Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
File:                     YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft (raw, json)
Hash identifier:          BZONBPWebPPzWwUKZS3JPiiergVy92rHNMdp46WsNvA=
Subject key identifier:   0C:C8:D1:EE:C5:36:5B:92:55:D9:C2:BF:32:0D:F2:C4:4E:89:9E:94
Authority key identifier: 61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC
Certificate issuer:       /CN=6133ec1a240143dae111bb92d192dabf775d81ec
Certificate serial:       019D99623FB7BFC5A5D5E077315E6ED9F8C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
Manifest number:          0B68
Signing time:             Fri 17 Apr 2026 03:00:46 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:46 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:46 +0000
Files and hashes:         1: LE2eUeeMg2Dnp41TZCQ6QJb9-T4.roa (hash: R9/uF4yCT5OCiN9a2sdHn7TEtLNuAXR9YP7aIOCF+IE=)
                          2: YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl (hash: whybpEMZ0BtiwR+56Lv9wkbuG4tags4sLkfdyCey87g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:3f:b7:bf:c5:a5:d5:e0:77:31:5e:6e:d9:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6133ec1a240143dae111bb92d192dabf775d81ec
        Validity
            Not Before: Apr 17 03:00:46 2026 GMT
            Not After : Apr 18 03:00:46 2026 GMT
        Subject: CN=0cc8d1eec5365b9255d9c2bf320df2c44e899e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:de:8f:9b:c5:cb:eb:fa:55:d2:2a:42:ba:97:
                    6b:5a:e8:37:38:84:57:2f:82:90:ca:fd:f6:d2:45:
                    ee:9b:c7:e0:da:be:5a:04:6a:ce:9a:19:5e:7d:59:
                    97:34:9b:66:3c:fa:2a:7a:23:1e:0d:98:eb:85:65:
                    13:f3:4c:70:8d:05:33:7d:90:3f:63:64:9e:a3:5b:
                    1d:f4:34:9c:6b:3f:0f:98:45:66:da:aa:f1:a8:3b:
                    62:5d:c4:09:68:de:d8:b1:cc:f5:38:22:02:c7:ee:
                    62:26:ec:d4:c0:6b:3f:d1:50:d2:93:13:a8:54:f0:
                    29:98:fe:60:fc:e2:b4:ef:1a:2a:56:c6:8b:fa:50:
                    50:8c:f3:3b:11:2d:2c:62:7b:ff:3b:bd:28:af:3a:
                    65:d0:69:f6:0d:c7:ca:9f:e3:94:6a:ec:02:e2:1c:
                    3b:29:58:c5:b0:c3:4c:85:5e:6c:19:b7:9a:22:04:
                    17:62:fb:d5:46:0c:b8:d2:9f:36:7d:92:38:c2:76:
                    50:36:78:0f:72:5f:42:20:83:0c:0a:ac:e5:02:d3:
                    6a:0a:c7:d1:08:6f:4c:37:b2:4a:3f:6a:8c:07:48:
                    48:20:05:d5:a4:c0:82:de:ca:94:2c:8d:3e:05:c9:
                    03:5a:11:b6:26:91:72:c5:28:ab:03:c2:c5:8a:c1:
                    5d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C8:D1:EE:C5:36:5B:92:55:D9:C2:BF:32:0D:F2:C4:4E:89:9E:94
            X509v3 Authority Key Identifier:
                keyid:61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f7:ed:c1:37:61:6c:4e:0b:cf:75:bf:fc:10:df:1e:25:65:
         52:b0:f6:08:0d:07:5c:ae:ae:83:1c:20:63:6a:34:07:ea:98:
         28:df:1b:b9:22:81:78:2e:84:9d:97:25:23:3b:ed:8b:60:bc:
         d4:87:bc:39:98:04:e9:6b:a2:ed:8a:51:02:7a:f0:49:73:7a:
         a2:77:1b:16:70:30:de:01:49:aa:48:a4:e0:53:74:3d:21:b9:
         36:09:4e:7c:e0:b7:eb:7c:85:ec:1e:ab:df:77:8f:46:6e:e9:
         a5:4f:9c:2f:b9:22:d2:85:c2:86:43:fb:cb:a3:37:95:54:e1:
         a8:d6:05:a3:84:55:cf:8a:bc:42:41:45:dc:3b:ae:47:77:d7:
         39:41:fd:f7:b7:a8:c0:ce:76:c7:c5:b6:e4:1a:45:c9:6b:3d:
         75:be:23:4c:a2:b1:e9:fb:31:09:14:c3:97:bc:e4:62:a4:2e:
         6c:a7:c4:1b:f2:17:3a:0e:1a:b4:f7:72:3c:04:6e:c3:7b:b7:
         13:59:08:90:d5:bb:6f:6d:d8:e2:0a:fb:c0:1a:2a:7b:97:63:
         b2:18:ac:56:80:6a:85:ad:78:92:f4:a9:78:1e:b3:ea:74:2d:
         3f:9c:c1:3a:6a:79:ac:75:09:ae:da:ac:f8:e6:e5:d1:f8:a3:
         d7:9f:36:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:03:13 2026 by rpki-client