Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
File:                     dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json)
Hash identifier:          jwgGj+/vEF3SkeS6jGiJ2X3rfp9DRCkriRxl7Q4jiBM=
Subject key identifier:   AC:6C:2F:68:7F:C6:79:E1:F0:F4:DB:A0:5E:33:99:97:1F:FE:CB:AE
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Certificate issuer:       /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial:       019DA3E6A4E97BC53459D3A5B8693102A8B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
Manifest number:          185D
Signing time:             Sun 19 Apr 2026 04:01:34 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:34 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:34 +0000
Files and hashes:         1: 1xBlob06V4OZHwqAUkwFisJ8hbE.roa (hash: fUNS9n+gbfLHDdSyjCsCUEORZD+YjwBO+Q4C1PMroB0=)
                          2: JchC90yjmUCoGpTy_G9JV_hpnDA.roa (hash: y6rgHhMgSwSF+hb/ru1il5IUm+2sXbyrH9l61ZHVZEc=)
                          3: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: ysfNJeDHAhYyeOm0h8NVPRiqWyFIvmFApUgZLGHJGXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:a4:e9:7b:c5:34:59:d3:a5:b8:69:31:02:a8:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
        Validity
            Not Before: Apr 19 04:01:34 2026 GMT
            Not After : Apr 20 04:01:34 2026 GMT
        Subject: CN=ac6c2f687fc679e1f0f4dba05e3399971ffecbae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dd:0e:a7:30:0a:9c:ba:ed:de:29:22:97:fb:
                    d6:00:de:41:d9:cf:6c:f4:89:ec:7e:71:95:89:2d:
                    08:78:90:d7:5b:7d:3a:47:ac:06:92:e7:03:e8:32:
                    96:c4:4a:2d:23:ac:40:a6:2e:2d:4f:04:32:5b:b4:
                    1a:9c:79:bf:9b:64:8c:2d:df:a6:77:55:9d:0c:a3:
                    cd:83:cd:fb:36:ad:3b:95:86:6e:a7:23:a1:bd:a6:
                    19:37:18:ad:48:e8:c2:72:b3:55:d6:c5:b9:ac:98:
                    b6:6b:d9:9c:c5:04:bb:42:bd:bf:dd:55:35:0d:38:
                    9d:57:27:9a:bb:00:48:5b:54:1a:ad:09:f0:8e:20:
                    24:7a:1b:39:de:2a:cb:9f:58:7d:c4:f7:d0:1e:1d:
                    80:62:8d:9c:7c:a3:31:59:43:c8:30:8b:4a:31:f3:
                    1d:89:4d:32:30:a0:51:73:ee:58:16:d5:70:bb:12:
                    ff:87:af:67:a0:e8:50:af:4e:29:e0:00:44:d7:f7:
                    ca:3d:68:da:43:1e:fa:da:c3:e8:11:32:31:18:4e:
                    3c:e7:7c:5e:4d:90:79:11:81:de:16:ba:94:a5:74:
                    7b:81:4a:86:8d:6d:29:3d:ae:a2:e1:13:13:f4:6c:
                    53:4f:c5:ba:c1:74:f3:d3:b0:5e:2c:5f:de:73:1c:
                    76:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6C:2F:68:7F:C6:79:E1:F0:F4:DB:A0:5E:33:99:97:1F:FE:CB:AE
            X509v3 Authority Key Identifier:
                keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:7d:ef:3a:fe:e3:6d:ad:32:e1:34:79:74:2d:dc:60:89:4f:
         9c:65:6a:1b:18:c0:64:09:fc:97:f3:68:25:ec:62:ae:79:13:
         19:70:41:81:f0:1c:ee:b3:38:f2:a2:6e:88:e8:fa:38:3a:6a:
         b5:14:92:f5:19:53:ac:d8:68:de:19:f5:ba:db:a7:62:fa:a0:
         89:81:45:f4:ab:be:22:af:5f:88:dd:ab:81:2a:54:cb:c9:2a:
         f1:de:be:a6:d2:e7:3d:fa:fa:c4:14:6d:ab:7a:cd:59:23:47:
         91:64:49:e4:86:04:5d:92:13:d4:05:48:3e:16:e2:89:cd:fa:
         4d:e8:9e:3c:cb:33:cc:65:3b:91:a1:96:4a:c9:6b:ef:35:f8:
         b3:39:d7:71:6e:77:bd:70:b9:76:e0:30:4a:f1:ad:7e:5e:95:
         40:09:62:de:85:8f:11:58:5e:25:da:fb:ee:f9:dc:c8:19:d0:
         af:58:e8:96:66:bb:c8:9b:d1:8c:52:1b:10:51:5c:d5:03:1a:
         5e:36:4d:fa:3c:aa:9e:0b:6c:ec:ae:77:4e:a3:ba:d6:0d:c5:
         49:8b:13:c1:e8:d0:5e:f6:4f:1e:ff:d6:4b:22:5d:87:9c:21:
         93:bb:b1:14:c9:99:61:da:7e:96:a3:d2:30:85:07:8d:04:90:
         da:05:87:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:20:00 2026 by rpki-client