Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
File:                     y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft (raw, json)
Hash identifier:          8Dplsiadfo+6BpSsY1AQc1vT0CvDWnnwVTqTVzsyb+s=
Subject key identifier:   67:5D:C6:80:73:63:D7:9A:1F:5D:20:1C:6E:BF:3A:F8:F1:50:56:E6
Authority key identifier: CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
Certificate issuer:       /CN=cb4d83a67fb35af88de83c1304c6743a51531361
Certificate serial:       019D9AABC087684C6EAAC8355EECECA00F9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
Manifest number:          0B40
Signing time:             Fri 17 Apr 2026 09:00:40 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:40 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:40 +0000
Files and hashes:         1: LBuMJhT9HI_N-o97AGqRNMobN2k.roa (hash: J1YinkBVmpDcd/nfyc1eO3Q9IO60Z11LEvtRdzK2OZo=)
                          2: kd0M99nX3mEAE8mM8gT2op45MsU.roa (hash: qbE/jcnwxy0lIpkGkzTB/U3L+6e4tnUzWLrv92qEK9A=)
                          3: wTlbzeF26X067XNQG4ixA_F7gss.roa (hash: mmrxsWqMHEhPszYdixQQAOjmiWohzdeiT/VZLFaDvkA=)
                          4: y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl (hash: M4w+aOwjV8xV61r0Hz/DWHUqhqkmOmp0AbcjNeSHzvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:c0:87:68:4c:6e:aa:c8:35:5e:ec:ec:a0:0f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb4d83a67fb35af88de83c1304c6743a51531361
        Validity
            Not Before: Apr 17 09:00:40 2026 GMT
            Not After : Apr 18 09:00:40 2026 GMT
        Subject: CN=675dc6807363d79a1f5d201c6ebf3af8f15056e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:da:49:0c:26:da:80:66:0e:a4:7b:43:fb:c5:
                    d6:4f:20:a1:d7:09:9e:73:1d:b6:fb:eb:5d:a8:9c:
                    f0:08:10:f9:e7:c8:d4:a7:71:49:b8:1b:b8:d0:fd:
                    46:37:0f:2e:a4:4d:14:3e:7b:e1:46:8c:94:90:5a:
                    96:7d:d4:8e:4f:5c:fc:3a:c7:ab:dd:fa:9e:e5:a9:
                    e5:55:4b:67:c6:38:e4:17:1b:b1:db:03:c7:91:5b:
                    33:06:d1:b8:ae:01:12:5d:f4:23:34:b7:d9:4f:bf:
                    4b:d6:af:ce:ec:ac:ff:ab:8f:bb:d0:1c:2b:20:2a:
                    35:3f:e9:45:65:f2:1d:7b:dc:af:33:80:72:40:00:
                    e0:b4:7f:72:b9:ff:70:77:bb:25:ae:98:c9:f9:a2:
                    a1:7c:a2:6a:dc:22:4a:54:67:19:4a:36:b8:73:9c:
                    51:83:ff:f0:46:1b:b8:00:63:e3:9b:54:44:9f:5b:
                    48:2d:48:6a:b6:df:44:e8:59:98:e8:53:2b:6a:56:
                    15:f7:ac:68:5a:c1:c9:3a:79:1e:8e:37:63:e4:bd:
                    11:b1:27:4d:f8:33:76:e9:36:a5:1c:68:ba:fa:c1:
                    bd:c0:c3:6e:00:12:bc:eb:76:5e:9f:85:c5:ea:bb:
                    2b:fb:1a:a4:b0:3f:a1:74:53:42:f6:4e:1d:5c:89:
                    6d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5D:C6:80:73:63:D7:9A:1F:5D:20:1C:6E:BF:3A:F8:F1:50:56:E6
            X509v3 Authority Key Identifier:
                keyid:CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:67:ac:97:4a:b3:66:7f:62:f9:83:a3:26:0c:c5:56:11:7c:
         88:f8:35:8a:6b:05:01:3b:88:0f:2c:20:bd:4b:23:15:14:51:
         55:0e:ce:08:51:de:57:73:65:36:39:ff:7b:d1:af:d5:62:bb:
         86:3c:d0:53:e9:8a:72:e2:f5:22:39:89:fe:92:1b:35:e2:35:
         e6:0a:4c:86:fb:66:21:00:d9:26:a3:a4:3b:d7:9c:6b:14:85:
         97:91:48:56:2c:fb:f9:f8:53:a1:b3:9b:c9:26:a5:ee:81:18:
         62:0a:f3:99:b5:8c:87:db:31:e8:5f:e2:3c:57:b1:77:5e:36:
         60:eb:d1:05:d3:0f:02:ee:83:47:ec:a0:3a:0e:69:16:42:43:
         4d:3a:c3:ff:83:f6:26:06:64:4a:49:1b:00:1e:70:c0:87:61:
         d3:ae:27:35:a8:78:89:96:a8:95:c0:96:de:d4:52:37:ec:ae:
         e7:e8:9c:12:45:40:8d:45:4c:a7:2a:81:b4:f7:7c:b2:d0:b0:
         56:0c:a1:66:2e:a6:06:ab:46:0f:14:e6:f8:6c:37:af:e2:c9:
         1b:d4:9b:3b:a9:40:78:1d:f6:fe:cc:34:da:f9:c3:c7:93:93:
         9c:93:2b:39:dc:eb:26:65:48:30:63:8b:80:30:7b:11:3a:8e:
         d8:07:cb:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq8CHaExuqsg1XuzsoA+aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNGQ4M2E2N2ZiMzVhZjg4ZGU4M2MxMzA0YzY3NDNhNTE1
MzEzNjEwHhcNMjYwNDE3MDkwMDQwWhcNMjYwNDE4MDkwMDQwWjAzMTEwLwYDVQQD
Eyg2NzVkYzY4MDczNjNkNzlhMWY1ZDIwMWM2ZWJmM2FmOGYxNTA1NmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9pJDCbagGYOpHtD+8XWTyCh1wme
cx22++tdqJzwCBD558jUp3FJuBu40P1GNw8upE0UPnvhRoyUkFqWfdSOT1z8Oser
3fqe5anlVUtnxjjkFxux2wPHkVszBtG4rgESXfQjNLfZT79L1q/O7Kz/q4+70Bwr
ICo1P+lFZfIde9yvM4ByQADgtH9yuf9wd7slrpjJ+aKhfKJq3CJKVGcZSja4c5xR
g//wRhu4AGPjm1REn1tILUhqtt9E6FmY6FMralYV96xoWsHJOnkejjdj5L0RsSdN
+DN26TalHGi6+sG9wMNuABK863Zen4XF6rsr+xqksD+hdFNC9k4dXIlt0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGddxoBzY9eaH10gHG6/OvjxUFbmMB8GA1UdIwQY
MBaAFMtNg6Z/s1r4jeg8EwTGdDpRUxNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83ZTkwYWMtOTBjZi00NTIzLThmOTct
MzE2NjBjMjJkMTllLzEveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83ZTkwYWMtOTBjZi00NTIzLThmOTctMzE2NjBjMjJkMTll
LzEveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2esl0qz
Zn9i+YOjJgzFVhF8iPg1imsFATuIDywgvUsjFRRRVQ7OCFHeV3NlNjn/e9Gv1WK7
hjzQU+mKcuL1IjmJ/pIbNeI15gpMhvtmIQDZJqOkO9ecaxSFl5FIViz7+fhTobOb
ySal7oEYYgrzmbWMh9sx6F/iPFexd142YOvRBdMPAu6DR+ygOg5pFkJDTTrD/4P2
JgZkSkkbAB5wwIdh064nNah4iZaolcCW3tRSN+yu5+icEkVAjUVMpyqBtPd8stCw
VgyhZi6mBqtGDxTm+Gw3r+LJG9SbO6lAeB32/sw02vnDx5OTnJMrOdzrJmVIMGOL
gDB7ETqO2AfLIg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:42:20 2026 by rpki-client