKlRoY4enis4+HUDRjL12IJ15Trht2jrTDVM=)
                          2: mmEnZdJB5y2A5vx7a-IUKiFNSKo.roa (hash: h0AxjH15fpWyphKp2ONrmBwWqI/VqO79cDpaG7xwPAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/3e46eb-1ee5-4d00-9f06-c976463b7e0c/1/RYYKw_LILnYscXB-YHYOM7mWLpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/3e46eb-1ee5-4d00-9f06-c976463b7e0c/1/RYYKw_LILnYscXB-YHYOM7mWLpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RYYKw_LILnYscXB-YHYOM7mWLpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:3b:67:40:f8:ca:50:ba:de:02:5c:ee:9c:f3:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45860ac3f2c82e762c71707e60760e33b9962e96
        Validity
            Not Before: Apr 17 14:00:28 2026 GMT
            Not After : Apr 18 14:00:28 2026 GMT
        Subject: CN=f9f17cde43d59bec77797678b10ae57d80f729f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:26:a2:9c:2f:1c:21:61:04:32:6e:90:6e:
                    82:e7:92:49:af:d1:e6:8e:91:57:37:ab:64:91:b3:
                    cd:7c:78:34:94:bc:32:bf:e6:32:6e:33:bb:43:d1:
                    f9:06:38:6b:b1:20:23:36:08:b2:76:a0:5b:aa:34:
                    8f:2d:3c:7b:3c:c7:cc:99:ad:fc:ed:2e:22:85:1d:
                    bf:62:37:b9:49:0f:e8:9d:ff:b5:28:d1:fd:41:e2:
                    de:80:d0:ee:ee:2c:12:5e:01:46:84:55:a9:19:68:
                    60:e7:96:21:ab:a5:05:8d:da:21:13:90:59:13:6d:
                    36:6a:8f:57:a6:e0:e1:91:67:2a:97:f6:fc:03:1c:
                    ec:0f:fb:44:16:2a:c8:6b:06:5a:da:4b:8c:39:10:
                    59:89:8f:d6:52:9e:0f:37:ce:9c:04:36:bd:fe:14:
                    db:d5:ff:dd:e3:ea:42:2a:1d:b9:d6:13:7e:2f:39:
                    48:fa:7b:c6:4b:5d:14:53:f8:f4:21:70:69:0c:12:
                    69:35:16:cd:07:5c:9b:6e:81:ec:ca:75:ea:2f:2a:
                    32:b0:af:bd:b8:6c:36:59:51:2c:e3:9c:d3:06:85:
                    13:a7:33:41:7b:17:90:5e:9d:72:2e:82:1e:17:e0:
                    8b:e8:7f:87:48:62:8b:b9:72:8a:a4:37:b4:97:88:
                    1c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F1:7C:DE:43:D5:9B:EC:77:79:76:78:B1:0A:E5:7D:80:F7:29:F1
            X509v3 Authority Key Identifier:
                keyid:45:86:0A:C3:F2:C8:2E:76:2C:71:70:7E:60:76:0E:33:B9:96:2E:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYYKw_LILnYscXB-YHYOM7mWLpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3e46eb-1ee5-4d00-9f06-c976463b7e0c/1/RYYKw_LILnYscXB-YHYOM7mWLpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3e46eb-1ee5-4d00-9f06-c976463b7e0c/1/RYYKw_LILnYscXB-YHYOM7mWLpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:22:84:95:65:29:d9:72:e6:75:9a:65:c5:f4:a7:57:ee:6b:
         bc:22:7c:f1:d7:61:61:0e:59:2b:c6:a8:34:90:0f:c6:35:c9:
         dc:83:f0:a2:b5:75:07:ed:1b:36:b9:5b:d0:4f:a3:80:40:61:
         29:60:f7:cf:60:61:be:e5:0e:53:7e:81:d4:e0:fb:76:0d:13:
         ac:32:b3:9e:f7:b8:11:86:0f:a2:f6:46:2d:40:f4:9d:6e:ea:
         14:50:12:d3:b4:7c:3a:74:2b:4e:9e:c1:ca:00:99:d8:a2:a5:
         9e:91:5f:fa:54:03:f3:0b:36:6b:08:9e:5c:1b:67:99:7b:1b:
         fd:61:38:9f:24:2a:75:c7:95:60:6d:20:ae:27:df:c2:a7:1b:
         7e:37:4f:fa:42:06:f4:24:78:3e:40:32:c5:58:29:bd:eb:ed:
         1a:09:ef:d8:5d:18:42:24:59:ad:83:9d:f6:8e:67:be:bc:81:
         8f:ed:bc:6b:a3:39:ab:0a:fa:1d:80:f1:38:b7:15:3d:a8:cd:
         7d:73:16:4b:80:7f:f3:69:5f:52:f7:3f:10:35:b5:4d:cb:e2:
         50:a8:eb:d8:fe:ff:f9:4d:b7:78:eb:77:76:56:9b:25:ae:f5:
         78:a6:fd:8d:88:bf:4e:a2:75:20:20:cf:13:13:88:6f:6a:a9:
         01:9c:ac:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:16 2026 by rpki-client