Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
File:                     yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft (raw, json)
Hash identifier:          0udWzfUSjkpa+QjRa1huxCebdnFPrbeCTEwDk3teRu8=
Subject key identifier:   A7:74:ED:67:94:3E:C7:69:1F:10:F8:F9:75:5C:78:8B:D8:C0:56:1D
Authority key identifier: C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
Certificate issuer:       /CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Certificate serial:       019D9E88D75B7027F6327F048D289FF53A62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
Manifest number:          0259
Signing time:             Sat 18 Apr 2026 03:01:01 +0000
Manifest this update:     Sat 18 Apr 2026 03:01:01 +0000
Manifest next update:     Sun 19 Apr 2026 03:01:01 +0000
Files and hashes:         1: Pk6dmv-1h5zWIXu5Oty1Pp_3yV4.roa (hash: /ND/9TFeaNgP6XF6YHep3PGuc7vk/LLfQoeSDsS92Uk=)
                          2: yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl (hash: VFX9zxGsdAL2borO77Lscwcvcu+0JzkWwj/I98VJRDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9e:88:d7:5b:70:27:f6:32:7f:04:8d:28:9f:f5:3a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
        Validity
            Not Before: Apr 18 03:01:01 2026 GMT
            Not After : Apr 19 03:01:01 2026 GMT
        Subject: CN=a774ed67943ec7691f10f8f9755c788bd8c0561d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5d:6c:6d:67:d3:f1:38:c5:b8:e6:97:f2:b0:
                    6d:22:86:73:91:f3:54:e1:46:26:e7:4b:22:c7:57:
                    81:7e:e5:bf:28:82:8a:f7:28:bf:a7:e8:0b:d2:08:
                    59:20:11:dc:c3:02:aa:26:7d:03:8f:95:47:40:ab:
                    23:ca:83:d7:37:3a:bb:23:c3:68:16:25:20:1b:60:
                    22:57:1c:18:fb:43:10:ae:5a:06:10:64:dc:bd:96:
                    d4:b1:2e:b1:28:93:ad:57:7c:b7:dc:38:33:80:3b:
                    11:49:14:9d:dc:8a:f6:0c:2c:df:21:ba:3f:44:92:
                    f7:37:4a:02:22:b6:b1:75:34:ee:fc:83:5b:b9:ec:
                    5b:d2:b6:99:c2:1c:29:62:b7:9d:dc:12:fc:5b:03:
                    18:90:8d:a0:94:de:44:b0:09:ce:e2:9e:4d:37:34:
                    9f:9e:3c:36:68:c5:52:4e:9a:a6:1d:5d:d4:bb:e5:
                    ef:99:89:f5:1f:d9:e2:10:b3:86:7a:34:b4:1f:c4:
                    5c:1b:e5:e6:1f:db:29:5c:7e:92:aa:e9:b0:50:a4:
                    3e:56:66:9b:00:bd:89:1e:3e:af:89:2d:ed:c7:c8:
                    0e:84:dd:fe:65:fd:e1:fa:41:45:1e:5a:1e:0d:12:
                    8a:c9:53:dd:27:97:4b:6d:09:ef:28:2e:04:a4:cc:
                    44:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:74:ED:67:94:3E:C7:69:1F:10:F8:F9:75:5C:78:8B:D8:C0:56:1D
            X509v3 Authority Key Identifier:
                keyid:C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:a1:24:73:df:97:9d:34:ee:29:eb:8c:ce:31:da:e1:ce:d0:
         7a:e9:9c:d5:a5:86:a1:52:c5:a2:d0:e5:e5:7b:cf:c2:91:e0:
         bf:d1:ec:af:bf:bb:21:27:2e:fe:25:99:67:5c:a9:bc:e9:6a:
         b6:90:65:70:63:af:df:bf:7b:b8:47:e8:61:48:ff:b6:96:e5:
         af:e4:ec:ae:c1:4f:09:0c:7d:fb:fe:41:39:27:82:1d:39:7c:
         60:ee:d4:c9:37:a9:96:7c:b0:89:fb:39:92:9c:51:d8:b4:a2:
         c4:5f:fa:02:3b:53:f1:f6:75:35:91:c6:01:53:7a:65:1a:57:
         9a:b5:a5:59:e4:a0:9d:82:62:43:5b:e8:8c:15:8f:de:d9:01:
         11:f7:ce:0b:f8:be:01:fe:d6:e8:c3:9d:04:f0:e5:f1:1d:3d:
         1f:84:f4:f0:79:7b:83:c5:63:71:63:87:bc:d1:6f:6f:13:57:
         09:5c:e5:db:34:51:e4:44:35:fb:c8:0c:53:0b:f1:42:05:7e:
         64:f1:a2:4d:a0:bd:4f:f7:25:26:1a:1a:2a:4d:69:72:92:88:
         d1:0b:f4:c1:23:33:6f:a1:59:cf:3c:11:cf:56:9b:2e:49:65:
         a1:48:5d:be:c4:6f:89:b4:23:18:a9:e5:eb:78:7c:68:b5:97:
         59:4b:ee:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2eiNdbcCf2Mn8EjSif9TpiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZjM3NDZlMGM2YjA1MzE0N2I1MmE0ZWY0MGM0OGM3MGE3
ZjFjZDgwHhcNMjYwNDE4MDMwMTAxWhcNMjYwNDE5MDMwMTAxWjAzMTEwLwYDVQQD
EyhhNzc0ZWQ2Nzk0M2VjNzY5MWYxMGY4Zjk3NTVjNzg4YmQ4YzA1NjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl1sbWfT8TjFuOaX8rBtIoZzkfNU
4UYm50six1eBfuW/KIKK9yi/p+gL0ghZIBHcwwKqJn0Dj5VHQKsjyoPXNzq7I8No
FiUgG2AiVxwY+0MQrloGEGTcvZbUsS6xKJOtV3y33DgzgDsRSRSd3Ir2DCzfIbo/
RJL3N0oCIraxdTTu/INbuexb0raZwhwpYred3BL8WwMYkI2glN5EsAnO4p5NNzSf
njw2aMVSTpqmHV3Uu+XvmYn1H9niELOGejS0H8RcG+XmH9spXH6SqumwUKQ+Vmab
AL2JHj6viS3tx8gOhN3+Zf3h+kFFHloeDRKKyVPdJ5dLbQnvKC4EpMxEeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKd07WeUPsdpHxD4+XVceIvYwFYdMB8GA1UdIwQY
MBaAFMjzdG4MawUxR7UqTvQMSMcKfxzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVBOMGJneHJCVEZIdFNwTzlBeEl4d3BfSE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82NzhhOTYtNjk1Yy00MTg3LTkwOTMt
MTBjNTQ2ZDc5YmE1LzEveVBOMGJneHJCVEZIdFNwTzlBeEl4d3BfSE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82NzhhOTYtNjk1Yy00MTg3LTkwOTMtMTBjNTQ2ZDc5YmE1
LzEveVBOMGJneHJCVEZIdFNwTzlBeEl4d3BfSE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfqEkc9+X
nTTuKeuMzjHa4c7Qeumc1aWGoVLFotDl5XvPwpHgv9Hsr7+7IScu/iWZZ1ypvOlq
tpBlcGOv3797uEfoYUj/tpblr+TsrsFPCQx9+/5BOSeCHTl8YO7UyTeplnywifs5
kpxR2LSixF/6AjtT8fZ1NZHGAVN6ZRpXmrWlWeSgnYJiQ1vojBWP3tkBEffOC/i+
Af7W6MOdBPDl8R09H4T08Hl7g8VjcWOHvNFvbxNXCVzl2zRR5EQ1+8gMUwvxQgV+
ZPGiTaC9T/clJhoaKk1pcpKI0Qv0wSMzb6FZzzwRz1abLklloUhdvsRvibQjGKnl
63h8aLWXWUvuIA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 05:50:27 2026 by rpki-client