Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
File:                     YO9KF7jv9Fugs51HSWVX44j__lI.mft (raw, json)
Hash identifier:          FflshdBR4yWa/ZKDgo6EZJqhS+2mZM/iohGroHMS4nc=
Subject key identifier:   FB:3D:D9:33:E8:71:01:6F:21:B3:9E:43:71:F6:51:D0:92:B9:3F:21
Authority key identifier: 60:EF:4A:17:B8:EF:F4:5B:A0:B3:9D:47:49:65:57:E3:88:FF:FE:52
Certificate issuer:       /CN=60ef4a17b8eff45ba0b39d47496557e388fffe52
Certificate serial:       019DA5D4A14624E0CFCBD73E80BA4D23AA66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
Manifest number:          03AD
Signing time:             Sun 19 Apr 2026 13:01:08 +0000
Manifest this update:     Sun 19 Apr 2026 13:01:08 +0000
Manifest next update:     Mon 20 Apr 2026 13:01:08 +0000
Files and hashes:         1: YO9KF7jv9Fugs51HSWVX44j__lI.crl (hash: f+7cl0uKVUFPxMkpx8NgENGFCesH6zGKqI9cfbzJGic=)
                          2: bqQFNJsrG869RK3Nfbwr65mLsd0.roa (hash: lGIgTiJR2g5VC3z+XfnzZ2hEM7gGKI2STx8vdvlyfrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 12:11:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a5:d4:a1:46:24:e0:cf:cb:d7:3e:80:ba:4d:23:aa:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60ef4a17b8eff45ba0b39d47496557e388fffe52
        Validity
            Not Before: Apr 19 13:01:08 2026 GMT
            Not After : Apr 20 13:01:08 2026 GMT
        Subject: CN=fb3dd933e871016f21b39e4371f651d092b93f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fb:bf:c8:ab:18:48:15:05:3e:e7:56:33:da:
                    36:fd:5e:aa:8e:ea:97:bb:f2:dd:33:ed:2f:1e:55:
                    72:78:ee:77:cf:f1:8e:95:2a:2b:ee:a1:b2:c3:c3:
                    cd:5c:e0:72:63:02:67:40:0d:f4:d0:4b:7d:8b:9d:
                    dc:7b:7c:21:86:8c:49:7d:92:e4:41:31:41:ff:7d:
                    82:b5:37:ca:eb:47:6e:5d:05:53:ff:93:33:84:c8:
                    73:b8:4a:16:5d:e5:e0:bd:91:8c:55:85:ed:a9:e0:
                    b3:be:94:b6:61:20:88:1e:bd:72:3c:03:de:62:b5:
                    fa:67:c2:ca:96:f5:74:16:67:6b:51:65:4e:b8:24:
                    fd:fd:2b:c2:1a:13:4e:f3:08:43:2f:90:78:9c:3a:
                    db:08:9f:89:20:7b:0a:da:0d:07:ff:f7:7c:b7:45:
                    f5:e9:b3:5d:b2:da:02:02:90:6c:ea:bd:22:d7:19:
                    c5:98:fc:7c:a7:39:5a:98:13:76:dc:54:a0:b7:50:
                    22:46:cb:b5:77:ec:1b:01:46:1d:6b:6c:bc:d2:b9:
                    b7:ed:f1:08:e0:bc:02:63:be:44:a9:99:b6:e3:51:
                    95:b5:06:32:eb:f8:e8:44:9b:79:8d:4d:bf:62:1a:
                    bc:52:2c:d0:b5:00:b3:9f:34:1f:c7:37:8d:2f:2e:
                    09:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3D:D9:33:E8:71:01:6F:21:B3:9E:43:71:F6:51:D0:92:B9:3F:21
            X509v3 Authority Key Identifier:
                keyid:60:EF:4A:17:B8:EF:F4:5B:A0:B3:9D:47:49:65:57:E3:88:FF:FE:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:e6:30:28:a2:0b:20:f0:fb:c9:40:51:14:95:1e:86:4e:44:
         1b:c6:10:c2:b1:c3:af:72:05:5e:5e:cc:c3:d6:5c:b0:06:21:
         9b:15:49:c3:5e:9d:66:7b:3f:3d:7b:b4:86:c4:49:e7:0f:ad:
         7a:f7:7f:60:7f:d9:75:1b:87:fc:51:20:5a:ad:be:ab:ba:03:
         ff:c9:2c:4c:7b:1c:3c:db:b2:99:2a:37:b4:e6:53:5e:69:c8:
         91:8a:23:d1:ea:bb:40:c2:a8:b0:e7:6b:4d:2f:5e:8d:87:bf:
         66:d3:fa:f9:ae:ab:c9:6f:bb:64:97:75:1b:c3:57:23:28:dc:
         91:5c:3c:4d:91:41:87:13:2e:41:3b:eb:24:3b:d8:01:56:f0:
         fd:be:f9:bd:c4:46:9f:60:56:cd:85:03:a6:48:13:f8:ab:6f:
         7f:a8:a9:72:36:e2:78:91:d5:92:2d:98:97:c1:b6:37:dd:74:
         a5:32:3c:d8:bc:fa:32:74:e6:1a:c7:05:2e:5c:1a:b8:03:65:
         62:25:9c:81:e5:0d:8c:93:3f:3f:cf:c2:32:e3:67:b5:aa:d1:
         3d:17:7b:b8:01:2c:db:da:7e:74:ce:8b:cb:0b:42:f6:3d:da:
         d7:05:0f:48:d2:56:1c:86:89:63:ac:d5:d1:d8:10:86:85:78:
         8e:a3:55:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:12:08 2026 by rpki-client