Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
File:                     Yap9YxOr3CfJLQulSehoP5qPFQ8.mft (raw, json)
Hash identifier:          v88LRSxVI389XNZDw0QEIeWV3l9kP68KL3jc73j7TlM=
Subject key identifier:   01:CD:5E:5C:21:1D:D2:50:E7:23:4B:E3:4E:7E:F7:12:0A:AF:01:EE
Authority key identifier: 61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F
Certificate issuer:       /CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
Certificate serial:       019DA378ACD7E23E5B85A960EE30CC43E2C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
Manifest number:          0831
Signing time:             Sun 19 Apr 2026 02:01:27 +0000
Manifest this update:     Sun 19 Apr 2026 02:01:27 +0000
Manifest next update:     Mon 20 Apr 2026 02:01:27 +0000
Files and hashes:         1: Yap9YxOr3CfJLQulSehoP5qPFQ8.crl (hash: Vh1edk5m6K0zA/34uPjTMBHLBtGQBp/GWQ59+tQGTkE=)
                          2: lx_m8lIf1dHw-IAcYKK_R-Ht8Qk.roa (hash: lr8Q0BYtKVvTJjMgHZk4vVtiuhJT4h3L6oT8ft8o5Tw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:78:ac:d7:e2:3e:5b:85:a9:60:ee:30:cc:43:e2:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
        Validity
            Not Before: Apr 19 02:01:27 2026 GMT
            Not After : Apr 20 02:01:27 2026 GMT
        Subject: CN=01cd5e5c211dd250e7234be34e7ef7120aaf01ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f8:49:e6:5f:78:0f:72:84:b5:a5:e2:8c:b0:
                    41:89:a2:ad:2b:4f:13:15:85:cc:47:e7:84:72:50:
                    1b:92:a3:ee:7a:34:b4:89:11:a6:21:6a:f0:a6:f4:
                    ff:41:fd:24:49:3d:7f:16:53:74:2b:f1:4a:41:6a:
                    8f:3b:dd:e7:63:f1:96:76:84:0c:e3:0b:0d:d1:42:
                    a5:25:cc:ef:dc:01:c5:e1:0b:c5:cd:d2:e6:d0:d6:
                    79:5d:6b:b9:a4:7f:9e:9b:54:0e:3f:c6:6d:9b:6f:
                    53:c2:fd:ca:bb:d0:b3:3f:14:6f:e6:ab:6f:c8:97:
                    27:bb:09:de:4d:1c:a7:ec:a8:6b:39:2e:3f:1f:1a:
                    6b:db:a8:f7:68:14:c0:46:c8:9b:0c:5c:f3:13:ae:
                    12:eb:7b:68:a5:49:b5:b2:4d:cf:29:99:a7:fc:3f:
                    a6:92:b3:91:46:f1:77:7c:63:f6:e8:78:20:89:8f:
                    8a:95:c9:c4:b7:c7:8a:18:fa:09:33:00:e7:3b:42:
                    8a:9e:32:cf:07:99:85:03:2f:15:1d:73:62:83:e3:
                    3b:a3:c7:b3:8b:bf:42:0c:8d:20:80:57:c9:41:5f:
                    26:8d:62:e0:0f:38:9d:01:12:1d:37:ac:72:b2:f8:
                    2c:4d:a7:71:4a:a4:8b:ed:e5:e0:ef:a1:8a:01:fd:
                    f0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CD:5E:5C:21:1D:D2:50:E7:23:4B:E3:4E:7E:F7:12:0A:AF:01:EE
            X509v3 Authority Key Identifier:
                keyid:61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:11:bf:40:ff:34:45:72:3a:5d:3e:62:4a:a9:42:48:40:d7:
         12:fc:8f:26:ef:d5:6e:4b:a0:42:69:f6:12:d1:fb:bd:26:ad:
         94:db:93:91:73:e3:bd:01:ff:77:b6:23:46:ef:71:ef:9a:ad:
         de:98:29:c1:87:97:56:9f:7f:fb:82:92:83:42:a6:a4:d6:e4:
         87:45:56:76:8d:47:e5:ea:53:49:9b:2b:77:96:7e:dd:64:ee:
         e8:63:9a:4e:49:5c:a9:51:a2:03:5a:d0:c6:61:84:0f:f0:89:
         05:05:43:48:9f:ed:74:a4:fa:1e:30:48:6b:b7:17:83:25:a9:
         7e:be:56:c9:8a:7d:dc:77:bc:77:b3:6f:07:58:a9:a9:b4:12:
         fd:d2:66:d1:f7:96:9d:2f:b8:8f:c5:9b:95:96:d6:02:94:eb:
         99:b9:30:0c:55:37:92:22:f5:bb:f6:3e:0b:e7:80:53:9f:46:
         3c:f8:93:b4:44:95:b9:95:cd:85:20:90:48:48:9d:45:87:39:
         7d:78:75:ea:7f:70:37:9a:f7:28:a9:e2:a9:6e:7f:7f:d9:f4:
         2d:99:8b:46:82:85:bc:3a:83:27:79:73:96:12:ea:7a:b2:ee:
         09:24:91:61:d0:c5:99:e3:75:c0:3e:ef:ff:27:09:b5:3d:d3:
         8c:a6:ef:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:21 2026 by rpki-client