Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
File:                     YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft (raw, json)
Hash identifier:          uahkdWTX3rXY5hFGW5Tor20aA1cWFMAddwAi1ntQJiE=
Subject key identifier:   6A:0B:E7:CA:B4:A0:7E:D2:95:01:AF:BF:13:0F:88:D4:75:C3:FE:5B
Authority key identifier: 61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3
Certificate issuer:       /CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
Certificate serial:       019D9C6305BBCCF4D1E7DAA49CF88EC0B4B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
Manifest number:          0F88
Signing time:             Fri 17 Apr 2026 17:00:28 +0000
Manifest this update:     Fri 17 Apr 2026 17:00:28 +0000
Manifest next update:     Sat 18 Apr 2026 17:00:28 +0000
Files and hashes:         1: YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl (hash: b6DzUSouxCht6bt+cyrfbJ3tKGvPPSzGOcFanRiUg50=)
                          2: ddYTOcOmB0o9lm0zE3zt2oO1U1g.roa (hash: hdKwDZDL26ytQwp0S8rV3Crlq4ka+0ODIpyfMgGOmSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:63:05:bb:cc:f4:d1:e7:da:a4:9c:f8:8e:c0:b4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
        Validity
            Not Before: Apr 17 17:00:28 2026 GMT
            Not After : Apr 18 17:00:28 2026 GMT
        Subject: CN=6a0be7cab4a07ed29501afbf130f88d475c3fe5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:85:bc:b8:20:aa:f8:16:69:e5:df:06:ab:b5:
                    3a:c3:ca:a1:49:10:31:d4:61:dc:f1:a7:34:d6:85:
                    49:bd:8e:e7:56:c5:64:fb:ce:8c:85:b3:91:4b:f1:
                    a4:8c:2e:47:73:f5:88:ab:9a:43:f9:3c:c5:1a:ac:
                    b9:fd:bd:e0:2f:f3:e6:f5:20:b1:a6:66:ad:be:48:
                    c5:1b:f2:67:ef:77:6c:10:09:ec:43:19:14:ea:1a:
                    b2:00:bf:f4:dd:26:b3:20:5b:a6:2c:ae:05:3b:f5:
                    9a:f0:0b:0f:12:6c:b2:28:1c:18:9b:46:96:0a:da:
                    a2:d5:b9:8b:13:f0:b7:bc:64:88:75:e8:69:7c:8c:
                    01:a0:45:ea:44:b2:79:05:e5:3c:57:9b:58:29:91:
                    98:50:7a:95:0b:71:72:e9:80:0e:f3:ed:02:f7:78:
                    d4:a6:61:f7:df:4f:0e:17:8d:1b:14:2b:e0:52:61:
                    b2:03:9f:78:44:95:c1:c6:ef:56:b4:ef:06:1b:98:
                    26:f3:b9:bc:6d:06:f2:e3:51:00:de:37:8f:1a:ed:
                    fc:5f:22:7c:2b:cc:cd:79:e9:64:81:74:c2:73:60:
                    d3:7c:54:11:2a:91:6d:02:a7:38:98:35:4b:db:e2:
                    a0:7c:09:33:d1:f4:92:27:96:51:18:44:2e:1e:36:
                    f4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0B:E7:CA:B4:A0:7E:D2:95:01:AF:BF:13:0F:88:D4:75:C3:FE:5B
            X509v3 Authority Key Identifier:
                keyid:61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:45:31:b2:a6:46:cd:0b:e6:e2:87:7d:bf:97:f3:34:d9:13:
         0a:b5:41:83:68:4f:16:4c:5c:46:07:18:8e:67:11:a7:5f:38:
         42:1f:40:d8:da:39:55:17:80:a1:7f:41:4a:1a:db:62:b3:2d:
         e1:a2:89:37:a1:0a:9c:b3:8a:e3:db:f5:d3:2e:8b:fb:32:12:
         12:62:98:c5:4c:38:55:57:a4:e8:c3:98:77:41:90:df:cf:91:
         65:17:57:eb:03:f4:82:ba:b8:10:ce:25:c2:cd:b5:93:a5:93:
         b5:c6:4c:16:30:5e:09:bb:54:13:3e:42:39:63:20:a3:5e:75:
         6e:8b:c1:9f:22:2d:84:48:6b:93:36:a3:66:12:99:38:8d:8c:
         b4:3c:42:c6:30:5a:e2:c1:47:bf:4e:1f:e5:3e:9e:1f:70:15:
         4b:e4:2d:bb:15:34:e5:7c:32:f0:a4:8d:7e:67:e6:d1:37:fd:
         90:e2:0b:aa:e0:a2:61:78:c2:bb:91:9b:8f:b1:c5:50:ac:4e:
         ee:a7:71:33:ff:36:22:48:af:57:0f:e3:0d:ee:15:65:85:61:
         9c:09:14:ea:9a:8d:17:ce:91:ee:7e:18:48:1d:47:af:17:b3:
         56:e0:8f:ba:67:36:69:f4:17:aa:e2:b6:a6:ea:a3:85:29:98:
         68:c2:23:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:40:28 2026 by rpki-client