Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
File:                     YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft (raw, json)
Hash identifier:          dfj9EX2ehFVmHuIkUJaycNxVfzhrLvRoLdwzA0UU14c=
Subject key identifier:   19:E0:78:47:B6:3E:1D:24:35:66:4A:17:20:63:9E:E8:68:1D:15:5E
Authority key identifier: 60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
Certificate issuer:       /CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Certificate serial:       019D988682A131CA8A4530A57D0CA1AE7B96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
Manifest number:          18C0
Signing time:             Thu 16 Apr 2026 23:00:45 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:45 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:45 +0000
Files and hashes:         1: YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl (hash: x1qQvmZiY6gnbV9CFRiTsSQsuVyRSm0Px9tKeIPtELk=)
                          2: gGpmcsWE1eZyNMee1NRlA1nhhvY.roa (hash: /R+1mDGIJPwiUjgMqzEayU7QgZR187J1ACp6m3yLtqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:82:a1:31:ca:8a:45:30:a5:7d:0c:a1:ae:7b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60077f22c6428bc889b365b006cb5248d4bf61cf
        Validity
            Not Before: Apr 16 23:00:45 2026 GMT
            Not After : Apr 17 23:00:45 2026 GMT
        Subject: CN=19e07847b63e1d2435664a1720639ee8681d155e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fa:32:d0:fb:83:9f:f2:fb:e4:62:0c:87:a1:
                    fa:96:d3:26:c5:07:84:ab:33:4f:72:e9:ae:55:7f:
                    eb:18:9f:41:11:52:2d:27:6a:b7:97:19:1e:22:99:
                    47:9e:d0:c0:05:d5:f2:57:91:5d:d9:40:6f:bf:39:
                    51:b0:59:99:67:b9:7c:7e:ec:a3:ff:bd:b2:67:74:
                    17:c5:cf:94:b0:62:2a:dc:ac:c8:90:c4:4c:94:64:
                    38:7c:9d:4e:57:f3:bd:36:22:67:0a:6f:29:e4:05:
                    0b:c5:75:92:e7:bc:4f:00:ca:cf:f9:c6:e8:aa:45:
                    ee:54:61:05:51:3b:e8:cb:79:89:4b:15:44:49:80:
                    9b:86:06:27:2a:fe:75:e4:dc:08:c4:44:38:99:c4:
                    8e:cd:cd:9b:c6:9c:fd:7a:99:00:e6:64:12:d9:73:
                    bd:f1:63:f3:b9:09:8d:54:32:71:28:1b:25:f8:99:
                    0c:27:34:46:c5:15:cd:b9:fd:4c:a7:e5:9a:1e:63:
                    0c:59:7e:d7:c3:13:74:01:09:4c:bc:ff:6f:65:1d:
                    bd:9a:77:cc:10:80:26:5b:24:20:c3:98:97:74:d2:
                    d5:ee:d9:19:78:c1:6c:3f:0b:67:59:17:cc:e7:5f:
                    f0:d8:e7:9c:18:84:e5:64:d7:68:6b:a7:21:83:c5:
                    81:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E0:78:47:B6:3E:1D:24:35:66:4A:17:20:63:9E:E8:68:1D:15:5E
            X509v3 Authority Key Identifier:
                keyid:60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:61:90:37:58:a1:b1:43:79:e3:4a:47:4f:d6:2d:bd:1d:aa:
         8b:1c:c2:0b:e4:66:52:84:f2:d1:86:07:00:3d:74:ad:27:db:
         d7:b1:10:7d:f0:6f:98:e6:e7:6e:70:da:9b:b3:01:9d:e1:03:
         2d:4d:6b:90:9e:b6:55:be:80:f1:6a:0e:98:d7:28:80:57:76:
         7c:ae:43:07:a9:34:ef:df:18:5a:02:b0:5e:e1:d6:c8:55:03:
         c6:75:a4:95:db:0c:e9:8d:6a:13:6b:b9:77:c9:cf:3c:48:6f:
         f0:99:f4:a6:fd:75:e9:19:13:13:b6:8b:a2:d5:f3:4b:ed:73:
         fc:11:df:e5:46:2c:92:23:55:27:88:4c:6e:c2:31:d0:d9:0e:
         58:0a:e7:c2:28:52:29:9b:75:2a:79:5f:b5:17:42:32:0a:e9:
         d4:60:a2:f0:cd:98:a2:78:b8:24:3f:d9:18:50:38:ba:39:c8:
         85:44:9c:08:06:d0:44:7b:ea:8c:d0:d7:3c:42:56:f9:d4:14:
         8d:08:e0:89:70:84:68:53:da:c8:a5:b0:6f:53:30:d5:62:5b:
         4a:b7:fd:50:d9:fd:f0:b3:1e:52:c9:ce:6d:06:ed:56:15:8c:
         99:d0:12:71:a5:34:8e:43:91:44:de:70:9b:9e:6a:8c:c9:bc:
         fa:c8:95:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:04:57 2026 by rpki-client