Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
File:                     yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft (raw, json)
Hash identifier:          IOMi1lvvVGW0DOCu5TtGBpLeIy6QKWrxCUlO/ugioJw=
Subject key identifier:   5E:ED:E5:E1:ED:66:60:C8:A1:93:C5:66:A8:F4:99:F4:BE:B2:E4:FF
Authority key identifier: C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B
Certificate issuer:       /CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b
Certificate serial:       019DA30A12254450A5F2BD4421C34C6DBB36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
Manifest number:          18C6
Signing time:             Sun 19 Apr 2026 00:00:39 +0000
Manifest this update:     Sun 19 Apr 2026 00:00:39 +0000
Manifest next update:     Mon 20 Apr 2026 00:00:39 +0000
Files and hashes:         1: P3GL0lEPXHxX6ReXD2EE-N5BOPY.roa (hash: K1gHtEMD2Pdz0kCStDLaFagZHw3HfNCxhWsobTthfNg=)
                          2: yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl (hash: BnfK8TMBgMUQiNsZFgruPqiJQy+bEdX0H6zRxyKCtGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 00:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:0a:12:25:44:50:a5:f2:bd:44:21:c3:4c:6d:bb:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b
        Validity
            Not Before: Apr 19 00:00:39 2026 GMT
            Not After : Apr 20 00:00:39 2026 GMT
        Subject: CN=5eede5e1ed6660c8a193c566a8f499f4beb2e4ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:4c:8e:9e:13:3f:9e:22:a1:42:a3:9b:98:
                    1f:9e:bc:7d:8c:2e:0f:07:f0:6a:a1:84:88:de:27:
                    33:fe:3d:78:a2:9f:52:73:41:db:25:f7:ac:97:ae:
                    22:af:70:d5:18:1b:4a:88:34:f2:f6:36:e9:ea:11:
                    3b:ad:92:6a:db:20:64:b4:b2:60:8b:c5:93:c3:20:
                    8b:5c:18:74:e0:d2:d5:fd:ef:be:0f:9c:85:42:fc:
                    52:42:ef:bf:0b:f6:25:73:cf:d3:e6:2f:4c:4b:3f:
                    c0:2f:b9:9b:4c:df:86:af:4e:b5:57:f5:67:b3:97:
                    2a:d0:1f:89:93:b9:55:4d:0f:ff:50:b2:08:21:2f:
                    d0:ad:d2:6a:54:9a:17:00:24:16:36:85:b7:77:6d:
                    97:16:52:05:86:98:1e:3c:d9:3a:88:8a:c5:e1:1f:
                    8d:52:02:21:d2:49:01:19:98:6d:03:47:53:13:8a:
                    45:ec:c4:d9:88:3d:61:39:ed:ce:3d:45:aa:96:54:
                    f9:ee:55:0e:3d:6e:6f:87:a3:d2:9e:02:a2:5f:2e:
                    42:e2:80:1b:5d:1e:9c:38:11:02:39:0b:3a:56:74:
                    a1:60:3c:4b:3a:c1:c7:e6:0d:6f:74:56:66:55:34:
                    73:53:50:47:9f:6d:cc:25:b2:d2:5c:18:74:c3:93:
                    2d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:ED:E5:E1:ED:66:60:C8:A1:93:C5:66:A8:F4:99:F4:BE:B2:E4:FF
            X509v3 Authority Key Identifier:
                keyid:C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:fe:3a:a1:08:a2:a4:ee:e5:a4:78:48:ca:46:8c:1d:9e:20:
         d1:74:68:d9:ce:43:5b:ee:2e:cf:6f:f6:fe:85:b0:8a:49:15:
         50:be:d2:16:d4:35:eb:38:43:d7:35:66:ce:79:4b:b7:82:a9:
         be:a9:66:a8:f7:5c:72:f3:37:09:87:22:e4:88:97:47:18:e5:
         dc:43:34:24:fd:ea:ca:af:ad:5d:5c:a6:c4:3b:88:6c:ab:be:
         d7:9e:bc:62:e1:d3:f6:3d:d9:09:b2:ec:4d:b6:62:e9:0a:3d:
         b0:e7:3f:f4:61:04:66:12:63:49:64:67:5e:c1:2a:e1:b2:f0:
         7a:d2:d1:e9:d4:18:ce:6a:be:af:bf:5b:14:68:ee:e3:29:0b:
         7a:18:6b:af:e9:66:91:e3:75:23:77:0a:ac:06:70:75:de:a3:
         51:2a:95:fe:c2:2f:04:3b:66:87:35:6e:d5:9e:1e:bb:eb:1b:
         5c:66:ce:d8:37:9e:0d:0b:c0:ad:3c:89:f4:2b:b1:ce:ba:fb:
         19:ce:a8:7d:e0:2d:25:b3:30:6d:1a:72:90:b2:69:bd:db:fb:
         23:29:93:18:a6:99:c4:07:fa:b0:46:0a:7e:2b:db:c2:bb:06:
         0b:bd:78:7d:00:9c:f0:6b:09:ee:f0:3e:d9:b1:21:74:c3:c5:
         eb:7c:39:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:46 2026 by rpki-client