Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft
File:                     yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft (raw, json)
Hash identifier:          3bxcFNuWb3XT8zZboK8zEhpMi76PfBEcNxjyiCV3yIM=
Subject key identifier:   75:31:50:95:CC:CB:66:44:D8:1A:D2:E6:68:5D:78:A6:F0:7D:0B:17
Authority key identifier: C9:E7:AA:C3:D7:24:D9:D4:9F:30:27:13:36:33:BA:11:9B:B3:67:FB
Certificate issuer:       /CN=c9e7aac3d724d9d49f3027133633ba119bb367fb
Certificate serial:       019D9C2C6EEEC177904E32A4A14E9CBF4553
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft
Manifest number:          0481
Signing time:             Fri 17 Apr 2026 16:00:50 +0000
Manifest this update:     Fri 17 Apr 2026 16:00:50 +0000
Manifest next update:     Sat 18 Apr 2026 16:00:50 +0000
Files and hashes:         1: 8Z-EzuThtebO4TCJ4sXK6ZwkF-U.roa (hash: nLXaQxJqeWy3EVhvO0P+XRy5zmHbKG5lRbAYJ4bV64g=)
                          2: yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl (hash: SqKLoJW9AjzpqYQQ6XKTaoZKJ4X9J22z0EYIjMFBioo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2c:6e:ee:c1:77:90:4e:32:a4:a1:4e:9c:bf:45:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e7aac3d724d9d49f3027133633ba119bb367fb
        Validity
            Not Before: Apr 17 16:00:50 2026 GMT
            Not After : Apr 18 16:00:50 2026 GMT
        Subject: CN=75315095cccb6644d81ad2e6685d78a6f07d0b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9d:04:30:f4:22:83:b4:8b:77:de:f5:a7:27:
                    83:66:89:07:cf:e1:01:40:c1:72:fd:13:03:d4:ff:
                    a9:07:54:af:c1:26:9f:19:51:f2:5a:08:5f:4a:04:
                    f4:5c:84:68:3e:32:39:85:69:52:bc:df:1c:a1:16:
                    54:74:28:ea:de:77:41:a6:2b:58:35:2b:b8:ff:b9:
                    49:59:38:bb:47:1a:96:2e:11:4c:8f:62:99:4f:8d:
                    e1:0f:c3:8e:47:83:79:91:ac:e0:c1:58:ac:3a:45:
                    9a:d3:fa:e3:71:e1:3f:cc:0b:e3:8c:36:ba:58:88:
                    15:f7:6d:ad:e0:39:36:e6:0b:28:48:d3:c7:41:08:
                    20:ee:9c:d0:b4:c6:82:99:93:56:de:6a:f7:8e:22:
                    4d:4e:15:2d:1b:28:8b:d1:76:6b:40:51:13:de:f5:
                    1f:87:1a:4f:21:25:d8:41:b3:19:70:3c:a2:4b:21:
                    08:24:1f:a0:b6:3e:69:bc:7d:99:d8:8e:41:2d:80:
                    ad:b4:5b:18:7e:bd:cc:68:90:dd:ba:1c:fd:ae:92:
                    ec:b7:38:76:43:48:3f:e1:f3:47:fb:c0:6e:1a:3d:
                    6b:44:c3:ac:45:41:b8:75:3d:30:18:c1:6e:68:92:
                    55:cb:56:cc:0f:7e:7b:60:aa:47:67:6f:1d:44:c3:
                    82:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:31:50:95:CC:CB:66:44:D8:1A:D2:E6:68:5D:78:A6:F0:7D:0B:17
            X509v3 Authority Key Identifier:
                keyid:C9:E7:AA:C3:D7:24:D9:D4:9F:30:27:13:36:33:BA:11:9B:B3:67:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:9c:7c:67:b3:4b:47:45:61:b5:76:1d:3e:76:91:d2:e3:87:
         a7:39:f8:1c:22:35:b2:e1:cd:73:05:76:a9:ee:81:ab:91:d2:
         2e:3f:96:32:76:7b:4e:e5:19:7b:61:bb:b8:f7:78:0f:8a:06:
         14:37:a5:48:f1:67:71:0d:9a:39:72:44:ab:33:da:c1:24:4f:
         13:53:c7:73:58:e8:84:42:f1:34:ec:af:53:a6:c0:9d:17:4c:
         ec:31:50:2a:94:81:ad:02:c7:b2:61:6a:2a:48:5e:0b:0c:66:
         47:86:44:e2:9a:83:3e:a5:b9:2f:31:a0:d7:a3:82:c5:18:71:
         80:af:48:58:8f:c6:74:07:e7:5b:bd:af:6c:6d:78:81:fd:f4:
         52:12:4d:80:6c:14:cd:41:f6:06:b8:bf:8a:ed:0d:50:40:0a:
         be:f7:9e:49:37:82:3e:1b:e3:cf:df:08:8c:e0:50:e4:0a:ca:
         10:3c:67:31:37:ef:f8:91:9f:b8:66:28:27:8f:0d:4c:89:36:
         e0:f8:93:3c:a1:1d:f9:36:eb:19:48:69:18:a1:4b:40:6e:98:
         c4:e0:a3:f0:bc:83:12:c1:51:a5:87:01:ee:37:b5:71:de:50:
         f2:50:d6:4c:e5:b2:23:db:73:4f:ca:5a:d2:f9:4d:9b:3f:ba:
         05:eb:3c:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLG7uwXeQTjKkoU6cv0VTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZTdhYWMzZDcyNGQ5ZDQ5ZjMwMjcxMzM2MzNiYTExOWJi
MzY3ZmIwHhcNMjYwNDE3MTYwMDUwWhcNMjYwNDE4MTYwMDUwWjAzMTEwLwYDVQQD
Eyg3NTMxNTA5NWNjY2I2NjQ0ZDgxYWQyZTY2ODVkNzhhNmYwN2QwYjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ0EMPQig7SLd971pyeDZokHz+EB
QMFy/RMD1P+pB1SvwSafGVHyWghfSgT0XIRoPjI5hWlSvN8coRZUdCjq3ndBpitY
NSu4/7lJWTi7RxqWLhFMj2KZT43hD8OOR4N5kazgwVisOkWa0/rjceE/zAvjjDa6
WIgV922t4Dk25gsoSNPHQQgg7pzQtMaCmZNW3mr3jiJNThUtGyiL0XZrQFET3vUf
hxpPISXYQbMZcDyiSyEIJB+gtj5pvH2Z2I5BLYCttFsYfr3MaJDduhz9rpLstzh2
Q0g/4fNH+8BuGj1rRMOsRUG4dT0wGMFuaJJVy1bMD357YKpHZ28dRMOC3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUxUJXMy2ZE2BrS5mhdeKbwfQsXMB8GA1UdIwQY
MBaAFMnnqsPXJNnUnzAnEzYzuhGbs2f7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWVlcXc5Y2syZFNmTUNjVE5qTzZFWnV6Wl9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80Zjc1MWQtYTM1NS00MGYzLWFhNDQt
N2NjYTY3NzM2MDFhLzEveWVlcXc5Y2syZFNmTUNjVE5qTzZFWnV6Wl9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80Zjc1MWQtYTM1NS00MGYzLWFhNDQtN2NjYTY3NzM2MDFh
LzEveWVlcXc5Y2syZFNmTUNjVE5qTzZFWnV6Wl9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJx8Z7NL
R0VhtXYdPnaR0uOHpzn4HCI1suHNcwV2qe6Bq5HSLj+WMnZ7TuUZe2G7uPd4D4oG
FDelSPFncQ2aOXJEqzPawSRPE1PHc1johELxNOyvU6bAnRdM7DFQKpSBrQLHsmFq
KkheCwxmR4ZE4pqDPqW5LzGg16OCxRhxgK9IWI/GdAfnW72vbG14gf30UhJNgGwU
zUH2Bri/iu0NUEAKvveeSTeCPhvjz98IjOBQ5ArKEDxnMTfv+JGfuGYoJ48NTIk2
4PiTPKEd+TbrGUhpGKFLQG6YxOCj8LyDEsFRpYcB7je1cd5Q8lDWTOWyI9tzT8pa
0vlNmz+6Bes8GQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:34:32 2026 by rpki-client