Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft
File:                     YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft (raw, json)
Hash identifier:          B3mwmuBqOlOhLaiPAA8+MDTf+VwprAL/J/RL3Zd8kjM=
Subject key identifier:   5C:F9:B1:11:09:A8:CB:9D:BA:70:9F:D5:D1:69:18:8E:9E:E8:85:F8
Authority key identifier: 60:5A:BB:25:3B:76:6D:CD:7F:16:D9:F0:1B:C1:19:69:18:48:EB:0E
Certificate issuer:       /CN=605abb253b766dcd7f16d9f01bc119691848eb0e
Certificate serial:       019D9A070606100FF54F7D5C1BCDDF52AE05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YFq7JTt2bc1_FtnwG8EZaRhI6w4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft
Manifest number:          051E
Signing time:             Fri 17 Apr 2026 06:00:44 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:44 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:44 +0000
Files and hashes:         1: YFq7JTt2bc1_FtnwG8EZaRhI6w4.crl (hash: 0LtV8kwL3JjanuhoPUCVNp314FlgazrIdOCZ78hSZ6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YFq7JTt2bc1_FtnwG8EZaRhI6w4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:06:06:10:0f:f5:4f:7d:5c:1b:cd:df:52:ae:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605abb253b766dcd7f16d9f01bc119691848eb0e
        Validity
            Not Before: Apr 17 06:00:44 2026 GMT
            Not After : Apr 18 06:00:44 2026 GMT
        Subject: CN=5cf9b11109a8cb9dba709fd5d169188e9ee885f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:49:88:17:23:5b:fc:8e:47:db:a6:93:36:18:
                    e5:aa:99:e7:19:18:c8:47:00:e3:f5:2b:cf:ee:97:
                    5e:7f:09:0b:4a:99:ab:72:2b:d8:31:38:71:ad:bf:
                    25:a2:ce:60:85:cc:82:78:f4:c2:d7:a4:c1:45:37:
                    fc:68:7e:9a:10:2c:73:d3:ef:e5:98:fc:5f:2e:b9:
                    77:54:2e:1a:e9:66:1a:f7:a0:49:36:38:88:0c:ad:
                    d1:b5:20:02:3f:0c:39:ae:c4:2b:4d:fb:93:5f:b0:
                    0c:d7:29:3f:79:e3:0a:4e:95:b4:1b:5c:67:53:5c:
                    b7:13:2a:3a:e4:3c:96:fc:39:23:c7:9e:a4:05:8e:
                    83:b6:c6:d8:1f:c4:6a:0e:c7:47:b4:dd:a7:46:31:
                    26:61:5d:1f:f3:2a:f5:44:4b:34:08:a2:89:a2:31:
                    e8:20:e7:d5:a9:d3:13:8f:15:16:8b:bf:5f:c7:4b:
                    3d:0a:5f:b0:1d:ad:8b:f7:7f:c4:f6:42:74:54:a1:
                    90:a8:85:1a:10:3b:83:88:f4:16:d4:b6:64:b4:8b:
                    b0:63:4d:f4:be:5a:c2:05:5b:16:8f:95:ce:f4:8d:
                    10:b5:e6:d5:34:2a:97:4d:54:80:11:21:68:57:53:
                    f6:54:99:bb:13:84:59:49:b5:9b:e2:13:c8:10:65:
                    b0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F9:B1:11:09:A8:CB:9D:BA:70:9F:D5:D1:69:18:8E:9E:E8:85:F8
            X509v3 Authority Key Identifier:
                keyid:60:5A:BB:25:3B:76:6D:CD:7F:16:D9:F0:1B:C1:19:69:18:48:EB:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFq7JTt2bc1_FtnwG8EZaRhI6w4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:d6:af:36:b1:d8:65:fe:4b:09:2d:52:a1:76:e4:50:89:0a:
         96:5e:2b:86:05:e6:32:1d:1f:e2:fa:9c:ec:1a:05:64:81:74:
         95:e5:b3:bc:4a:0d:16:d8:13:f3:87:bf:5d:7e:ef:da:5d:d0:
         84:52:c5:50:5c:77:06:83:c1:9c:86:0c:75:93:4a:39:57:9d:
         4a:27:a8:85:b7:9c:a2:f5:1e:49:e3:ac:ab:dc:e1:57:d7:7b:
         56:52:9c:f7:0e:90:eb:19:66:81:1f:0e:32:f3:0d:21:91:9e:
         13:84:a3:52:a1:76:c7:28:a5:11:c8:7e:f9:3b:e0:cf:18:8c:
         5d:fd:ce:cc:3b:f4:52:80:32:00:a8:6b:c6:f8:f3:f3:9a:b3:
         67:f6:99:67:d8:02:02:4a:b3:d1:f8:0b:2b:bd:7d:96:59:8d:
         2f:24:5a:5d:12:e7:b1:65:c1:52:f9:0d:6c:f3:5f:bc:78:19:
         6e:90:51:39:e8:59:75:ff:b4:4a:97:b8:b2:90:99:49:00:89:
         9e:d5:d1:e9:ab:5e:06:c2:0f:67:31:18:00:aa:68:ab:24:14:
         71:cb:8c:27:d5:ad:88:e4:a2:72:03:ac:69:38:3f:f7:df:8b:
         c2:2a:cb:40:86:c7:1f:c5:04:a4:a7:77:c4:13:87:80:86:ae:
         5d:cd:af:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBwYGEA/1T31cG83fUq4FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNWFiYjI1M2I3NjZkY2Q3ZjE2ZDlmMDFiYzExOTY5MTg0
OGViMGUwHhcNMjYwNDE3MDYwMDQ0WhcNMjYwNDE4MDYwMDQ0WjAzMTEwLwYDVQQD
Eyg1Y2Y5YjExMTA5YThjYjlkYmE3MDlmZDVkMTY5MTg4ZTllZTg4NWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0mIFyNb/I5H26aTNhjlqpnnGRjI
RwDj9SvP7pdefwkLSpmrcivYMThxrb8los5ghcyCePTC16TBRTf8aH6aECxz0+/l
mPxfLrl3VC4a6WYa96BJNjiIDK3RtSACPww5rsQrTfuTX7AM1yk/eeMKTpW0G1xn
U1y3Eyo65DyW/Dkjx56kBY6DtsbYH8RqDsdHtN2nRjEmYV0f8yr1REs0CKKJojHo
IOfVqdMTjxUWi79fx0s9Cl+wHa2L93/E9kJ0VKGQqIUaEDuDiPQW1LZktIuwY030
vlrCBVsWj5XO9I0QtebVNCqXTVSAESFoV1P2VJm7E4RZSbWb4hPIEGWw1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFz5sREJqMudunCf1dFpGI6e6IX4MB8GA1UdIwQY
MBaAFGBauyU7dm3NfxbZ8BvBGWkYSOsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZxN0pUdDJiYzFfRnRud0c4RVphUmhJNnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82NjY2NzAtZDBmMS00NGEzLWI5M2Et
NTAxMTFjNDI5MmQwLzEvWUZxN0pUdDJiYzFfRnRud0c4RVphUmhJNnc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS82NjY2NzAtZDBmMS00NGEzLWI5M2EtNTAxMTFjNDI5MmQw
LzEvWUZxN0pUdDJiYzFfRnRud0c4RVphUmhJNnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActavNrHY
Zf5LCS1SoXbkUIkKll4rhgXmMh0f4vqc7BoFZIF0leWzvEoNFtgT84e/XX7v2l3Q
hFLFUFx3BoPBnIYMdZNKOVedSieohbecovUeSeOsq9zhV9d7VlKc9w6Q6xlmgR8O
MvMNIZGeE4SjUqF2xyilEch++TvgzxiMXf3OzDv0UoAyAKhrxvjz85qzZ/aZZ9gC
Akqz0fgLK719llmNLyRaXRLnsWXBUvkNbPNfvHgZbpBROehZdf+0Spe4spCZSQCJ
ntXR6ateBsIPZzEYAKpoqyQUccuMJ9WtiOSicgOsaTg/99+LwirLQIbHH8UEpKd3
xBOHgIauXc2vnw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:02:02 2026 by rpki-client