Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
File:                     YO9KF7jv9Fugs51HSWVX44j__lI.mft (raw, json)
Hash identifier:          4k127oVbhJXJLyo5xm56WAn4GQEOJEMk+9QOT5xoOm4=
Subject key identifier:   C5:88:3D:18:B9:D1:13:A1:24:8A:ED:34:AA:11:93:6A:B5:31:14:05
Authority key identifier: 60:EF:4A:17:B8:EF:F4:5B:A0:B3:9D:47:49:65:57:E3:88:FF:FE:52
Certificate issuer:       /CN=60ef4a17b8eff45ba0b39d47496557e388fffe52
Certificate serial:       019DA3E64C84D1675B015340AF7367C0A6CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
Manifest number:          03AC
Signing time:             Sun 19 Apr 2026 04:01:12 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:12 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:12 +0000
Files and hashes:         1: YO9KF7jv9Fugs51HSWVX44j__lI.crl (hash: k0Cej+HZujWxmCanzwNfSqq9Jp8ly2b68kltX/siSCQ=)
                          2: bqQFNJsrG869RK3Nfbwr65mLsd0.roa (hash: lGIgTiJR2g5VC3z+XfnzZ2hEM7gGKI2STx8vdvlyfrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:4c:84:d1:67:5b:01:53:40:af:73:67:c0:a6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60ef4a17b8eff45ba0b39d47496557e388fffe52
        Validity
            Not Before: Apr 19 04:01:12 2026 GMT
            Not After : Apr 20 04:01:12 2026 GMT
        Subject: CN=c5883d18b9d113a1248aed34aa11936ab5311405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c1:76:8c:1f:a5:99:15:fe:f3:eb:48:a6:2a:
                    43:90:c9:15:81:70:37:0f:2b:bb:54:2c:a1:cb:2a:
                    0b:4e:87:7c:dc:f1:d1:b3:30:27:6c:39:de:9a:48:
                    06:56:39:91:87:2d:79:00:59:e5:57:0f:80:a0:e6:
                    7c:07:3a:ef:c9:29:21:dc:df:49:d5:3f:cf:f7:c6:
                    8c:77:f8:f1:ca:75:40:80:a9:b8:5b:39:1b:a5:a9:
                    28:18:01:f3:d2:ce:05:31:1a:6e:8f:22:de:61:fe:
                    f9:89:47:65:38:99:bd:49:7e:84:5b:f4:82:c0:13:
                    a2:c8:f8:92:cc:e3:1a:4a:95:0b:22:eb:3a:0b:1b:
                    4a:8d:13:0d:fb:f3:f7:2c:4a:66:bc:a4:29:09:ee:
                    bb:af:3f:ef:b8:c0:0e:41:8c:9e:53:59:81:11:4c:
                    e2:2f:47:51:70:f8:92:b1:7f:e1:a7:a3:1b:ca:50:
                    c0:ba:2d:07:50:23:19:2a:c1:48:b2:ef:00:6c:35:
                    b0:86:0c:89:ae:6a:da:69:61:f2:bc:d1:3d:5a:8d:
                    a0:2f:99:fb:12:3f:47:2c:30:c3:40:14:cf:73:51:
                    5d:43:7a:ae:4d:22:a1:eb:e7:ed:c9:24:d6:61:76:
                    a4:90:fd:25:d7:79:25:75:e7:27:82:c7:4a:97:25:
                    85:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:88:3D:18:B9:D1:13:A1:24:8A:ED:34:AA:11:93:6A:B5:31:14:05
            X509v3 Authority Key Identifier:
                keyid:60:EF:4A:17:B8:EF:F4:5B:A0:B3:9D:47:49:65:57:E3:88:FF:FE:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:74:84:12:c0:14:a4:ac:9d:ad:c4:d4:e5:09:e5:30:30:18:
         89:d5:cf:16:f0:24:20:9c:42:2d:da:75:b5:2e:fc:31:19:d2:
         8a:15:c9:ab:1c:59:f4:97:17:04:9a:ed:33:c0:4e:d1:c0:68:
         dd:7a:5e:61:bf:03:0b:00:9d:cb:f3:cd:ea:53:3c:0e:cc:ed:
         75:99:b7:4c:72:85:0f:86:22:18:59:51:a9:c0:52:37:46:65:
         9c:4b:15:8d:4a:c1:20:a4:4c:ce:95:46:35:94:9c:80:f9:02:
         ac:6b:ab:a3:31:cb:bc:af:b4:93:c1:87:8b:0f:7f:a3:42:50:
         18:48:d0:93:78:08:fd:da:4d:5a:56:4c:2c:83:74:dc:db:b7:
         f2:4a:5a:5e:f5:3e:a3:d5:ad:44:ce:d8:6f:c4:4a:ff:73:be:
         4e:e0:c2:5f:9c:31:12:91:e9:7c:b3:d4:f8:02:5b:04:2e:e6:
         2b:ab:44:78:38:4d:fb:28:5f:84:06:e9:4a:91:1a:3e:3f:1f:
         19:4b:50:2f:f1:8a:d0:fa:1a:be:97:67:c6:09:93:7a:90:24:
         e2:97:45:9b:10:22:c8:cb:d0:4e:fb:f6:8f:8d:bc:2b:c3:da:
         d1:4f:48:02:47:bd:8b:f2:fa:11:ce:a9:c6:88:a1:9f:bc:60:
         40:2e:25:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5kyE0WdbAVNAr3NnwKbPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZWY0YTE3YjhlZmY0NWJhMGIzOWQ0NzQ5NjU1N2UzODhm
ZmZlNTIwHhcNMjYwNDE5MDQwMTEyWhcNMjYwNDIwMDQwMTEyWjAzMTEwLwYDVQQD
EyhjNTg4M2QxOGI5ZDExM2ExMjQ4YWVkMzRhYTExOTM2YWI1MzExNDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMF2jB+lmRX+8+tIpipDkMkVgXA3
Dyu7VCyhyyoLTod83PHRszAnbDnemkgGVjmRhy15AFnlVw+AoOZ8BzrvySkh3N9J
1T/P98aMd/jxynVAgKm4WzkbpakoGAHz0s4FMRpujyLeYf75iUdlOJm9SX6EW/SC
wBOiyPiSzOMaSpULIus6CxtKjRMN+/P3LEpmvKQpCe67rz/vuMAOQYyeU1mBEUzi
L0dRcPiSsX/hp6MbylDAui0HUCMZKsFIsu8AbDWwhgyJrmraaWHyvNE9Wo2gL5n7
Ej9HLDDDQBTPc1FdQ3quTSKh6+ftySTWYXakkP0l13kldecngsdKlyWFRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWIPRi50ROhJIrtNKoRk2q1MRQFMB8GA1UdIwQY
MBaAFGDvShe47/RboLOdR0llV+OI//5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU85S0Y3anY5RnVnczUxSFNXVlg0NGpfX2xJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81N2ZhZWUtNjhiMi00NjkzLTgxMzAt
Y2U0MzRhNDAyNjE3LzEvWU85S0Y3anY5RnVnczUxSFNXVlg0NGpfX2xJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81N2ZhZWUtNjhiMi00NjkzLTgxMzAtY2U0MzRhNDAyNjE3
LzEvWU85S0Y3anY5RnVnczUxSFNXVlg0NGpfX2xJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANnSEEsAU
pKydrcTU5QnlMDAYidXPFvAkIJxCLdp1tS78MRnSihXJqxxZ9JcXBJrtM8BO0cBo
3XpeYb8DCwCdy/PN6lM8DsztdZm3THKFD4YiGFlRqcBSN0ZlnEsVjUrBIKRMzpVG
NZScgPkCrGurozHLvK+0k8GHiw9/o0JQGEjQk3gI/dpNWlZMLIN03Nu38kpaXvU+
o9WtRM7Yb8RK/3O+TuDCX5wxEpHpfLPU+AJbBC7mK6tEeDhN+yhfhAbpSpEaPj8f
GUtQL/GK0PoavpdnxgmTepAk4pdFmxAiyMvQTvv2j428K8Pa0U9IAke9i/L6Ec6p
xoihn7xgQC4l+g==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:45:34 2026 by rpki-client