Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
File:                     YxGp1MECUvv3O3Fl81rMHc6fCpM.mft (raw, json)
Hash identifier:          BEMrssTNRdjN8SXqyFp+CbAn60y8k5iykLTeKfxCg7w=
Subject key identifier:   CE:F8:EF:68:54:7F:52:6D:DC:0B:20:C2:1C:4A:98:B3:9A:6B:56:4C
Authority key identifier: 63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
Certificate issuer:       /CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Certificate serial:       019D9A06FAB5959B9C9FF27565783BE835BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 06:00:41 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:41 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:41 +0000
Files and hashes:         1: JNAnR3OpCBmqbjcaQCFbgyf64p8.roa (hash: j0YiHlaOdUim9VJP58wic2ZTEsjQbXoSPaCpDLTojSY=)
                          2: YxGp1MECUvv3O3Fl81rMHc6fCpM.crl (hash: /Avhue27yEIzSFgtldAKD7/tpTvwf12FEKAoi+6WHb8=)
                          3: n7pDY_8zMb4XywLOR-Gyk8ZEh6Q.roa (hash: CUzjuBkLmCl6WtXKZbLolmS3oXPaSaat/iqu2Jp6Roo=)
                          4: x85xaclh_I5fag7LOhEkjo3jhMw.asa (hash: SZArydHLaUzTTdXtg5nAF/HF99OnEgr16Dnn25uMEJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:06:fa:b5:95:9b:9c:9f:f2:75:65:78:3b:e8:35:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
        Validity
            Not Before: Apr 17 06:00:41 2026 GMT
            Not After : Apr 18 06:00:41 2026 GMT
        Subject: CN=cef8ef68547f526ddc0b20c21c4a98b39a6b564c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6b:eb:af:1b:9b:7a:08:d7:fb:a3:7c:df:17:
                    09:e0:48:52:ee:41:c2:8b:03:82:0d:84:c7:16:e1:
                    be:a1:9c:71:c9:0b:77:3e:03:b0:f4:68:19:95:fb:
                    8e:95:b6:4f:a3:93:9b:b1:63:29:ad:ef:0e:6a:7c:
                    7e:f6:dd:37:0d:3e:da:ed:6c:7c:54:ab:cd:ac:59:
                    4b:7c:34:39:1d:fc:88:d3:07:7e:fb:05:60:f9:6c:
                    78:38:50:f4:fa:c8:40:ac:1e:9a:a5:08:2a:25:49:
                    cd:1e:41:3c:70:95:5e:cc:bf:e9:d8:cb:94:c6:02:
                    ec:5f:8f:ec:28:a2:0e:c9:aa:78:34:5c:da:de:43:
                    6e:7d:8f:f2:07:95:9d:ba:17:f1:34:48:2b:f0:77:
                    dd:80:e7:14:4d:eb:3c:3d:9b:1b:d4:83:f1:72:c8:
                    1a:4c:26:33:e9:2c:11:33:96:06:6c:6d:ba:f1:1e:
                    ab:fd:47:26:a3:73:6f:2d:25:bc:2d:3f:88:d3:95:
                    d8:30:fa:d1:49:d3:0b:74:3a:68:73:fa:21:d6:c5:
                    b0:11:72:20:d1:72:5e:1f:7e:42:71:3e:63:48:75:
                    5a:7e:9f:c8:94:5f:6d:7b:27:61:5d:fa:38:67:eb:
                    f7:74:00:71:35:fa:ca:a9:39:d5:04:5d:70:7f:47:
                    70:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F8:EF:68:54:7F:52:6D:DC:0B:20:C2:1C:4A:98:B3:9A:6B:56:4C
            X509v3 Authority Key Identifier:
                keyid:63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:1d:3a:9c:a3:ad:91:b0:8d:dc:f7:33:82:7c:2a:93:1f:8c:
         7e:ba:86:df:db:c7:49:5b:9d:02:f0:92:9c:7b:51:c9:68:a0:
         4d:1c:f7:b5:1d:b2:37:73:c0:09:9f:18:bf:73:a8:23:46:c0:
         0d:77:b5:3f:96:3e:d2:22:6f:63:ab:e5:26:3c:c6:67:14:70:
         90:fc:18:53:5b:00:cf:e8:65:5b:cf:80:5a:69:a6:c1:05:43:
         88:15:8b:45:74:88:40:95:f2:e6:22:68:9d:23:cf:ee:6a:14:
         bb:3a:38:0a:d8:7f:2e:32:06:95:92:74:88:2a:3d:c4:06:de:
         dd:b2:1d:00:69:50:34:40:f5:59:38:d3:59:7b:1a:9e:07:b2:
         29:a3:1e:f7:f1:9a:ce:74:f1:b8:35:d8:5e:c2:d0:c0:c1:c3:
         9b:6f:44:5f:14:2c:83:c6:a9:6d:6a:2f:22:ee:9f:f7:a4:80:
         38:fb:d9:79:07:7c:ad:d7:06:bf:5f:8e:8b:37:53:fb:ec:a3:
         71:82:9d:4c:f7:b8:2d:81:78:8f:f7:7b:77:2f:1e:22:9a:fd:
         a2:7d:fd:3a:a5:91:48:28:72:40:2e:e3:bf:90:b4:26:0c:65:
         7a:b9:d6:26:71:4e:15:55:90:f1:c6:e3:ed:fb:55:1d:58:25:
         94:f1:63:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:43 2026 by rpki-client