Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
File:                     YEBzL9vKpSkA2yRiB1v07xUVlpU.mft (raw, json)
Hash identifier:          Ewu/+xsZBsC/MJcJfPx4qQuAOLPHychYXQRDPaVA6T0=
Subject key identifier:   70:63:BF:30:4C:42:D4:F1:4C:44:78:81:5A:3E:6E:DB:BE:D1:4D:C1
Authority key identifier: 60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95
Certificate issuer:       /CN=6040732fdbcaa52900db2462075bf4ef15159695
Certificate serial:       019D99D0C0C6A3776E40AD5EDA21C4D6D666
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
Manifest number:          0772
Signing time:             Fri 17 Apr 2026 05:01:27 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:27 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:27 +0000
Files and hashes:         1: PUDvpR_aiNzuJCBLk51UIXHyhYI.roa (hash: Sq53LfucALVr4BVz660/k9ccPDQx9/Vh4c8LAplhshQ=)
                          2: YEBzL9vKpSkA2yRiB1v07xUVlpU.crl (hash: 6jjxw5WOz6BTStvhmnsM2l/JImAqjmwrBEXpqG6dfNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:c0:c6:a3:77:6e:40:ad:5e:da:21:c4:d6:d6:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6040732fdbcaa52900db2462075bf4ef15159695
        Validity
            Not Before: Apr 17 05:01:27 2026 GMT
            Not After : Apr 18 05:01:27 2026 GMT
        Subject: CN=7063bf304c42d4f14c4478815a3e6edbbed14dc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ac:7a:67:7d:ca:e8:2f:f4:dd:92:b5:df:b8:
                    ad:29:26:9e:ac:52:36:cb:78:4c:6e:b4:74:55:10:
                    e8:cd:bf:3b:0e:d6:fe:d7:2d:68:b6:e4:50:f4:69:
                    d9:bb:b0:ec:5e:a6:90:8f:48:56:1f:e2:d8:9a:17:
                    ee:dc:57:c3:a7:d6:88:9e:16:05:fe:3c:af:49:78:
                    05:f5:32:8e:93:0e:aa:01:37:a5:9e:1c:5d:41:4b:
                    85:38:7c:5d:f0:78:5a:9f:27:50:16:91:97:4d:2b:
                    8a:42:9c:be:70:49:75:45:83:aa:fa:ae:7d:5d:0d:
                    c5:5d:4e:2c:17:6f:d1:24:75:ce:dc:3c:22:1a:84:
                    d8:c2:30:5d:2d:8a:2a:d9:99:39:7b:c9:0e:f6:93:
                    30:f6:c9:8f:5f:1f:34:db:ea:c4:83:41:25:72:c6:
                    a4:42:c1:e0:ba:ab:89:2e:f2:84:c5:5f:e9:0f:75:
                    65:6f:1c:1c:77:59:5a:48:3f:dc:24:61:b9:a5:ad:
                    e5:11:47:65:12:bf:08:09:2a:be:6f:46:98:c8:3d:
                    94:b4:e1:17:28:65:77:a0:4a:25:96:3e:a5:91:15:
                    fb:36:d2:91:66:d4:b6:24:f1:16:9d:f9:00:26:79:
                    16:0d:89:7d:63:84:30:a1:ca:32:e9:4f:6d:31:dc:
                    9d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:63:BF:30:4C:42:D4:F1:4C:44:78:81:5A:3E:6E:DB:BE:D1:4D:C1
            X509v3 Authority Key Identifier:
                keyid:60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:3d:0c:99:8b:08:ec:42:89:67:5e:d5:f8:8e:30:e1:9a:3f:
         81:82:0f:c7:a1:47:b5:f8:76:28:04:94:74:48:55:43:ae:28:
         79:b8:07:6d:cb:a3:05:41:8c:16:d9:d2:57:3b:3f:0e:f0:88:
         19:8c:23:80:5b:63:3f:f5:19:2d:14:6d:b1:d1:db:c8:bb:df:
         d2:a1:97:7b:e6:95:fc:46:eb:5a:7f:3a:a6:98:29:26:da:d3:
         f9:5d:bf:20:8e:df:d4:df:3e:f8:03:a1:c0:b8:db:40:48:be:
         e4:97:f7:c1:01:2a:7c:c8:8d:3d:05:46:9f:ff:ab:e0:ae:37:
         d8:2a:53:dd:02:9e:e4:6b:5f:35:fc:90:24:80:d3:68:d3:94:
         83:4e:af:4e:0e:f7:a1:b5:73:68:2e:03:c8:2a:90:11:b1:4e:
         57:b0:86:5e:01:62:85:7b:32:b1:d1:29:4a:ea:6e:1f:47:4b:
         f9:f7:e3:9f:05:c1:db:05:2c:06:ed:05:43:f9:2f:8f:fc:2f:
         51:6c:b5:0b:d5:ca:46:d2:21:ef:ba:17:5a:12:b5:39:a5:49:
         94:5d:b0:26:2e:99:e1:6d:7a:4d:1b:ac:cd:06:77:f3:c0:81:
         4b:2e:4f:b7:5b:49:e0:c6:c0:77:0b:6b:95:13:21:b7:38:cd:
         f0:88:d3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:30:33 2026 by rpki-client