Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
File:                     yjNIq_Fz0ndMiUIAjK321gEqPVI.mft (raw, json)
Hash identifier:          qyejrraUE6Qv6Qnzbxfqg8QPnTfTwBDUKGmuCBZwiJ0=
Subject key identifier:   97:48:ED:33:BA:80:11:64:51:9B:5B:09:83:2F:DC:2B:1C:00:EC:81
Authority key identifier: CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52
Certificate issuer:       /CN=ca3348abf173d2774c8942008cadf6d6012a3d52
Certificate serial:       019D9B515E887FB0D6FF3EF0EB9D51D2A804
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
Manifest number:          08B8
Signing time:             Fri 17 Apr 2026 12:01:34 +0000
Manifest this update:     Fri 17 Apr 2026 12:01:34 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:34 +0000
Files and hashes:         1: bYnmxW1SSsOpZ_UdEnwHgLbPMLE.roa (hash: xTGg5NX2D1kbyIr1y0FxLhbgTth/OEV0XdRYTihXaZU=)
                          2: yjNIq_Fz0ndMiUIAjK321gEqPVI.crl (hash: nHsyaQHg8nKnRDqs5IydQR5vX+OsVQXJCva45TZGLP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:51:5e:88:7f:b0:d6:ff:3e:f0:eb:9d:51:d2:a8:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3348abf173d2774c8942008cadf6d6012a3d52
        Validity
            Not Before: Apr 17 12:01:34 2026 GMT
            Not After : Apr 18 12:01:34 2026 GMT
        Subject: CN=9748ed33ba801164519b5b09832fdc2b1c00ec81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:12:03:5a:5a:e2:ff:53:77:c1:d0:16:a0:50:
                    35:10:7d:a5:e7:98:13:8d:f0:62:c8:de:20:ab:89:
                    50:3e:e2:00:b8:28:ab:de:6b:86:e5:89:8c:46:a1:
                    41:32:8b:1e:5c:fb:aa:77:6b:73:b6:3c:89:12:aa:
                    1e:c6:b4:55:5f:f7:80:8e:2e:cd:90:ea:e9:e4:df:
                    e7:e2:7d:02:20:a1:2c:7d:b2:ad:df:77:15:24:c6:
                    67:0d:51:aa:c5:e2:cb:1d:83:b9:7a:ca:e5:bd:fc:
                    62:a2:19:bc:d8:b9:e9:4f:f1:49:28:c5:0f:f8:9c:
                    69:9a:15:20:7a:a5:60:d7:c1:ab:62:16:bc:40:df:
                    6a:50:d4:47:ab:01:73:07:f6:45:48:14:9b:be:db:
                    15:57:fd:3f:8b:7e:18:13:41:94:0d:bb:5d:11:35:
                    d5:c6:04:2d:3c:5e:da:37:22:c1:4e:94:af:da:dc:
                    62:bc:86:09:88:7e:69:de:58:27:a1:9d:03:d6:98:
                    7c:3c:a9:f3:04:82:54:ed:6e:82:bf:fb:95:c9:d2:
                    d7:3b:ae:c9:bc:da:80:ce:08:b3:29:c0:46:7e:09:
                    1e:37:89:68:59:e7:d2:89:1f:c6:35:13:19:49:27:
                    39:96:55:9b:b7:11:46:02:1f:c6:55:c6:5b:dc:1a:
                    77:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:48:ED:33:BA:80:11:64:51:9B:5B:09:83:2F:DC:2B:1C:00:EC:81
            X509v3 Authority Key Identifier:
                keyid:CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:2b:46:f0:73:44:b4:7b:af:fb:40:f3:4f:4a:fd:91:04:29:
         c9:54:8d:c4:7a:e2:51:31:3b:64:51:bd:65:31:a8:46:a3:12:
         f9:b7:48:c7:71:5e:89:4b:50:0e:22:67:30:04:83:96:cf:f3:
         e3:38:96:5c:38:4d:9c:58:29:34:a8:e0:3f:14:ad:ac:6c:51:
         cc:f9:67:ef:dc:b8:90:27:a9:ee:b8:44:07:ca:ba:aa:a3:0b:
         79:6b:6b:f4:68:4b:90:ae:eb:07:f5:51:cd:d0:21:17:85:97:
         fa:94:7d:69:81:06:7b:db:8e:9f:4a:3b:58:c7:9f:70:43:81:
         64:89:17:c4:71:ff:a7:8f:67:04:67:3e:07:14:03:9e:e9:6d:
         ad:4c:5a:b9:83:dd:ec:6d:6e:7d:39:34:a2:2e:09:1d:70:52:
         07:68:bd:49:a4:10:a2:24:e9:da:69:7f:dd:d6:55:96:39:3b:
         f1:33:6e:04:b6:c2:20:e3:ab:5b:fb:68:82:ed:a0:ec:7a:ab:
         71:41:91:8d:a2:87:f8:78:cf:45:b5:c8:61:de:e9:36:84:59:
         14:8d:89:6c:f7:19:af:52:da:5a:34:6a:b3:63:fd:d7:f7:05:
         32:08:72:cb:eb:67:58:0b:1f:82:f3:20:4d:74:06:99:61:1e:
         95:1d:55:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUV6If7DW/z7w651R0qgEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzM0OGFiZjE3M2QyNzc0Yzg5NDIwMDhjYWRmNmQ2MDEy
YTNkNTIwHhcNMjYwNDE3MTIwMTM0WhcNMjYwNDE4MTIwMTM0WjAzMTEwLwYDVQQD
Eyg5NzQ4ZWQzM2JhODAxMTY0NTE5YjViMDk4MzJmZGMyYjFjMDBlYzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhIDWlri/1N3wdAWoFA1EH2l55gT
jfBiyN4gq4lQPuIAuCir3muG5YmMRqFBMoseXPuqd2tztjyJEqoexrRVX/eAji7N
kOrp5N/n4n0CIKEsfbKt33cVJMZnDVGqxeLLHYO5esrlvfxiohm82LnpT/FJKMUP
+JxpmhUgeqVg18GrYha8QN9qUNRHqwFzB/ZFSBSbvtsVV/0/i34YE0GUDbtdETXV
xgQtPF7aNyLBTpSv2txivIYJiH5p3lgnoZ0D1ph8PKnzBIJU7W6Cv/uVydLXO67J
vNqAzgizKcBGfgkeN4loWefSiR/GNRMZSSc5llWbtxFGAh/GVcZb3Bp3+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdI7TO6gBFkUZtbCYMv3CscAOyBMB8GA1UdIwQY
MBaAFMozSKvxc9J3TIlCAIyt9tYBKj1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWpOSXFfRnowbmRNaVVJQWpLMzIxZ0VxUFZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wMjY5MTQtMTYxMi00NWY0LWFjZGYt
MmFjYjlkMTdjMTFjLzEveWpOSXFfRnowbmRNaVVJQWpLMzIxZ0VxUFZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8wMjY5MTQtMTYxMi00NWY0LWFjZGYtMmFjYjlkMTdjMTFj
LzEveWpOSXFfRnowbmRNaVVJQWpLMzIxZ0VxUFZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWitG8HNE
tHuv+0DzT0r9kQQpyVSNxHriUTE7ZFG9ZTGoRqMS+bdIx3FeiUtQDiJnMASDls/z
4ziWXDhNnFgpNKjgPxStrGxRzPln79y4kCep7rhEB8q6qqMLeWtr9GhLkK7rB/VR
zdAhF4WX+pR9aYEGe9uOn0o7WMefcEOBZIkXxHH/p49nBGc+BxQDnultrUxauYPd
7G1ufTk0oi4JHXBSB2i9SaQQoiTp2ml/3dZVljk78TNuBLbCIOOrW/togu2g7Hqr
cUGRjaKH+HjPRbXIYd7pNoRZFI2JbPcZr1LaWjRqs2P91/cFMghyy+tnWAsfgvMg
TXQGmWEelR1VoQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:13:16 2026 by rpki-client