Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
File:                     bYQL-PLqRGpH22xjOQZmfGPtiG4.mft (raw, json)
Hash identifier:          XJ6y8HqEH9xPUXHMC6HqW9YhznA36D9w2sUdiwwkDmA=
Subject key identifier:   7B:56:B5:90:A9:F3:12:FD:22:BA:8E:34:50:CC:3C:A2:73:A1:A3:B0
Authority key identifier: 6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E
Certificate issuer:       /CN=6d840bf8f2ea446a47db6c633906667c63ed886e
Certificate serial:       019D98BD39AE09439B92780DA0C4971ABE04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
Manifest number:          1317
Signing time:             Fri 17 Apr 2026 00:00:30 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:30 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:30 +0000
Files and hashes:         1: Nppx-_HytezaO7OOnUHi3r0aYuY.roa (hash: EooK0hyWHN5rfWystpxx1iBOSlykoNCoHvC6SpxnsDQ=)
                          2: bYQL-PLqRGpH22xjOQZmfGPtiG4.crl (hash: LGZHEkNtpBnbtm6YNUOCvu3Bm/HN1iY75i1uH7TmTyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:39:ae:09:43:9b:92:78:0d:a0:c4:97:1a:be:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d840bf8f2ea446a47db6c633906667c63ed886e
        Validity
            Not Before: Apr 17 00:00:30 2026 GMT
            Not After : Apr 18 00:00:30 2026 GMT
        Subject: CN=7b56b590a9f312fd22ba8e3450cc3ca273a1a3b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7e:00:e5:d3:d7:83:b3:a7:0c:5b:22:09:29:
                    0f:b8:04:c8:9b:5e:c1:4f:f4:dd:c6:8d:ae:40:fa:
                    89:fa:1e:da:e4:a6:f9:79:ba:cf:b2:9b:65:cc:8d:
                    1d:b0:c4:da:25:62:0c:b5:b6:6e:60:db:1d:a5:f4:
                    8e:e4:d4:13:ef:3d:1b:60:7d:c2:1d:84:53:b2:6a:
                    90:ec:cf:11:76:c1:42:3a:c4:6e:49:6c:67:68:60:
                    6f:b3:21:ef:ba:c1:99:a1:a7:ac:cd:33:37:1f:a4:
                    0f:5d:c5:ca:29:6c:2c:f0:0b:37:ed:e4:38:17:be:
                    94:16:61:38:5a:2e:1e:c4:5a:ad:c3:87:77:ca:f1:
                    70:e4:cf:04:f1:55:8f:c0:dc:71:0b:c9:80:07:0a:
                    ae:34:22:c6:26:bc:d0:39:79:dc:39:a2:d9:36:03:
                    43:e6:d2:56:2b:29:3f:65:25:98:4d:93:8d:15:98:
                    9a:26:c1:e7:b4:8d:97:ef:c6:ac:ee:82:7e:1a:d9:
                    f0:a2:5a:0e:7f:cd:8a:c1:82:b0:84:3a:e7:f0:c6:
                    0d:0e:26:4b:d2:09:2a:b2:df:3f:6f:63:2e:c0:9f:
                    cb:7b:7f:71:d6:44:77:06:37:e5:e7:6f:4c:8d:7a:
                    83:2a:8b:12:ee:c8:01:8b:d5:e2:ba:d8:60:99:f3:
                    fb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:56:B5:90:A9:F3:12:FD:22:BA:8E:34:50:CC:3C:A2:73:A1:A3:B0
            X509v3 Authority Key Identifier:
                keyid:6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e2:65:4b:8b:ef:2b:39:37:26:23:39:11:01:0b:00:0a:37:
         14:15:62:f5:db:cf:80:17:b4:78:e4:64:23:3b:41:ec:64:2b:
         89:fa:14:e6:10:bc:dc:e7:8c:37:52:80:2f:7d:25:99:9b:e7:
         ab:0e:03:a9:94:73:23:3a:2a:45:dc:c9:f1:f2:d2:81:a9:76:
         dc:89:89:a4:ed:6d:40:ff:26:2c:0c:68:87:8c:89:72:7a:bb:
         d4:07:bd:8b:c4:9e:e6:bb:11:37:8b:4b:fc:87:83:90:5c:16:
         93:da:d2:cb:e9:dc:9e:2d:17:70:01:1a:48:fe:0c:d1:87:ac:
         e0:62:36:48:1f:5e:d7:71:88:23:3c:f3:21:7d:3a:1c:21:46:
         0b:c6:ee:70:b3:a8:3f:3e:ef:bf:4b:26:49:a2:88:5d:81:4c:
         d3:b5:f9:bc:89:4f:d4:a6:f5:22:2c:79:a7:7d:61:5e:e8:53:
         af:6c:aa:35:12:7a:dc:e0:2f:30:65:05:1a:6f:60:ae:30:eb:
         ad:3f:bf:19:b8:1d:b8:c2:7c:61:41:96:68:b1:bf:55:c8:c2:
         94:06:f7:60:b6:dc:55:f3:bf:7f:d3:45:56:b7:e7:00:1f:52:
         e6:ba:f6:05:39:36:72:44:b5:39:80:9f:c3:53:35:0e:1f:fa:
         30:04:da:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:43:33 2026 by rpki-client