Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
File:                     YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft (raw, json)
Hash identifier:          8EA+nRSt1k9uEUcfcSxXgSUZJAOrIP4DTl0o1HiqQ9k=
Subject key identifier:   27:C3:09:F0:79:15:E5:F7:A7:73:9E:76:54:3A:1D:D1:23:8F:EF:0B
Authority key identifier: 60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
Certificate issuer:       /CN=60bff94704e4a475374e170cbe17365fa89fe07b
Certificate serial:       019D9AE36B4C2A66154EA42533A064B6CAE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
Manifest number:          14CB
Signing time:             Fri 17 Apr 2026 10:01:28 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:28 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:28 +0000
Files and hashes:         1: Ciy2fNIQW721fMsDhCb-VtXGBFw.roa (hash: XXBlf4gWy3TZJvapRvU6gO8Rcd2sHCwCt2ib04wAeps=)
                          2: Wldr-eNyg4Fo_ylLob-Hp7fcw88.roa (hash: wf6Ot6Ex/s7myo+jesSKrN1q9D7ZqoW374UIQ9ocJss=)
                          3: YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl (hash: t2JI7xY5mEEo5VBYyW+dbaIzomwrXgYy+MlTnckSODc=)
                          4: mYGac8UdKtYiejjIP-FXgbBItOo.roa (hash: zhSZcg/Pm9sDKqIKNxnWpvUr1PBvScF8Xahp3flsYl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:6b:4c:2a:66:15:4e:a4:25:33:a0:64:b6:ca:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60bff94704e4a475374e170cbe17365fa89fe07b
        Validity
            Not Before: Apr 17 10:01:28 2026 GMT
            Not After : Apr 18 10:01:28 2026 GMT
        Subject: CN=27c309f07915e5f7a7739e76543a1dd1238fef0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a2:00:0f:a4:78:85:2d:35:09:ba:ca:fc:d1:
                    75:87:0f:2b:3c:aa:58:3e:bb:40:4b:b1:80:7b:8e:
                    ee:b2:69:9a:6b:9e:40:9c:62:8b:f2:fb:6e:b0:f1:
                    d2:81:f3:bf:44:28:20:0e:a5:fe:88:3d:1e:2f:7a:
                    59:fd:cf:3f:e8:43:c7:56:b7:52:b9:c0:af:ff:e1:
                    09:a1:9e:86:5d:6d:13:98:14:e3:9e:69:7a:27:f9:
                    86:34:8d:d8:ff:e2:d7:d3:53:15:94:5d:19:17:42:
                    39:4a:03:04:07:68:73:c5:cb:80:6a:ad:ac:01:35:
                    8a:63:0b:ca:15:45:f8:d9:11:ff:b2:95:a5:d8:4c:
                    9a:0e:a4:a3:4d:02:4c:6e:79:21:93:76:8b:dd:0a:
                    be:0b:3d:12:ab:2a:d5:83:ec:82:a0:1d:28:2b:57:
                    7a:25:50:c2:1a:b1:6d:1d:44:12:fa:55:eb:6f:fc:
                    43:ca:42:3b:c8:b3:35:c6:03:2a:53:d5:00:48:0d:
                    80:79:db:7f:79:d2:71:e1:11:57:39:6e:1a:47:91:
                    4a:9d:ec:62:ff:42:c7:e4:a8:5f:74:f1:fe:9c:52:
                    a9:1c:35:27:e9:2e:49:51:cd:d7:09:4f:56:55:c9:
                    37:a7:5c:c8:b3:b8:08:00:a5:7e:7a:bf:46:82:3e:
                    95:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C3:09:F0:79:15:E5:F7:A7:73:9E:76:54:3A:1D:D1:23:8F:EF:0B
            X509v3 Authority Key Identifier:
                keyid:60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:35:ce:12:01:94:40:20:63:a3:32:f5:3d:4f:6b:22:5e:ba:
         7e:eb:a0:3e:d1:f1:22:c7:34:90:c0:d4:c4:ed:3d:e9:a9:ba:
         6c:dc:fe:88:91:f3:70:f0:63:d7:71:e4:9c:3c:7c:7b:fd:28:
         10:ed:f0:ac:16:df:60:82:af:cb:af:4a:92:26:fb:e6:ab:20:
         61:08:6c:5f:ca:a7:bf:79:7a:1d:56:73:5a:2c:2e:01:96:68:
         84:8c:49:1f:63:c8:b3:e8:b7:e7:d3:5c:43:73:6d:cd:25:28:
         5d:5a:08:c7:b0:c0:00:4b:32:d0:1e:06:a5:f0:e6:54:5b:d0:
         53:86:b7:04:f5:1e:a5:31:07:1f:ca:7a:91:a7:3b:3f:e8:ad:
         a6:04:f0:f5:d9:3f:cd:99:e3:96:5d:94:f9:e8:cc:de:6b:6f:
         b9:ba:96:3e:e8:54:2c:3e:39:22:71:0d:a4:a2:6a:0c:4c:43:
         f5:63:85:0c:bc:ac:bd:d9:1a:28:4f:8d:63:32:64:6f:48:c9:
         96:f7:44:90:a2:b2:d3:68:dd:f4:ac:b6:db:96:65:de:a1:e4:
         71:b1:32:8c:43:c4:bf:90:cc:fb:52:32:ff:5f:ef:e5:95:dd:
         fd:3c:17:4b:34:86:51:8d:7a:1f:0d:bb:e6:6e:91:83:8a:02:
         d5:0b:81:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:44:00 2026 by rpki-client