Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
File:                     y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft (raw, json)
Hash identifier:          M0OwcpjVB0eyDoYr6RpTqS1SEkqGD73nT0sxAkg5he4=
Subject key identifier:   73:82:D2:98:14:2E:43:D1:3C:97:0C:51:15:A6:D4:54:5F:FF:87:D1
Authority key identifier: CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34
Certificate issuer:       /CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
Certificate serial:       019D9A06E8B8AF34D2868176AAB659213423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
Manifest number:          0622
Signing time:             Fri 17 Apr 2026 06:00:37 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:37 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:37 +0000
Files and hashes:         1: xAwC9v2pDzbNDsLMQHKskO70xoQ.roa (hash: pNouLSLbbOHtlI8iLu58m9dwfp4hUJRS+ezdGScljvg=)
                          2: y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl (hash: ZoqWMpGZwWJOfQSIfYFVnSjEDtQi74HW2ep9x5ULDqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:06:e8:b8:af:34:d2:86:81:76:aa:b6:59:21:34:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
        Validity
            Not Before: Apr 17 06:00:37 2026 GMT
            Not After : Apr 18 06:00:37 2026 GMT
        Subject: CN=7382d298142e43d13c970c5115a6d4545fff87d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:31:6a:bb:7f:4c:f2:36:31:f4:53:39:92:ab:
                    3d:a7:1b:62:e6:00:95:56:af:04:56:a8:cf:e4:4e:
                    69:50:1c:90:72:49:c7:9a:95:82:6c:5a:18:c9:a1:
                    21:e5:22:11:83:04:24:4b:db:eb:44:d4:de:48:15:
                    a2:4b:ec:e9:2c:52:81:8a:9c:4e:e6:31:91:e6:f1:
                    29:7d:b5:31:dc:31:01:3b:61:4c:db:23:e3:d0:0c:
                    de:9d:a2:e7:a8:11:a7:75:ae:26:c4:f7:6e:aa:45:
                    e0:71:e5:28:5c:31:3a:8f:f2:29:c9:3f:f7:15:c0:
                    32:e8:6a:30:db:55:de:2d:f2:00:13:4f:fd:39:7b:
                    48:ac:04:df:9e:71:e9:80:4f:ac:b0:8c:52:36:ba:
                    8b:70:23:e2:68:04:d2:e3:2d:1e:1d:68:65:c7:61:
                    8e:ca:40:ac:1c:91:e0:83:02:aa:5b:8e:7e:51:93:
                    ea:0c:af:cd:6c:39:93:f6:29:fa:c7:49:ed:c6:62:
                    48:79:d1:7b:ea:06:2b:44:d6:b0:57:77:76:eb:6f:
                    35:a4:c7:fb:32:18:7b:1e:ee:fc:ff:6c:7a:f3:16:
                    94:c6:3c:37:d0:70:f9:bd:b5:b4:a1:41:b7:e4:c8:
                    44:08:14:e3:63:41:cc:17:d3:cb:0b:13:e3:11:39:
                    1e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:82:D2:98:14:2E:43:D1:3C:97:0C:51:15:A6:D4:54:5F:FF:87:D1
            X509v3 Authority Key Identifier:
                keyid:CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:26:34:51:61:25:a1:25:d8:5a:5d:01:df:60:c8:3d:76:73:
         90:ac:38:8d:3e:4b:9b:80:d2:09:fb:ec:32:17:e5:8a:6e:55:
         5c:86:2c:b2:af:1e:22:a6:bf:89:44:04:49:3c:cd:7b:eb:b5:
         bc:23:e8:2f:2f:85:3a:f8:9a:98:51:3a:a6:da:f8:f5:68:c6:
         0a:80:e7:df:59:b4:ef:74:2a:2b:4d:ca:d6:e9:d3:50:2d:39:
         81:03:40:d8:3f:f6:f1:b5:fd:f2:a9:b5:d5:a7:da:0b:d2:ec:
         7d:8d:ec:94:49:fd:bc:2c:ae:f6:b1:ac:6d:29:d8:dc:6e:2e:
         21:0c:53:2c:33:52:86:91:4d:37:6a:c7:60:9f:75:66:08:9e:
         b1:35:38:47:ef:b4:2f:37:51:c0:55:6c:40:7e:f0:9b:fc:fd:
         3e:9d:97:93:6e:cb:58:10:b6:4c:25:39:2b:88:2b:f5:fd:42:
         6c:86:cd:e8:be:40:f8:58:7a:29:0b:43:16:c6:ba:01:89:4f:
         b0:1c:5d:f0:5f:fd:f6:58:4a:16:2f:b4:ed:3f:d3:4a:6f:57:
         5a:a4:ac:9b:61:8f:5e:69:88:44:c4:bf:56:4a:1c:cb:6d:d3:
         77:63:4e:1f:a3:9e:dc:87:7c:d9:f1:da:21:8b:97:6c:2a:6b:
         6f:e9:fd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:22:13 2026 by rpki-client