Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
File:                     YU9WZQWavHvjR17553qXl7cW_Ic.mft (raw, json)
Hash identifier:          SlsQ5AXJrpHJzqbjLnT1f53WWXru/jJEoa7/laftiq4=
Subject key identifier:   01:11:C9:D0:9C:D9:E2:AA:16:94:23:F9:3A:39:1B:87:36:D9:E3:26
Authority key identifier: 61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87
Certificate issuer:       /CN=614f5665059abc7be3475ef9e77a9797b716fc87
Certificate serial:       019D9A74DF0ECAC3E3D1A04B1DE2E5EF3496
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
Manifest number:          14AD
Signing time:             Fri 17 Apr 2026 08:00:43 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:43 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:43 +0000
Files and hashes:         1: B8RqG2Xxq5WGdSf7iNky-uGz4Vg.roa (hash: 9xOR3g7oJ2XNkjebEjWOcXDQwkDYeYBj7pv03VZ8aS8=)
                          2: YU9WZQWavHvjR17553qXl7cW_Ic.crl (hash: zjQcsl2rrgq0fHrNNgvYfVH3OfNWGB8Y7roN32Bm4JA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:df:0e:ca:c3:e3:d1:a0:4b:1d:e2:e5:ef:34:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614f5665059abc7be3475ef9e77a9797b716fc87
        Validity
            Not Before: Apr 17 08:00:43 2026 GMT
            Not After : Apr 18 08:00:43 2026 GMT
        Subject: CN=0111c9d09cd9e2aa169423f93a391b8736d9e326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:21:6a:74:12:db:73:88:1b:bc:d8:91:6f:ef:
                    b5:1d:cd:fa:e8:ba:57:24:30:13:e2:bb:2c:5a:f6:
                    24:50:21:b2:c7:5c:c9:6d:62:8a:fb:0e:39:da:6a:
                    b3:52:3e:0d:4c:56:92:82:d5:14:9f:48:96:50:6f:
                    b4:6d:1b:d5:f8:05:71:2c:ed:37:d9:e5:5f:3b:19:
                    24:1a:5b:60:a0:d9:e7:44:7f:2f:e6:c3:d5:ff:d8:
                    9b:d0:62:91:7a:45:b1:3e:97:5e:18:b0:5a:e4:1b:
                    8f:05:21:c5:98:18:4e:70:5e:81:18:a5:db:81:20:
                    52:ab:12:20:d7:df:31:5a:5a:fe:82:ae:3d:41:58:
                    d1:cf:79:40:fb:ad:78:12:00:84:63:98:f1:8a:99:
                    d9:41:ea:bd:ca:fe:fd:57:7b:ac:57:b8:83:1e:02:
                    24:4b:e5:3e:20:23:b7:bc:72:8d:2c:33:81:8b:a0:
                    d7:2e:9a:26:79:b2:36:fc:87:9c:f4:4f:09:ad:5f:
                    91:9f:03:7e:11:19:6b:0a:45:f8:e6:d4:cf:67:07:
                    bb:47:f8:7f:7e:f4:69:2d:60:82:a7:ac:45:0f:ff:
                    96:0a:04:ef:d4:0b:40:a7:18:18:c9:3c:b3:71:4f:
                    79:04:77:c1:74:c9:2c:f1:dc:a7:e8:6c:54:c9:1c:
                    9a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:11:C9:D0:9C:D9:E2:AA:16:94:23:F9:3A:39:1B:87:36:D9:E3:26
            X509v3 Authority Key Identifier:
                keyid:61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:71:e2:45:6a:f5:ff:42:05:74:99:de:ad:b9:ab:a8:ad:6e:
         b4:b6:d1:a3:e1:41:1a:43:f0:59:52:ff:75:db:82:1c:89:19:
         92:78:d2:a3:bf:6e:28:21:82:89:5b:65:f9:8b:d3:67:71:4e:
         90:49:77:5b:fd:a8:13:b5:71:3c:e6:b6:33:68:da:4d:04:81:
         db:42:c8:0b:f3:89:f6:80:13:b7:59:5c:00:fb:5c:6f:b1:b0:
         fa:69:c7:f7:6c:80:cb:24:26:16:d3:af:e5:1e:88:03:ee:d9:
         5c:09:00:95:62:2e:85:82:2c:fb:da:0b:67:17:62:bd:31:6a:
         0f:ec:a7:cd:ea:a9:05:10:8d:a7:68:32:e8:08:6f:61:f6:52:
         f3:e3:2d:49:b8:2f:b3:6d:fd:0e:97:61:a4:66:de:6c:47:e2:
         9f:49:d1:68:58:88:25:12:3e:a8:39:43:9d:af:c9:59:3f:78:
         87:5b:99:79:69:4c:55:10:95:55:c6:34:2f:dc:26:e8:03:95:
         68:97:88:46:be:29:86:9a:19:c2:56:d6:78:1a:f6:f1:63:b3:
         aa:db:4f:fc:9c:f7:94:83:04:65:1c:eb:b2:df:ef:69:47:9f:
         74:7e:80:b4:27:e0:69:ea:cb:8d:8f:9b:15:9c:f4:00:ac:b5:
         03:74:c3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:30:23 2026 by rpki-client