Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
File:                     yJwsxInr5I9JBYSshm_jYsQRfnU.mft (raw, json)
Hash identifier:          t0zVKJ3/jrZ0bc6If2hFyxFkbmCTynXqfxbLXn8BoFc=
Subject key identifier:   2E:60:C3:52:B8:34:9D:06:41:35:18:F9:38:EB:0A:49:AE:3C:6D:C5
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Certificate issuer:       /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial:       019D99D027D80E062927E1690C341750F245
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
Manifest number:          15DE
Signing time:             Fri 17 Apr 2026 05:00:48 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:48 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:48 +0000
Files and hashes:         1: F71lf1rO3_j_YrGDLp8vXCnWwNQ.roa (hash: 2T6cEG+G6vR7CgItj3CD3tb1JHo1M1LaioFUbAKMaFQ=)
                          2: KbGZziqCA41JgOpe8AUOSiv8rIM.roa (hash: MBAhT/6sVckMLfrlu1S3S4sTHwbcNuOAQSyBUhp+xNk=)
                          3: Lr_Xbb1THDKqD6RwPgUdUA9h3EY.roa (hash: cfMlImvmxi+0oJBR3nteg7NdpbusKTlCxQY6ByRViVA=)
                          4: Wgv3nP3KPCzK8Vc3Ujwc5tCZFEY.roa (hash: sZiUtGsuan8lIISLSvNoUUBLxQveJeIACDPYwQFWZys=)
                          5: ZkNagawyRZ70RDIXLqeICJ_NWvA.roa (hash: 1+wxgjSOWcm3+O0IK2qUtncsQ8Yyn6qzh3/LjTc9BqU=)
                          6: ba1PPFUfJQPbN0qUaPYUh_lra00.roa (hash: io880q/jxrQW2nbvQeP7+TanhHJv6EExV9pj2tnHEls=)
                          7: fotaW3reFeI2SLYUxkvM2Rp9oWU.roa (hash: 6ry4szc/4WpgdCqU6mLC/W0kQtFV5fQ4EQEyOj83ctw=)
                          8: yJwsxInr5I9JBYSshm_jYsQRfnU.crl (hash: GGOohgzBiZ27HRE/Vr9MuOFxL3k7czwfId37r/22wKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:27:d8:0e:06:29:27:e1:69:0c:34:17:50:f2:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
        Validity
            Not Before: Apr 17 05:00:48 2026 GMT
            Not After : Apr 18 05:00:48 2026 GMT
        Subject: CN=2e60c352b8349d06413518f938eb0a49ae3c6dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a2:cd:da:33:46:40:37:49:9c:5a:e0:d5:99:
                    43:e4:63:e2:8f:42:fa:0f:e4:cc:d7:87:9a:02:1e:
                    7e:81:52:3e:d4:e2:15:c1:fc:dc:ee:7e:b4:a8:91:
                    42:08:68:50:97:ab:2f:03:1c:fc:fd:07:aa:79:49:
                    8a:4c:e3:76:b8:c4:6c:18:8f:c1:ff:fc:a5:be:83:
                    e6:aa:1d:22:62:1b:34:3a:a8:18:bc:f1:14:f3:2e:
                    9e:94:44:25:58:d2:07:0f:f5:ba:ff:c3:a4:4d:8e:
                    53:80:fb:a5:c2:e4:f2:91:fe:03:9f:05:3e:2e:e0:
                    99:4c:55:0f:c1:49:17:5f:e4:90:08:bc:7e:b4:2b:
                    be:89:38:23:da:fc:03:84:de:0a:e4:bf:3d:3e:78:
                    0f:68:15:41:3a:6d:09:99:5b:60:a6:fd:a1:97:13:
                    1b:05:59:26:86:5c:c5:49:25:1a:07:64:86:ef:87:
                    06:e3:ad:ee:72:e1:3b:aa:bf:61:22:a6:04:bc:19:
                    0c:7a:fc:79:d1:5e:b1:c5:d6:43:33:3f:cb:c2:a7:
                    40:12:d4:03:0b:30:f9:5a:2e:6b:28:df:04:5d:0f:
                    17:16:46:e1:3c:91:5e:78:e9:b7:0b:84:34:41:4c:
                    71:e6:a5:31:65:47:e1:8e:34:ac:55:11:04:e9:a8:
                    c2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:60:C3:52:B8:34:9D:06:41:35:18:F9:38:EB:0A:49:AE:3C:6D:C5
            X509v3 Authority Key Identifier:
                keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:fa:c8:8c:38:a8:13:18:e3:09:f4:98:01:36:f6:3c:af:84:
         2c:2f:08:98:04:0a:5c:d1:93:89:a2:f7:2f:5a:a8:4b:93:be:
         1a:b7:63:97:2d:5f:9b:ac:40:1a:c6:44:c2:06:95:61:b3:ca:
         c5:a4:29:66:21:72:90:f0:41:f4:e2:ba:0b:a1:a5:fd:71:a0:
         6e:f6:90:9a:71:09:7c:b4:2b:a2:e2:34:b1:8e:31:04:a6:10:
         01:c2:82:c8:7d:b8:20:d6:1c:ec:0e:f3:59:2f:1e:ff:b0:97:
         52:b6:f5:d6:8d:36:a6:73:cf:aa:e7:99:4d:f6:e7:eb:7f:19:
         00:94:fb:9a:c5:b1:12:59:23:d9:88:43:2e:2d:f7:82:3a:72:
         7c:58:3f:8f:4b:e6:d1:67:81:45:1e:72:ec:5c:9b:b4:12:74:
         8b:a2:e8:81:62:e6:c3:4a:c2:81:7a:f3:62:79:2a:d6:f9:1c:
         b2:94:cd:79:4a:a1:5c:c7:17:d0:cb:8c:c2:a6:a6:f4:a3:a1:
         a9:dc:d5:fe:95:7a:cf:f1:71:e8:fd:85:44:29:c6:f1:ea:0f:
         7e:80:7d:63:3f:05:96:3e:3a:95:72:02:6e:14:35:16:2a:fa:
         54:49:11:4d:0f:90:44:84:f1:40:b4:51:6a:ce:7b:1d:45:64:
         9e:ec:ce:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0CfYDgYpJ+FpDDQXUPJFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4OWMyY2M0ODllYmU0OGY0OTA1ODRhYzg2NmZlMzYyYzQx
MTdlNzUwHhcNMjYwNDE3MDUwMDQ4WhcNMjYwNDE4MDUwMDQ4WjAzMTEwLwYDVQQD
EygyZTYwYzM1MmI4MzQ5ZDA2NDEzNTE4ZjkzOGViMGE0OWFlM2M2ZGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKLN2jNGQDdJnFrg1ZlD5GPij0L6
D+TM14eaAh5+gVI+1OIVwfzc7n60qJFCCGhQl6svAxz8/QeqeUmKTON2uMRsGI/B
//ylvoPmqh0iYhs0OqgYvPEU8y6elEQlWNIHD/W6/8OkTY5TgPulwuTykf4DnwU+
LuCZTFUPwUkXX+SQCLx+tCu+iTgj2vwDhN4K5L89PngPaBVBOm0JmVtgpv2hlxMb
BVkmhlzFSSUaB2SG74cG463ucuE7qr9hIqYEvBkMevx50V6xxdZDMz/LwqdAEtQD
CzD5Wi5rKN8EXQ8XFkbhPJFeeOm3C4Q0QUxx5qUxZUfhjjSsVREE6ajCdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5gw1K4NJ0GQTUY+TjrCkmuPG3FMB8GA1UdIwQY
MBaAFMicLMSJ6+SPSQWErIZv42LEEX51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEt
YWYyY2ZhNjIyZDE4LzEveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEtYWYyY2ZhNjIyZDE4
LzEveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmvrIjDio
ExjjCfSYATb2PK+ELC8ImAQKXNGTiaL3L1qoS5O+Grdjly1fm6xAGsZEwgaVYbPK
xaQpZiFykPBB9OK6C6Gl/XGgbvaQmnEJfLQrouI0sY4xBKYQAcKCyH24INYc7A7z
WS8e/7CXUrb11o02pnPPqueZTfbn638ZAJT7msWxElkj2YhDLi33gjpyfFg/j0vm
0WeBRR5y7FybtBJ0i6LogWLmw0rCgXrzYnkq1vkcspTNeUqhXMcX0MuMwqam9KOh
qdzV/pV6z/Fx6P2FRCnG8eoPfoB9Yz8Flj46lXICbhQ1Fir6VEkRTQ+QRITxQLRR
as57HUVknuzOUA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:16 2026 by rpki-client