Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
File:                     MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft (raw, json)
Hash identifier:          NIwKhDfsgCUPF8JGzj9zOxAmQt4SpwVmHOB7gFaJSJI=
Subject key identifier:   85:AF:CC:72:6D:81:3E:E1:81:E4:5F:D1:95:55:AC:28:F8:62:BC:27
Authority key identifier: 31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0
Certificate issuer:       /CN=31828c99d35cb92e2d53daf128e497e841b63ab0
Certificate serial:       019D984F8A74BBF752CA9A7D163815CBAB7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
Manifest number:          0F65
Signing time:             Thu 16 Apr 2026 22:00:42 +0000
Manifest this update:     Thu 16 Apr 2026 22:00:42 +0000
Manifest next update:     Fri 17 Apr 2026 22:00:42 +0000
Files and hashes:         1: GkouH-o047T5JTSoOlFrFlZ6LAk.roa (hash: LyKAkgLhQ3B6LkGr5mqVhCq49UmdkcvtOyqh3Ra9Jtw=)
                          2: KIqHcyHjzUZJ3cC9r4o9D_YRiaE.roa (hash: Wjg6EvOWdh1EArjC2HdiYoGrTNwnd1GKg0SQ1DQtlJM=)
                          3: MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl (hash: MZXvfj8zBrADkFjb185C09eEqO1XFHv2J9wCoANi8wQ=)
                          4: jGgiZ8UgkX-ZfqBNajQ9uue-Rrc.roa (hash: XIdiJuC/vzsQTCNcPtjQEtIJRyHtsvJsPgJI2QdsCTU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:8a:74:bb:f7:52:ca:9a:7d:16:38:15:cb:ab:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31828c99d35cb92e2d53daf128e497e841b63ab0
        Validity
            Not Before: Apr 16 22:00:42 2026 GMT
            Not After : Apr 17 22:00:42 2026 GMT
        Subject: CN=85afcc726d813ee181e45fd19555ac28f862bc27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ad:7a:69:69:f9:f5:6c:eb:77:f2:83:d9:b5:
                    b0:22:45:99:d8:26:d2:c2:b0:fd:7a:08:d5:1f:3e:
                    ef:80:fc:d7:0c:6b:d0:bc:bc:d5:1b:fc:34:79:72:
                    96:e2:39:2d:c9:29:c6:cc:a4:fb:ce:16:b0:5d:92:
                    01:a2:fd:5d:76:3f:f1:16:aa:cb:20:5e:c9:86:9c:
                    fc:69:60:09:79:97:c8:65:e6:9c:15:92:8a:74:94:
                    71:05:3a:7d:57:7c:af:e1:25:a1:24:6f:30:43:cd:
                    a1:00:ce:f7:c3:94:ec:35:b7:80:1b:e6:ca:00:0b:
                    7e:8b:61:67:36:9b:cd:0c:a9:81:0b:28:7f:bb:1f:
                    5f:7d:98:f5:41:08:1a:73:5d:56:4a:10:9f:d0:55:
                    5e:5d:b4:4a:87:09:48:a1:4a:a3:20:e8:ba:e2:38:
                    76:f6:82:db:22:3e:81:fe:e8:97:ea:8f:2b:7a:83:
                    12:31:ce:a8:7d:50:7d:e7:ce:17:a0:a4:e0:57:cf:
                    ba:aa:d4:73:5e:66:3b:0d:86:89:59:3b:43:a1:0a:
                    13:6c:1b:c5:22:6d:2b:85:03:dd:cc:57:40:38:1f:
                    a9:d3:3b:15:fc:c2:77:88:18:ef:d0:e1:fb:e4:b6:
                    8b:7b:d7:f1:86:c7:b2:89:f9:81:ec:b7:e8:8d:9d:
                    dd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AF:CC:72:6D:81:3E:E1:81:E4:5F:D1:95:55:AC:28:F8:62:BC:27
            X509v3 Authority Key Identifier:
                keyid:31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:5e:64:65:c6:ac:59:de:2b:98:66:86:b6:4d:42:21:c4:6d:
         22:36:f0:58:81:8f:20:99:6a:a9:47:94:5e:bf:ad:8d:90:da:
         9c:9f:c2:1a:4a:09:0b:87:b2:ee:b2:be:82:20:1d:94:98:98:
         c6:ed:e2:05:d5:1f:f2:e1:97:1d:b5:08:27:86:ba:88:6f:39:
         b8:32:21:0c:21:c0:6c:fc:08:52:f0:3c:22:4c:b4:65:8b:35:
         bb:40:07:3b:85:5b:7d:cc:fa:94:bc:3d:e2:02:4d:0a:b1:49:
         60:7a:5b:95:77:8f:9a:fe:7d:14:9d:d7:00:f1:74:65:87:81:
         b7:ef:b3:10:98:d5:05:4c:4a:32:7f:e8:fd:e5:69:7b:ee:d9:
         d9:3b:48:72:76:82:8b:eb:77:43:f8:f6:3b:24:51:60:e9:3a:
         9e:31:18:9b:24:21:c2:7b:53:ca:d1:1a:a3:9a:c5:a8:16:7e:
         30:c3:fd:c3:36:73:3e:3e:4a:d0:85:48:94:a4:5e:e3:30:2a:
         77:6a:f1:6e:a2:32:cb:a5:1e:62:44:8f:8d:b9:19:6a:cc:6f:
         b0:03:9c:62:c9:79:5f:bb:67:bc:b1:22:28:20:f4:b1:93:36:
         ba:d6:b2:7c:19:b4:b5:68:a0:65:63:9d:2f:cd:ec:8e:91:c2:
         e2:2d:e7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:19:55 2026 by rpki-client