Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
File:                     YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft (raw, json)
Hash identifier:          kJ0fBPgyLev24u+7u1PSo2Jx7sI/XS//4N+JdMycBmk=
Subject key identifier:   00:E2:3C:2C:6C:A2:7A:B1:94:A8:85:AE:38:5A:6E:E8:5B:63:3B:50
Authority key identifier: 60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C
Certificate issuer:       /CN=60c44dff71879863ea71442023b7f354dc3dad7c
Certificate serial:       019D9B5177DCAD7D75577AF7290C91A35E97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
Manifest number:          0927
Signing time:             Fri 17 Apr 2026 12:01:40 +0000
Manifest this update:     Fri 17 Apr 2026 12:01:40 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:40 +0000
Files and hashes:         1: CJowFgb4ICGp3Wfh7jHnULJU2M0.roa (hash: bL65BGdIxVmyrRBt+KdvOpVuUTY76scln+WxP6WN3rg=)
                          2: T5IQ4IhshTRiFenVlDb9H-uzNG0.roa (hash: 6i4yB4JY7PrncdZg9kkNq7TpPmD1RLEzHYX4D9lyu0U=)
                          3: YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl (hash: xBbUUg0nyn8NcDJUvgFpJDlxDodun8re4Ovhft/1dgI=)
                          4: yWjq8tMegtSp646tNouua0rKzbg.roa (hash: dzGbAHT2B+kr637o2+fV8atD4a06Lybf+LGMSMU8Kl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:51:77:dc:ad:7d:75:57:7a:f7:29:0c:91:a3:5e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60c44dff71879863ea71442023b7f354dc3dad7c
        Validity
            Not Before: Apr 17 12:01:40 2026 GMT
            Not After : Apr 18 12:01:40 2026 GMT
        Subject: CN=00e23c2c6ca27ab194a885ae385a6ee85b633b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f9:e4:f6:90:52:be:d1:eb:c5:f2:46:1f:00:
                    a8:2e:52:59:f6:49:a1:35:e8:3e:bd:4f:c5:48:b3:
                    ca:c7:78:9b:15:96:8e:00:c5:03:63:cd:85:94:a0:
                    09:2c:3c:b6:e9:a0:65:05:98:d7:56:56:79:05:4a:
                    5e:f8:45:59:cc:08:9c:e8:85:f9:0c:d2:37:b1:f4:
                    55:35:cf:e7:73:b9:77:21:f8:56:78:7a:23:20:4e:
                    bc:e4:73:4f:05:60:8f:f3:f0:5b:37:fe:de:ff:73:
                    db:11:98:9d:16:8b:f4:de:b6:02:be:53:7d:fd:f6:
                    19:2e:97:ad:e1:d3:32:bf:37:0a:dc:d1:be:e2:08:
                    e1:b6:ca:8a:b2:ac:2f:28:6a:ae:d0:08:9c:24:81:
                    1e:39:d7:b8:54:16:dc:0d:57:79:c4:c2:43:33:0e:
                    93:01:6b:78:81:57:85:5b:3b:75:1b:ce:68:1f:38:
                    e7:c3:89:6f:02:fc:ea:f2:00:e2:bc:9b:fc:d2:2e:
                    4d:71:2f:71:55:b4:94:57:eb:3b:ab:7f:4c:6b:d3:
                    6b:63:c7:b9:23:34:8f:fd:1f:5e:4c:0c:be:2d:39:
                    f1:21:99:24:99:4c:cd:0a:51:db:a9:27:1a:59:7e:
                    72:ae:80:af:18:a2:27:4a:a3:b9:8d:78:37:6d:4c:
                    90:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E2:3C:2C:6C:A2:7A:B1:94:A8:85:AE:38:5A:6E:E8:5B:63:3B:50
            X509v3 Authority Key Identifier:
                keyid:60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:26:8d:ac:74:19:da:49:2b:2b:10:90:f7:17:f7:6a:3e:c0:
         bf:9e:ff:86:8a:18:58:5d:f6:cd:15:95:13:b4:56:70:37:a4:
         0d:a7:36:79:b9:a6:08:9e:f9:2e:41:80:0c:df:be:ca:82:37:
         93:82:34:34:62:64:6f:82:34:51:4c:88:73:2d:60:30:5f:aa:
         1a:47:40:0b:d8:69:22:70:e4:cd:fb:d2:9a:fd:a2:2a:9d:cd:
         1d:dc:80:c9:62:ef:06:63:a4:9b:ec:e2:a0:03:1c:18:44:bd:
         de:b9:30:45:ed:b1:fb:06:28:dc:6f:59:e6:0d:e3:a7:a7:05:
         c4:b0:73:4b:fd:82:0c:9c:84:02:14:49:78:41:c4:81:99:5c:
         81:83:12:a5:c6:84:69:e2:1e:83:e3:b5:ca:03:70:d6:bb:e1:
         66:d9:e0:1f:a3:4d:1b:aa:85:4b:f2:e3:e8:5f:99:52:00:0f:
         d7:de:7a:34:03:1d:64:2c:d1:99:e0:b0:75:0d:8e:d2:93:84:
         8f:7f:f7:91:72:e8:05:1e:f1:d4:bc:a0:01:6b:db:73:1d:bc:
         b1:d5:34:af:fa:e1:a2:0d:a8:4e:e0:ee:0d:c0:47:c3:cf:9a:
         e4:a0:4c:36:51:87:07:b8:98:54:cd:fc:41:71:56:df:65:9b:
         d2:91:cb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:09:03 2026 by rpki-client