Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
File:                     YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft (raw, json)
Hash identifier:          TgQV/vfzAZxKp26YcN3TXOIrCzBUel/vwKOzk/y5Qwc=
Subject key identifier:   73:5C:0B:EF:5C:E4:03:35:A6:6C:E9:58:98:49:63:52:39:32:7D:3A
Authority key identifier: 60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
Certificate issuer:       /CN=6050099e335409db03ac1133d164f02a0d5dc66f
Certificate serial:       019D9C2C98B48B6BF60298F6023F1D9644F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
Manifest number:          0D6C
Signing time:             Fri 17 Apr 2026 16:01:01 +0000
Manifest this update:     Fri 17 Apr 2026 16:01:01 +0000
Manifest next update:     Sat 18 Apr 2026 16:01:01 +0000
Files and hashes:         1: YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl (hash: ijtweTTCNAjlAoJrGJnbtVhN7pUZ0YauZULLWDoK4ys=)
                          2: e2fLwwNnC7_gQ85Q33UfXuK3PBc.roa (hash: GaXv8AkKDgccbaFAmhisldDeR5nblYKbBIpd1n6r6Ec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2c:98:b4:8b:6b:f6:02:98:f6:02:3f:1d:96:44:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6050099e335409db03ac1133d164f02a0d5dc66f
        Validity
            Not Before: Apr 17 16:01:01 2026 GMT
            Not After : Apr 18 16:01:01 2026 GMT
        Subject: CN=735c0bef5ce40335a66ce9589849635239327d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:01:04:42:d5:0d:09:55:c6:ec:f8:72:9f:5a:
                    7e:11:26:45:02:cc:74:63:67:84:f2:2a:4e:04:84:
                    c8:7d:35:22:85:19:2d:49:45:a7:37:c1:b7:ee:1e:
                    21:ff:26:ff:23:26:2b:5a:f6:86:30:92:b7:ed:ae:
                    1f:f5:21:fc:42:d9:ba:df:3d:f1:6c:a5:30:06:1d:
                    e8:d9:3d:c5:e7:90:55:da:93:82:b7:a3:81:88:1b:
                    a5:56:d7:cc:de:62:df:38:bc:a6:56:8a:b6:76:c9:
                    a2:07:ea:af:1f:8f:1b:55:c7:e2:57:4c:e0:64:34:
                    d3:8b:c5:89:11:34:40:4c:d2:f9:cd:92:6b:d9:7f:
                    12:e4:27:10:9a:60:2a:a7:f8:8b:c5:f9:1b:99:e8:
                    f1:b6:b7:94:16:49:10:37:b0:55:97:b4:0b:f1:0e:
                    31:3f:2a:ae:c6:9e:60:56:c9:c1:ff:e2:4b:5a:0c:
                    99:7d:55:e2:17:96:70:a8:91:b1:2b:dd:56:ed:de:
                    70:19:0b:a7:c7:25:c8:f1:7d:77:88:5d:1b:da:90:
                    f2:b0:29:db:12:db:9a:93:70:27:f0:70:a1:fb:7c:
                    8b:f1:23:48:94:f9:6e:c3:85:92:85:b1:30:2d:bc:
                    66:cc:2f:79:4b:03:56:1f:41:1f:0c:41:af:27:b8:
                    15:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5C:0B:EF:5C:E4:03:35:A6:6C:E9:58:98:49:63:52:39:32:7D:3A
            X509v3 Authority Key Identifier:
                keyid:60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:53:39:2d:36:24:26:40:b5:ec:e0:fa:a0:63:2f:4f:73:7f:
         d0:a8:d8:3f:13:82:cb:3d:a1:0e:89:e1:64:8d:e2:a1:06:da:
         6c:3e:98:e4:28:e2:2b:e3:87:87:92:64:1c:3c:78:5b:e7:14:
         35:13:14:90:b8:39:3e:fb:63:ce:88:90:e5:4f:29:7c:03:5e:
         96:dd:66:59:7b:e8:45:6d:6d:61:cb:b1:19:2d:db:77:0d:e9:
         71:4e:61:69:45:fd:17:c0:ce:aa:65:b4:a0:d0:29:5e:ff:94:
         39:7c:af:a5:6b:d8:3d:8f:b8:72:44:43:bc:d9:5d:e9:4f:3e:
         af:06:93:c7:12:60:cf:fa:66:c2:11:a8:8c:79:e1:bf:c6:b0:
         5a:3f:7a:de:d4:ec:b7:a2:bd:5c:dc:43:c7:cb:e2:7d:c0:d3:
         02:6b:ff:14:82:e6:69:77:95:5b:73:b3:6b:dd:7f:cb:1e:e5:
         5a:7b:10:ea:62:6f:4b:6b:78:9d:3f:4a:35:ab:cd:1e:29:ac:
         43:d0:1b:46:b8:ae:c1:c9:ec:76:18:73:73:d7:a3:1e:2f:78:
         a0:51:31:6a:26:67:d1:2c:e4:39:87:56:b7:d2:4f:e6:15:7f:
         2f:21:54:fd:4d:34:0a:03:5f:6c:43:f2:c0:46:e8:74:e7:f1:
         1a:2f:9e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:30:12 2026 by rpki-client