Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
File:                     Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft (raw, json)
Hash identifier:          otHSgpnOJOO2MlYp7W8NO2ykBHeYGVuGo+JpBgjG0g8=
Subject key identifier:   44:56:6F:93:6A:42:5B:72:FD:67:1F:FC:3A:D9:9B:1E:FE:69:43:A8
Authority key identifier: 63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
Certificate issuer:       /CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Certificate serial:       019D9A074C3CC951DE4BCF6A7EDCCD13287B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
Manifest number:          088B
Signing time:             Fri 17 Apr 2026 06:01:02 +0000
Manifest this update:     Fri 17 Apr 2026 06:01:02 +0000
Manifest next update:     Sat 18 Apr 2026 06:01:02 +0000
Files and hashes:         1: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl (hash: UbNmRWkxQGdbOWr03CaZ0/dG2yLjQTBF9mCidozBgPg=)
                          2: ZW-BTJk2TvWox6Tuvq9T-7dcEOA.roa (hash: yW+5VTpkbQ7W1B2SHYsFwyjyj2q/DQTztYNH8ZNOMQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:4c:3c:c9:51:de:4b:cf:6a:7e:dc:cd:13:28:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
        Validity
            Not Before: Apr 17 06:01:02 2026 GMT
            Not After : Apr 18 06:01:02 2026 GMT
        Subject: CN=44566f936a425b72fd671ffc3ad99b1efe6943a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8b:6d:cb:19:a0:b3:34:22:59:4f:5e:26:e6:
                    e9:7c:09:96:f9:a6:89:40:19:dc:3d:49:5a:f5:8a:
                    0a:d3:7e:33:a9:71:72:ba:f5:53:cb:73:83:76:4f:
                    e0:29:07:38:db:01:93:a6:27:e5:ec:ea:5c:ac:b8:
                    8b:b1:ba:1a:1f:d5:ce:48:41:43:e7:07:06:32:1d:
                    a3:2b:d5:52:36:0b:9a:e9:d3:ab:86:1c:49:45:ee:
                    f7:0f:e5:3b:ec:b6:5f:d8:73:ec:5d:22:71:cc:18:
                    12:8c:16:9e:d1:5f:85:40:7d:fc:4a:49:8d:4d:2d:
                    35:be:59:c5:bd:e1:4f:2c:21:80:8c:f2:18:4f:9a:
                    f6:64:66:79:b9:fb:0a:14:96:d2:5d:1b:99:d8:b6:
                    87:4e:24:e3:3a:1b:78:b4:dc:36:8a:98:32:41:cb:
                    98:ee:fb:f7:50:04:6e:c3:b7:d0:f6:0c:51:80:12:
                    3d:44:2b:18:57:f3:d8:b4:ac:11:0c:6b:28:ee:b8:
                    64:9c:72:29:c4:b6:b6:96:32:09:0d:b2:fa:72:ec:
                    05:5e:54:b4:a5:42:28:7a:2c:e8:65:e4:63:2b:64:
                    ce:3e:99:76:44:79:0c:73:9e:98:46:0a:ab:67:73:
                    81:cc:de:12:48:b7:ae:f6:58:c8:da:64:c7:d5:7c:
                    fd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:56:6F:93:6A:42:5B:72:FD:67:1F:FC:3A:D9:9B:1E:FE:69:43:A8
            X509v3 Authority Key Identifier:
                keyid:63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:44:d5:e5:59:3a:32:fd:91:49:ca:b1:ff:f0:46:8c:75:99:
         ba:6a:c6:27:94:8a:13:37:88:b0:97:9b:6c:a4:3b:3e:9f:11:
         b5:6c:9a:d4:08:b5:7c:c7:2d:d4:78:24:7e:a0:19:8b:fa:81:
         c7:af:f9:16:b6:11:35:44:79:3c:f9:e0:6b:f5:bd:bf:86:8c:
         0e:4a:91:8d:56:d3:22:cf:18:19:0c:9c:af:49:8f:c2:de:a8:
         83:90:38:ec:ed:a1:c9:60:79:df:8c:be:74:14:10:d0:16:8a:
         17:36:f2:04:ce:a0:d6:4a:8a:38:dd:79:cc:16:2a:6b:8f:d0:
         8c:72:33:78:a3:27:3e:5c:66:7c:a5:2d:5f:01:43:59:67:ae:
         fe:e2:a9:9a:d7:76:7d:ad:df:4b:99:f9:3e:86:e9:39:d1:f2:
         ab:87:e5:1d:d9:24:57:17:9c:d7:ee:36:4a:09:fb:6e:ae:40:
         31:5c:4c:3e:c0:c1:49:ea:d2:65:77:a7:97:00:7d:f9:2a:6c:
         3f:0b:ed:32:08:ce:9f:59:e2:f9:dc:66:eb:eb:78:a8:f2:49:
         de:c7:75:c8:8f:0f:8b:6c:a9:bb:70:ab:d1:cd:d5:4b:16:49:
         0b:a6:bd:7b:b4:e5:93:06:79:24:e0:c7:77:4e:6c:51:dd:9e:
         31:20:a5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:35:28 2026 by rpki-client