Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft
File:                     yu79CETrE5qyH4DUByzguO3MBrU.mft (raw, json)
Hash identifier:          76MF/i2hw2Z+YMnLHlHFWrRrbYrBgGOe7h9sihtln1k=
Subject key identifier:   1F:65:9D:EE:78:7B:B8:9E:D7:B8:5F:6F:02:7E:9E:EA:E7:A0:FB:E4
Authority key identifier: CA:EE:FD:08:44:EB:13:9A:B2:1F:80:D4:07:2C:E0:B8:ED:CC:06:B5
Certificate issuer:       /CN=caeefd0844eb139ab21f80d4072ce0b8edcc06b5
Certificate serial:       019D9A3E70F2D662F504AAF66E88ABEDA71B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yu79CETrE5qyH4DUByzguO3MBrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft
Manifest number:          0513
Signing time:             Fri 17 Apr 2026 07:01:16 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:16 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:16 +0000
Files and hashes:         1: LJiVGCgYbyx1YrovDxbErOmKKZE.roa (hash: 36LJeXEZNvyiVyB06FojXdU1rTulFSqDFXw050tNGLw=)
                          2: yu79CETrE5qyH4DUByzguO3MBrU.crl (hash: pVUds6zObNTAIGmwXFeLvxrsTH/kFI3015bNnzwIckg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yu79CETrE5qyH4DUByzguO3MBrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:70:f2:d6:62:f5:04:aa:f6:6e:88:ab:ed:a7:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caeefd0844eb139ab21f80d4072ce0b8edcc06b5
        Validity
            Not Before: Apr 17 07:01:16 2026 GMT
            Not After : Apr 18 07:01:16 2026 GMT
        Subject: CN=1f659dee787bb89ed7b85f6f027e9eeae7a0fbe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:54:dc:9e:44:2a:ce:d5:8a:05:bd:23:dd:99:
                    7d:40:7d:14:7a:6c:0a:8d:13:22:e0:4b:bb:4e:9a:
                    0c:11:81:46:19:80:c2:6b:4f:e8:58:59:08:67:4e:
                    a2:81:98:ad:d1:0a:97:d1:c4:aa:b0:17:8e:dd:b6:
                    e3:00:70:fa:93:f8:ea:4e:cb:95:8d:b6:6f:49:0c:
                    6f:f6:c9:f7:56:89:40:a3:e0:9d:19:46:7b:87:76:
                    fe:50:b3:91:0a:f9:97:59:4a:2f:df:80:c0:87:2a:
                    d6:a7:2f:2a:19:bf:82:91:45:9b:c6:25:0c:7a:9b:
                    b6:11:a0:1a:a6:24:55:72:08:01:dd:81:6a:00:55:
                    2d:32:52:86:f5:19:90:3d:f0:98:c6:dd:7d:24:35:
                    ff:f5:a6:1a:9a:66:a3:63:24:3e:87:e0:e6:37:ad:
                    1e:1d:94:b8:f7:35:92:e5:bf:4a:5e:c7:dc:87:e3:
                    d9:88:60:dd:60:62:69:d6:8b:f3:e2:b5:c2:c9:49:
                    fe:47:ab:48:e8:a3:2e:d8:2e:f8:94:f0:34:26:8a:
                    2a:7e:66:0e:09:da:ff:55:59:88:1f:83:ce:e2:fb:
                    33:ac:03:07:3e:3a:08:6f:9b:fa:d6:c0:13:c1:9f:
                    9c:c8:2c:93:ea:ac:06:c2:52:ea:fc:a1:b0:da:2b:
                    6b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:65:9D:EE:78:7B:B8:9E:D7:B8:5F:6F:02:7E:9E:EA:E7:A0:FB:E4
            X509v3 Authority Key Identifier:
                keyid:CA:EE:FD:08:44:EB:13:9A:B2:1F:80:D4:07:2C:E0:B8:ED:CC:06:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu79CETrE5qyH4DUByzguO3MBrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f3:52:9d:e7:64:96:1b:10:10:67:f9:4d:b2:dd:ed:7f:13:
         c9:78:4a:ba:58:2a:56:1b:2a:73:a6:9f:34:eb:4e:f8:0d:2a:
         2c:86:d6:69:29:ce:17:1b:49:e5:1d:27:96:3f:58:5b:d2:f4:
         14:29:af:34:6a:b6:22:8e:68:85:67:7b:f6:2a:1c:fe:2c:24:
         d2:67:bc:96:3c:79:4c:c8:2b:2b:d0:6d:a9:7b:b5:2a:cc:8e:
         6c:3f:f8:fe:a2:ee:c1:a1:5a:37:55:cd:78:22:3b:22:2c:1d:
         74:10:e8:44:df:3b:d7:87:0d:ad:3d:ef:da:e9:df:6e:55:04:
         33:e8:37:0b:83:b3:39:cf:69:ba:8c:a6:d9:57:b9:e3:2a:1f:
         46:66:ce:d5:ef:85:6d:8c:a4:f3:29:75:b2:a8:1a:d1:cb:56:
         7b:01:40:a9:75:bf:66:9b:a5:87:76:24:5c:7a:ab:99:4f:9b:
         73:55:ee:c6:2f:7b:72:9a:26:34:51:e5:f2:5c:06:45:d6:9b:
         ef:03:2e:44:09:25:d8:7f:f6:1d:eb:a6:c0:7c:17:0b:4b:05:
         5f:18:f6:d0:68:eb:8b:d0:df:7d:e2:f6:d7:66:1b:46:ca:96:
         2f:2c:e8:0a:6c:60:c1:01:34:ad:a2:f4:bb:ca:13:98:b7:79:
         e5:f0:25:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:07:50 2026 by rpki-client