Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
File:                     ryNYW_zdBhypRuLZ6ouX5FucMdY.mft (raw, json)
Hash identifier:          K0zOpdwRX6uMS7kQaH4FcmibwZEUYLf2urZRwmowm/Q=
Subject key identifier:   34:70:58:2F:86:2C:1E:5F:E8:AF:F4:62:C9:6A:C7:DD:13:1F:13:20
Authority key identifier: AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
Certificate issuer:       /CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Certificate serial:       019DA29C2900331498E4ED412E03F7A428EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
Manifest number:          182C
Signing time:             Sat 18 Apr 2026 22:00:36 +0000
Manifest this update:     Sat 18 Apr 2026 22:00:36 +0000
Manifest next update:     Sun 19 Apr 2026 22:00:36 +0000
Files and hashes:         1: ECi1vnqUM-fxIfMgxs6Z6zPn5G8.roa (hash: vGQVzQW6eOz/ocuImvFOzh/r1Lw9xkrPt/351GBE1Vg=)
                          2: ryNYW_zdBhypRuLZ6ouX5FucMdY.crl (hash: b7dmHdzlOqxWxNR/mT0kn3XtmYMYpk3LOqN7RLf0K3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 22:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a2:9c:29:00:33:14:98:e4:ed:41:2e:03:f7:a4:28:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
        Validity
            Not Before: Apr 18 22:00:36 2026 GMT
            Not After : Apr 19 22:00:36 2026 GMT
        Subject: CN=3470582f862c1e5fe8aff462c96ac7dd131f1320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0b:d8:de:b4:fe:3b:7f:78:9d:11:56:d0:0c:
                    91:4b:44:1c:5a:df:6e:b2:5f:d4:15:0e:d1:f1:f1:
                    5f:c8:d2:f3:86:da:1e:3e:25:b7:64:fa:5a:5f:bd:
                    95:17:ff:f2:b5:96:8e:ac:79:63:54:e5:05:98:bc:
                    2d:38:ab:52:33:85:af:34:95:37:1e:c2:52:2b:f8:
                    e4:b6:21:48:3c:41:38:d7:f7:3d:a1:c9:d0:78:3f:
                    ca:a6:20:d6:1f:11:ed:1e:f0:d8:3d:63:b0:23:b9:
                    ff:0e:64:c1:f0:80:dd:e8:9f:c3:1f:ca:49:41:03:
                    d6:2d:42:24:6a:47:02:a7:60:b8:7e:56:14:b2:c9:
                    38:ec:92:74:e9:41:a0:fa:51:9d:53:2c:a4:56:d4:
                    f1:43:f4:9b:76:5b:2e:f9:fe:16:29:0c:ee:10:e2:
                    b9:f7:4b:9d:52:39:b6:21:2d:0f:61:17:23:06:cb:
                    da:07:1a:2a:24:f0:ea:34:7b:79:0f:d5:de:43:0a:
                    65:04:13:d8:63:1b:3c:4e:40:2f:90:fb:dd:bd:2d:
                    3e:ac:d3:1d:c5:de:fc:de:eb:8d:80:24:71:05:6b:
                    84:4a:1f:28:ad:cb:b6:08:6e:9a:9d:59:d2:32:8a:
                    62:f3:67:cc:4d:42:a2:2a:8e:1e:d9:3a:90:ae:0d:
                    9c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:70:58:2F:86:2C:1E:5F:E8:AF:F4:62:C9:6A:C7:DD:13:1F:13:20
            X509v3 Authority Key Identifier:
                keyid:AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:a2:20:2a:a0:2f:3c:99:a3:88:4e:d2:da:48:ad:02:66:ec:
         d9:96:0a:47:7c:47:4a:53:ab:51:6e:fb:23:56:54:0f:d5:f5:
         4b:4b:97:ac:b3:b8:d2:84:5c:aa:a6:48:93:f2:67:5e:54:6a:
         3b:2a:53:d2:f0:a0:17:9c:4f:70:db:74:f0:3f:d1:ca:d0:b8:
         94:fd:c6:a9:04:09:68:29:d3:46:44:6b:91:15:27:74:52:33:
         18:53:00:7b:9d:3a:1e:23:79:c6:0b:fa:ed:2c:cb:32:a6:a6:
         3b:ed:a0:b5:b9:fb:f9:c5:1e:c9:4a:83:40:f3:6c:9a:fa:dc:
         4b:89:df:3c:b3:e1:28:1d:f9:83:8a:5b:5d:14:03:03:f6:94:
         c8:c5:65:1d:64:6c:cf:05:e8:af:10:65:b3:4f:fc:39:c4:c4:
         03:a7:b1:57:75:c4:c6:26:87:d5:0f:f9:86:19:e8:e9:c0:cc:
         3d:00:27:37:89:c4:7c:02:68:7e:53:13:78:f5:13:3e:28:6f:
         e2:13:0a:f1:d7:96:39:8a:98:83:54:ca:44:f5:99:f5:ab:ce:
         1f:40:ef:e2:ac:0e:78:82:0b:46:b1:2e:20:c5:f3:0e:c1:72:
         9e:fd:78:f5:fd:43:ef:e7:73:f8:0e:25:d9:7a:5e:c8:e7:06:
         41:a9:57:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:59 2026 by rpki-client