Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
File:                     yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft (raw, json)
Hash identifier:          JGHI0xwApvJ5QiciGUcPHjsRBfWkxTOAL4XsmOpKMvY=
Subject key identifier:   25:47:F4:6E:FC:BA:AA:CF:CD:D8:5C:E5:46:6A:2E:54:81:9D:7E:FF
Authority key identifier: C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7
Certificate issuer:       /CN=c9392c3276b243aff740a082c588fb73941ebbf7
Certificate serial:       019D992B3FCBE143EDDD668265977B2A6194
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
Manifest number:          0834
Signing time:             Fri 17 Apr 2026 02:00:41 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:41 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:41 +0000
Files and hashes:         1: CDYJ5duT-YiN5vn4ue9hcM_s3OA.roa (hash: ZtL4bRFnSWFbHHuzOCLv1emqHa4TMbYiRtAD7J2vEiI=)
                          2: yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl (hash: 6EubfGguCyFrQxb6uuIJmodN9NwdqimVDnKHDBx6d9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:3f:cb:e1:43:ed:dd:66:82:65:97:7b:2a:61:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9392c3276b243aff740a082c588fb73941ebbf7
        Validity
            Not Before: Apr 17 02:00:41 2026 GMT
            Not After : Apr 18 02:00:41 2026 GMT
        Subject: CN=2547f46efcbaaacfcdd85ce5466a2e54819d7eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9a:24:ed:6c:67:c5:a9:04:d9:58:f5:31:c1:
                    ca:62:3d:36:59:39:f5:f8:6f:14:fc:bf:c2:53:22:
                    8c:2a:2f:cd:a0:26:18:3d:7a:7d:22:5a:31:d0:62:
                    a0:31:67:6e:7c:a1:df:95:28:b1:66:30:1b:13:40:
                    d3:6e:84:64:5b:ff:bf:40:63:cb:c7:52:eb:4c:66:
                    52:35:59:26:7e:e7:c7:54:6e:83:73:7a:5d:78:4f:
                    08:8a:87:bb:0f:bf:e1:4a:55:55:07:50:ca:2e:9a:
                    04:5f:2b:e8:66:d6:38:39:67:04:b0:f0:5b:83:e4:
                    8b:37:52:8c:f8:e7:0b:37:f9:3b:03:b2:74:7e:4c:
                    db:e1:24:d7:31:22:1d:a5:30:6a:c1:b5:55:b8:fa:
                    a7:21:66:de:0e:0b:81:71:98:f5:f5:ca:43:03:b8:
                    fe:42:88:e0:f7:43:a9:25:11:28:74:a2:c6:56:0d:
                    e1:48:85:cf:7e:b2:ec:96:ba:db:7b:b0:ae:22:b9:
                    11:a6:7b:a8:8e:01:eb:b5:12:d8:cc:71:13:02:92:
                    55:8c:b9:cb:ca:ae:da:bb:93:c8:ed:4b:e3:64:00:
                    80:e9:f3:94:19:03:34:84:94:b6:8e:e9:d8:19:4e:
                    ab:2a:3f:14:32:1d:a0:99:01:4d:d5:96:2d:cc:14:
                    ab:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:47:F4:6E:FC:BA:AA:CF:CD:D8:5C:E5:46:6A:2E:54:81:9D:7E:FF
            X509v3 Authority Key Identifier:
                keyid:C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:af:e7:36:99:fd:bb:7c:3d:ac:7f:3d:98:c9:4d:ef:37:f8:
         19:21:7b:64:b0:48:f5:88:e0:87:50:c5:55:a7:bf:60:1f:b6:
         7d:24:a6:91:b2:00:28:99:53:73:c9:93:58:f2:0f:69:02:81:
         78:6c:64:1f:96:61:4f:aa:a6:ab:23:dd:70:a2:db:fa:20:0a:
         61:bb:b7:51:9d:28:cc:f9:ea:7e:23:c4:c9:fd:cb:0d:81:a0:
         e0:40:16:d9:ba:43:b4:8a:eb:79:3d:32:c3:ad:01:32:8f:da:
         4d:be:9a:58:04:4c:48:77:b9:95:1f:fd:ef:10:7e:a5:2b:0b:
         cc:da:ca:78:21:72:ec:41:ff:c9:b1:c9:7a:74:ab:f4:a2:f4:
         db:28:e6:95:e4:cb:cd:d9:4d:2d:21:5e:7d:7e:5a:6f:41:c5:
         71:13:4c:57:10:59:78:24:f1:98:5c:f3:9a:29:97:8d:ba:39:
         0f:0e:50:70:73:df:d2:0a:65:e8:2c:69:59:0a:84:4d:85:41:
         c7:0b:7e:8b:5c:9e:6c:48:eb:cc:37:ef:6c:80:af:d5:11:2b:
         0c:31:1d:2f:68:95:99:a8:0d:0e:67:6f:92:9a:b5:67:39:2d:
         ad:c2:99:d1:cd:0c:04:6e:10:20:a8:27:7f:0b:34:d4:01:49:
         a2:f3:c7:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKz/L4UPt3WaCZZd7KmGUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MzkyYzMyNzZiMjQzYWZmNzQwYTA4MmM1ODhmYjczOTQx
ZWJiZjcwHhcNMjYwNDE3MDIwMDQxWhcNMjYwNDE4MDIwMDQxWjAzMTEwLwYDVQQD
EygyNTQ3ZjQ2ZWZjYmFhYWNmY2RkODVjZTU0NjZhMmU1NDgxOWQ3ZWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZok7WxnxakE2Vj1McHKYj02WTn1
+G8U/L/CUyKMKi/NoCYYPXp9Ilox0GKgMWdufKHflSixZjAbE0DTboRkW/+/QGPL
x1LrTGZSNVkmfufHVG6Dc3pdeE8Iioe7D7/hSlVVB1DKLpoEXyvoZtY4OWcEsPBb
g+SLN1KM+OcLN/k7A7J0fkzb4STXMSIdpTBqwbVVuPqnIWbeDguBcZj19cpDA7j+
Qojg90OpJREodKLGVg3hSIXPfrLslrrbe7CuIrkRpnuojgHrtRLYzHETApJVjLnL
yq7au5PI7UvjZACA6fOUGQM0hJS2junYGU6rKj8UMh2gmQFN1ZYtzBSrCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVH9G78uqrPzdhc5UZqLlSBnX7/MB8GA1UdIwQY
MBaAFMk5LDJ2skOv90CggsWI+3OUHrv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVRrc01uYXlRNl8zUUtDQ3hZajdjNVFldV9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yNTZjYjYtZGM0Mi00MWE1LWI5MjAt
MjRjYmExYzAzYzk5LzEveVRrc01uYXlRNl8zUUtDQ3hZajdjNVFldV9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yNTZjYjYtZGM0Mi00MWE1LWI5MjAtMjRjYmExYzAzYzk5
LzEveVRrc01uYXlRNl8zUUtDQ3hZajdjNVFldV9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAka/nNpn9
u3w9rH89mMlN7zf4GSF7ZLBI9Yjgh1DFVae/YB+2fSSmkbIAKJlTc8mTWPIPaQKB
eGxkH5ZhT6qmqyPdcKLb+iAKYbu3UZ0ozPnqfiPEyf3LDYGg4EAW2bpDtIrreT0y
w60BMo/aTb6aWARMSHe5lR/97xB+pSsLzNrKeCFy7EH/ybHJenSr9KL02yjmleTL
zdlNLSFefX5ab0HFcRNMVxBZeCTxmFzzmimXjbo5Dw5QcHPf0gpl6CxpWQqETYVB
xwt+i1yebEjrzDfvbICv1RErDDEdL2iVmagNDmdvkpq1ZzktrcKZ0c0MBG4QIKgn
fws01AFJovPHvQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:58:44 2026 by rpki-client