Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
File:                     yMHp4LxfXaGOMkoYEltCeAGoB_E.mft (raw, json)
Hash identifier:          m0t1py1YetQi2Ll3NcuukO5CuMLxggUMu1I7H9/8mNI=
Subject key identifier:   C6:A2:F2:50:48:8E:B7:1D:45:DE:8D:9C:56:C0:F9:D5:5A:80:69:88
Authority key identifier: C8:C1:E9:E0:BC:5F:5D:A1:8E:32:4A:18:12:5B:42:78:01:A8:07:F1
Certificate issuer:       /CN=c8c1e9e0bc5f5da18e324a18125b427801a807f1
Certificate serial:       019D97E24C20253FFDE742698D8E12A33E97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
Manifest number:          0A19
Signing time:             Thu 16 Apr 2026 20:01:23 +0000
Manifest this update:     Thu 16 Apr 2026 20:01:23 +0000
Manifest next update:     Fri 17 Apr 2026 20:01:23 +0000
Files and hashes:         1: i9TbDs-UmHFr784ZoqFEeJgd4fs.roa (hash: jtee/rF2N21pHuv03EKIznBMKr6tlpL1hhT7AG0kWT8=)
                          2: yMHp4LxfXaGOMkoYEltCeAGoB_E.crl (hash: em1Qkt4/2w4TJr3EiQ+U+XFbejKKhrTYSZkCIbrdQnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e2:4c:20:25:3f:fd:e7:42:69:8d:8e:12:a3:3e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c1e9e0bc5f5da18e324a18125b427801a807f1
        Validity
            Not Before: Apr 16 20:01:23 2026 GMT
            Not After : Apr 17 20:01:23 2026 GMT
        Subject: CN=c6a2f250488eb71d45de8d9c56c0f9d55a806988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:16:06:f7:20:6d:50:90:5f:9d:13:ba:95:07:
                    46:e2:a2:bf:38:e1:6b:a1:7b:bc:26:11:81:91:f1:
                    25:b9:52:91:1a:51:03:56:b7:08:ae:9e:b7:6d:ba:
                    85:63:a9:20:55:8e:80:2f:15:93:9c:77:18:b7:cd:
                    ba:30:78:1d:40:e9:a0:0e:0d:36:2c:fd:37:11:d2:
                    42:25:00:f1:1c:d6:93:d1:9d:88:42:b7:71:16:4d:
                    b2:b8:cb:7b:59:0d:76:21:ee:48:38:ea:b8:ac:e8:
                    b5:ad:da:61:96:a5:2c:bd:4a:8d:1f:64:13:62:b2:
                    a3:9f:ba:e1:f9:a1:80:16:63:47:b4:94:21:6c:6e:
                    cb:d8:b3:e9:89:64:e2:97:34:a5:4c:e6:32:ee:78:
                    ca:eb:25:bd:f6:55:e4:f2:eb:87:b1:94:0b:94:71:
                    de:8a:25:e3:04:c6:43:29:a8:ac:5c:cf:93:40:11:
                    99:ee:85:43:f0:a1:7d:b7:1f:08:da:a0:61:b8:fc:
                    11:bc:8d:83:04:16:43:71:9f:d6:d5:6d:19:f2:02:
                    4c:ba:de:a2:41:48:8f:9b:80:47:f9:3e:01:59:3c:
                    34:f8:8a:a6:2e:be:65:7c:b5:0b:86:74:8f:90:76:
                    70:81:17:dd:5c:94:3c:6b:ce:de:0f:cd:02:79:4c:
                    42:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A2:F2:50:48:8E:B7:1D:45:DE:8D:9C:56:C0:F9:D5:5A:80:69:88
            X509v3 Authority Key Identifier:
                keyid:C8:C1:E9:E0:BC:5F:5D:A1:8E:32:4A:18:12:5B:42:78:01:A8:07:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:6a:5a:1a:74:3b:fb:9f:3e:18:18:58:97:f0:f3:2b:a6:f8:
         fc:42:f8:61:34:0b:9b:b3:63:94:36:62:24:92:11:02:2d:ab:
         e9:7c:8a:47:2a:91:bc:38:9d:ec:0a:1f:80:0d:a3:50:e7:c8:
         4b:70:00:b3:96:5b:24:d3:55:cc:e8:00:c2:07:73:44:28:0b:
         8c:23:13:39:3f:14:ce:32:b7:89:03:79:c2:05:a6:e0:86:8f:
         67:d1:0f:e6:c0:be:b1:e9:78:59:ad:03:01:2d:10:82:54:c9:
         60:fe:1d:d1:60:e6:c4:05:c6:1c:d0:2a:96:8f:63:99:af:d7:
         7e:37:95:0c:3e:89:7b:2c:a1:96:23:bb:65:85:56:76:c3:28:
         45:de:36:fc:84:f2:55:a8:b7:33:8d:18:80:74:af:15:e8:a2:
         c7:5b:3b:48:b5:20:32:ab:1e:23:02:7b:96:13:cb:5e:a7:d6:
         9d:6c:af:a6:7b:7e:67:69:dc:03:a0:cc:cc:1a:1c:e6:ea:04:
         3d:c2:e6:9f:53:ff:4a:db:2b:e0:98:ed:b7:1a:89:67:0b:30:
         99:50:0f:8c:91:15:f9:50:5d:14:75:d7:9b:5e:06:35:cf:f9:
         2a:13:3f:67:77:b0:9d:37:ed:40:2c:39:4d:89:63:28:da:22:
         e0:10:e5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:52 2026 by rpki-client