Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
File:                     ybBR6OaBSbZgROfeSuWdc25Teqo.mft (raw, json)
Hash identifier:          EptBe+449XQ/GsxwZH3javg6sFFwBIoAN+5Sbu6NSTE=
Subject key identifier:   F9:12:38:01:B2:B2:E4:80:CB:A0:B0:F7:71:FB:F8:6F:66:86:10:3F
Authority key identifier: C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
Certificate issuer:       /CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Certificate serial:       019D98BDB65ED9234F5534BBF3A26594D0A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
Manifest number:          08AA
Signing time:             Fri 17 Apr 2026 00:01:02 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:02 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:02 +0000
Files and hashes:         1: ElQ5chtEAtBtP2GIXdac_TddA80.roa (hash: HOH5oCt/YkRKpTxo1H1ugWQGWMm04Hcv5fnFxFjdw8s=)
                          2: mDTOHKx9pFPb6EOP9UxQxm-ClKw.roa (hash: 38/vqHt1v0uvrIdlEvEwCRci+eMQynBKytD9wiXBCtc=)
                          3: nu9XCXuPflVxiBkepDLOxds4g2s.roa (hash: W/feVk1DUwfkmSjB+I5O4CPhUu5C032era/IbMRpza0=)
                          4: ybBR6OaBSbZgROfeSuWdc25Teqo.crl (hash: almNjdG/3/jrrC/MfG5Dt00I8PGT+on+ZpZet/eGLyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:b6:5e:d9:23:4f:55:34:bb:f3:a2:65:94:d0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
        Validity
            Not Before: Apr 17 00:01:02 2026 GMT
            Not After : Apr 18 00:01:02 2026 GMT
        Subject: CN=f9123801b2b2e480cba0b0f771fbf86f6686103f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7e:a7:ee:13:c9:71:a6:36:fc:5b:b7:33:ee:
                    a9:e2:22:ff:1e:7a:b7:53:e6:8b:2b:9f:df:c5:43:
                    df:d4:45:b9:f4:df:09:ad:c3:e3:5c:18:b7:ad:6b:
                    10:47:ae:09:cd:f2:c0:95:da:d9:75:7c:73:0f:56:
                    80:20:5f:ea:d9:82:50:39:bc:aa:4e:57:c8:b7:36:
                    6f:48:2f:eb:3b:0c:83:ed:a7:6e:68:e3:ee:a8:27:
                    3a:86:f6:09:3d:b5:77:c0:63:a8:71:c1:7d:26:45:
                    1f:6b:bd:c9:a3:79:8f:10:d7:af:b4:b8:17:96:8d:
                    fb:5e:18:9b:19:1a:9c:39:5c:ff:17:e0:1e:33:13:
                    84:da:be:c3:81:cc:34:3b:ce:61:2b:c2:b2:d1:42:
                    6e:8f:ef:86:03:b4:ae:1c:41:dd:77:11:e6:f6:11:
                    31:64:ba:47:b7:2c:1b:35:23:a1:fd:10:8f:b3:d1:
                    98:7c:35:99:60:98:44:c2:79:a6:d3:84:e3:a4:d9:
                    d2:57:e8:8c:da:c2:8e:76:c3:7a:4e:85:f7:86:82:
                    c4:3b:ca:57:6f:4f:69:d4:d1:81:ce:2f:79:a4:af:
                    f5:c5:66:93:3c:d7:49:b2:0f:7b:1d:e2:6c:2b:6b:
                    0b:88:83:10:ce:03:c0:e2:7d:40:fb:94:ec:18:3b:
                    f2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:12:38:01:B2:B2:E4:80:CB:A0:B0:F7:71:FB:F8:6F:66:86:10:3F
            X509v3 Authority Key Identifier:
                keyid:C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:55:03:2a:5a:09:f8:d2:c3:d2:27:81:f7:85:01:66:17:44:
         46:b2:b8:9b:23:b4:b9:30:9c:5d:1c:4a:9d:25:51:cf:99:82:
         ff:b3:6b:82:5b:00:61:52:0f:ef:0e:fc:62:d2:91:38:20:e5:
         25:34:9b:66:c9:a4:68:0b:da:02:1e:73:32:b9:17:9e:ed:9e:
         0b:88:51:65:0c:8b:f4:76:48:24:d9:67:e5:21:34:f9:de:9b:
         f1:fc:b0:fc:1a:b1:e5:5c:ae:e7:e9:19:84:c9:67:89:41:83:
         c6:54:c5:31:7a:f5:5a:1f:92:ba:02:b4:db:48:48:24:1d:1b:
         47:f9:97:fa:fe:45:10:0e:a3:8e:e6:89:ee:41:a1:34:8c:31:
         b0:16:74:8a:f6:fe:99:ee:7d:3c:36:5b:a2:c7:bd:49:80:85:
         95:66:65:22:3b:d9:7d:e6:35:7b:15:78:e6:4f:6d:4d:20:d6:
         63:07:04:0d:eb:33:13:50:78:7d:32:84:fe:80:2d:56:06:ab:
         0f:9d:54:b5:d6:24:ec:98:6d:b3:46:20:00:92:f5:a1:b8:44:
         73:53:60:fd:26:a1:cc:27:19:c1:db:f3:eb:76:04:ee:4f:a5:
         81:9d:89:21:25:7e:bc:ec:97:65:b3:14:62:f9:df:bb:b7:87:
         24:8b:62:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvbZe2SNPVTS786JllNCgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YjA1MWU4ZTY4MTQ5YjY2MDQ0ZTdkZTRhZTU5ZDczNmU1
MzdhYWEwHhcNMjYwNDE3MDAwMTAyWhcNMjYwNDE4MDAwMTAyWjAzMTEwLwYDVQQD
EyhmOTEyMzgwMWIyYjJlNDgwY2JhMGIwZjc3MWZiZjg2ZjY2ODYxMDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn6n7hPJcaY2/Fu3M+6p4iL/Hnq3
U+aLK5/fxUPf1EW59N8JrcPjXBi3rWsQR64JzfLAldrZdXxzD1aAIF/q2YJQObyq
TlfItzZvSC/rOwyD7aduaOPuqCc6hvYJPbV3wGOoccF9JkUfa73Jo3mPENevtLgX
lo37XhibGRqcOVz/F+AeMxOE2r7Dgcw0O85hK8Ky0UJuj++GA7SuHEHddxHm9hEx
ZLpHtywbNSOh/RCPs9GYfDWZYJhEwnmm04TjpNnSV+iM2sKOdsN6ToX3hoLEO8pX
b09p1NGBzi95pK/1xWaTPNdJsg97HeJsK2sLiIMQzgPA4n1A+5TsGDvy7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkSOAGysuSAy6Cw93H7+G9mhhA/MB8GA1UdIwQY
MBaAFMmwUejmgUm2YETn3krlnXNuU3qqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWJCUjZPYUJTYlpnUk9mZVN1V2RjMjVUZXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iNzU2YjQtY2U0MS00MWI1LWExZDkt
YmI0ZDI0MmVkMmNkLzEveWJCUjZPYUJTYlpnUk9mZVN1V2RjMjVUZXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9iNzU2YjQtY2U0MS00MWI1LWExZDktYmI0ZDI0MmVkMmNk
LzEveWJCUjZPYUJTYlpnUk9mZVN1V2RjMjVUZXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt1UDKloJ
+NLD0ieB94UBZhdERrK4myO0uTCcXRxKnSVRz5mC/7NrglsAYVIP7w78YtKROCDl
JTSbZsmkaAvaAh5zMrkXnu2eC4hRZQyL9HZIJNln5SE0+d6b8fyw/Bqx5Vyu5+kZ
hMlniUGDxlTFMXr1Wh+SugK020hIJB0bR/mX+v5FEA6jjuaJ7kGhNIwxsBZ0ivb+
me59PDZbose9SYCFlWZlIjvZfeY1exV45k9tTSDWYwcEDeszE1B4fTKE/oAtVgar
D51UtdYk7Jhts0YgAJL1obhEc1Ng/SahzCcZwdvz63YE7k+lgZ2JISV+vOyXZbMU
Yvnfu7eHJIti0w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 02:33:15 2026 by rpki-client