Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
File:                     DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft (raw, json)
Hash identifier:          zWcHVN3qUUdDS2RUsCy7HHtxOaB6myi5SRcYddozg1A=
Subject key identifier:   29:50:BE:2C:D3:D7:4E:D9:C0:3A:1E:CC:D4:94:9D:12:51:69:38:7D
Authority key identifier: 0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13
Certificate issuer:       /CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
Certificate serial:       019D992B8E17279D7B9C1DAC3B81108C0E83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 02:01:01 +0000
Manifest this update:     Fri 17 Apr 2026 02:01:01 +0000
Manifest next update:     Sat 18 Apr 2026 02:01:01 +0000
Files and hashes:         1: DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl (hash: 3PTrYoPA3m0Mv7a39IIIepTRGF2ZP1IjmKftK3qaBpg=)
                          2: F2NgD0J7Chi0Zbd5rqGjO-46YWk.roa (hash: Q4tSXaAj/bwVV1OOYIrvJVBH9gu35Ngrr0aFbaINwhs=)
                          3: l_v8wGpeNwC9ZT28Ti32qejrz7s.roa (hash: SMCRXOwObktZBcmY0uS3btTgWRJHeqMmgvai6F7iLh8=)
                          4: yYMXkwFPkhHhnq27U9C0g2iVLLU.roa (hash: pG/nzOeAPQH1MO2qwEL/sb+3+IlzWBXcFvkEbi8UJZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:8e:17:27:9d:7b:9c:1d:ac:3b:81:10:8c:0e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
        Validity
            Not Before: Apr 17 02:01:01 2026 GMT
            Not After : Apr 18 02:01:01 2026 GMT
        Subject: CN=2950be2cd3d74ed9c03a1eccd4949d125169387d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c3:a1:45:4e:8c:09:f5:e4:5d:10:7d:a4:2b:
                    5b:0f:45:dc:71:24:41:55:0e:04:30:0e:bf:80:b2:
                    04:b2:50:93:c7:c3:88:cc:5f:8b:70:6d:d6:9c:cc:
                    bf:18:bb:cf:0a:fb:c6:f1:39:9d:97:8b:85:eb:62:
                    ad:f9:24:e5:9a:44:9e:18:a7:bf:61:68:8c:4e:81:
                    97:0f:e1:7e:18:e6:e5:de:d3:c1:08:fc:67:32:b8:
                    fe:4c:bb:a3:ac:c1:af:c8:76:cc:44:7b:00:5f:91:
                    50:2d:4d:3f:a4:74:00:2d:a2:83:0e:2e:3d:7b:3b:
                    91:8e:d1:4b:3e:06:3e:80:2e:10:d6:88:53:65:75:
                    66:66:58:d5:98:68:1b:22:af:c3:55:7f:d2:15:e7:
                    a0:be:79:da:2e:30:cc:84:4d:df:f1:db:32:80:39:
                    88:38:60:1b:19:47:4f:7c:20:3b:f3:af:89:ae:d0:
                    d5:72:98:d1:03:84:cb:4e:f5:03:c2:c9:e1:19:c4:
                    87:98:dd:3f:66:51:17:61:72:aa:6e:0c:13:94:f2:
                    75:e6:02:ba:a5:c6:fd:ad:52:05:5e:c0:dc:8c:ac:
                    17:62:5e:b4:a4:af:62:93:88:20:25:bb:50:b5:62:
                    e6:96:b7:c8:fd:5d:50:9f:4a:ad:db:ac:05:98:64:
                    ae:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:50:BE:2C:D3:D7:4E:D9:C0:3A:1E:CC:D4:94:9D:12:51:69:38:7D
            X509v3 Authority Key Identifier:
                keyid:0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:10:b8:cf:d5:f0:26:17:be:57:6b:c3:34:fb:14:88:f1:d6:
         e9:b4:57:a3:4c:a2:34:e1:cb:7f:38:0c:2b:54:d3:0b:3c:8d:
         b3:41:63:b6:8e:0c:96:f9:c9:8d:52:b9:28:4c:be:35:75:a5:
         93:22:c7:b1:26:d6:81:68:ba:3f:d8:fb:ae:76:8f:49:ca:d2:
         f4:e6:19:4e:26:9a:4c:55:bf:c0:a9:c9:60:24:a6:b9:18:49:
         18:3e:f9:e1:7c:0c:b6:cf:d2:c3:f4:95:0f:eb:a5:96:40:12:
         b7:0a:26:26:4b:8c:50:27:1e:ad:60:41:47:7b:39:ab:b0:0b:
         c7:66:75:be:5b:cf:af:4c:28:06:72:97:24:1a:6a:51:e1:04:
         aa:97:cc:94:10:7d:22:84:82:57:a1:39:4b:1a:fe:75:77:83:
         d4:5e:8a:b3:57:6c:76:fd:a5:a4:4b:02:f4:52:38:3f:36:46:
         90:32:a5:b6:10:fd:d8:28:9c:09:d7:30:58:e6:eb:db:a8:8d:
         bb:a0:22:81:f2:f9:65:d5:4b:16:62:d5:e7:04:a4:5d:e1:0f:
         c0:60:23:6c:6b:4f:e3:0a:54:74:73:bc:83:9e:8f:7f:b7:ea:
         34:8e:65:9f:3c:bb:0e:49:bd:94:fa:90:96:06:ec:92:7c:dd:
         d0:a0:f8:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK44XJ517nB2sO4EQjA6DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOGNiZWU1MTk5MGYxZTA1YTlkMWRjMGMyZjJmM2E4YTM0
NzBjMTMwHhcNMjYwNDE3MDIwMTAxWhcNMjYwNDE4MDIwMTAxWjAzMTEwLwYDVQQD
EygyOTUwYmUyY2QzZDc0ZWQ5YzAzYTFlY2NkNDk0OWQxMjUxNjkzODdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsOhRU6MCfXkXRB9pCtbD0XccSRB
VQ4EMA6/gLIEslCTx8OIzF+LcG3WnMy/GLvPCvvG8Tmdl4uF62Kt+STlmkSeGKe/
YWiMToGXD+F+GObl3tPBCPxnMrj+TLujrMGvyHbMRHsAX5FQLU0/pHQALaKDDi49
ezuRjtFLPgY+gC4Q1ohTZXVmZljVmGgbIq/DVX/SFeegvnnaLjDMhE3f8dsygDmI
OGAbGUdPfCA786+JrtDVcpjRA4TLTvUDwsnhGcSHmN0/ZlEXYXKqbgwTlPJ15gK6
pcb9rVIFXsDcjKwXYl60pK9ik4ggJbtQtWLmlrfI/V1Qn0qt26wFmGSuIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClQvizT107ZwDoezNSUnRJRaTh9MB8GA1UdIwQY
MBaAFA2MvuUZkPHgWp0dwMLy86ijRwwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFl5LTVSbVE4ZUJhblIzQXd2THpxS05IREJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83NjNkOGUtMjA4MS00Y2Y4LWI2NWIt
MWIxZTc4Y2JiYjA5LzEvRFl5LTVSbVE4ZUJhblIzQXd2THpxS05IREJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83NjNkOGUtMjA4MS00Y2Y4LWI2NWItMWIxZTc4Y2JiYjA5
LzEvRFl5LTVSbVE4ZUJhblIzQXd2THpxS05IREJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjRC4z9Xw
Jhe+V2vDNPsUiPHW6bRXo0yiNOHLfzgMK1TTCzyNs0Fjto4MlvnJjVK5KEy+NXWl
kyLHsSbWgWi6P9j7rnaPScrS9OYZTiaaTFW/wKnJYCSmuRhJGD754XwMts/Sw/SV
D+ullkAStwomJkuMUCcerWBBR3s5q7ALx2Z1vlvPr0woBnKXJBpqUeEEqpfMlBB9
IoSCV6E5Sxr+dXeD1F6Ks1dsdv2lpEsC9FI4PzZGkDKlthD92CicCdcwWObr26iN
u6AigfL5ZdVLFmLV5wSkXeEPwGAjbGtP4wpUdHO8g56Pf7fqNI5lnzy7Dkm9lPqQ
lgbsknzd0KD4yw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:07 2026 by rpki-client