Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft
File:                     ybIylYCXtYY-r9BHuzFRceqgH7c.mft (raw, json)
Hash identifier:          194j+SWp6V2jN7n+SragT1TwheSyS55xkyIMUYUUj3E=
Subject key identifier:   7C:4C:DE:12:4C:84:30:B7:F9:5F:AB:0A:4B:D0:08:8E:F3:95:62:FF
Authority key identifier: C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7
Certificate issuer:       /CN=c9b232958097b5863eafd047bb315171eaa01fb7
Certificate serial:       019D9A7487D2733C3A27C10556A06567049F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 08:00:21 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:21 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:21 +0000
Files and hashes:         1: 8y14F0niaDLVL7hP8HOPOIkGBE0.roa (hash: iAEQXisqtNhusS787DBQONGHAa0NvsETVhbhodQ0298=)
                          2: Lo8OrI4-QoBfkRG5EFpy6ZKhD3c.roa (hash: liDOGahnCT5YOOVoL1UbtXwpmdR4G1O4f4p7XQvK1gQ=)
                          3: cEnFQpKL_n3Pi1rsfRDV7oBVtt0.roa (hash: FYYQsqM4KNdf8MSB3ff4z41RrQKEvyE2KHfpzGu82Ow=)
                          4: jpcPAYO0vBwJA8ouiKgmlRSBP_I.roa (hash: ndvQcEOfrGPn5H+JU39HBzxi3s5bQEUJ9vA23XpxTsI=)
                          5: ybIylYCXtYY-r9BHuzFRceqgH7c.crl (hash: v0xYzy0CEvGeUbBEXojV1ETwj2NRH8VT6yCV0LznPjk=)
                          6: zPStaZsfPYqzEeXC4gEAq5tIzW0.roa (hash: rrCGM4WWxov5TxyVuLiBLthKY+9HoXWP3nXelKVvZlA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:87:d2:73:3c:3a:27:c1:05:56:a0:65:67:04:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b232958097b5863eafd047bb315171eaa01fb7
        Validity
            Not Before: Apr 17 08:00:21 2026 GMT
            Not After : Apr 18 08:00:21 2026 GMT
        Subject: CN=7c4cde124c8430b7f95fab0a4bd0088ef39562ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:75:1d:f9:4e:04:5c:17:5a:36:24:bb:2f:26:
                    10:db:51:40:15:62:69:aa:9d:fd:15:d0:e9:d1:ef:
                    02:a1:63:dd:da:32:2e:1e:19:c9:e5:06:62:17:48:
                    74:c4:cb:dd:ed:74:a6:bd:83:18:c8:af:f0:20:88:
                    d9:b7:77:eb:17:de:f4:a9:43:32:f9:78:62:83:62:
                    88:ee:e0:61:c7:59:44:52:28:28:28:5a:7b:8f:1a:
                    6f:a6:f2:3d:cd:97:31:71:74:92:a8:d7:23:e0:07:
                    8a:38:ca:d4:18:1a:5f:91:23:96:fb:6f:90:ad:9c:
                    7d:6c:33:4b:8f:c3:f3:92:fb:ac:d5:7d:3b:56:e4:
                    5c:c2:f0:95:62:d8:47:20:a6:a4:4b:13:23:94:b3:
                    1f:2e:fb:8c:f4:ef:4e:d6:93:54:e6:05:b1:b7:e8:
                    50:5c:44:bb:99:70:dd:af:91:31:d4:c0:05:13:b9:
                    1d:2a:29:5e:5f:23:9a:42:12:b3:9a:cb:ba:47:92:
                    0b:01:0e:05:32:32:55:ef:dc:cd:48:4d:6a:8a:fd:
                    a0:0e:b8:10:71:5e:6e:96:07:c3:4c:64:ac:88:73:
                    58:b0:57:20:21:43:57:3f:97:17:d0:6c:f4:52:90:
                    aa:c3:4e:cd:88:7d:c2:09:82:dd:f3:7a:bc:8c:60:
                    3d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4C:DE:12:4C:84:30:B7:F9:5F:AB:0A:4B:D0:08:8E:F3:95:62:FF
            X509v3 Authority Key Identifier:
                keyid:C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:2d:30:35:24:6a:8b:81:0d:3e:01:2d:8e:d8:65:81:c9:68:
         38:a4:1a:30:d6:bd:8e:c2:85:fa:df:f7:39:5c:f4:52:d1:ca:
         04:7a:ec:d9:8c:5d:9d:d9:8c:40:9d:8d:f2:ad:02:22:23:86:
         c9:bf:be:f6:77:36:73:d5:20:da:20:41:fd:9d:d2:3b:38:51:
         b2:4a:66:ee:0c:a3:e7:30:57:a8:1a:b5:e7:db:cb:b8:f4:29:
         ff:6a:36:45:3f:3d:fd:7e:f6:55:f8:38:41:98:97:02:ab:d3:
         54:21:84:6a:87:19:fa:44:41:77:01:cf:6c:ec:10:62:23:7c:
         60:ad:8f:4c:db:3a:a1:76:93:9a:43:ba:ea:0c:c7:0d:f1:0b:
         de:25:88:bb:b4:4f:04:2f:34:41:82:4e:a4:dc:a9:1a:0e:92:
         97:98:48:ca:d9:f4:05:c8:84:c4:50:ec:b2:ca:c7:bc:0b:52:
         73:6d:69:65:5d:d2:bf:3b:47:b0:de:60:3f:af:1c:a5:08:9b:
         70:0a:ec:7d:ab:38:8f:0e:90:36:e3:a1:44:b7:2f:99:c8:9e:
         9b:c2:61:99:86:a3:47:41:90:c7:f4:ed:e0:bf:18:6c:cb:40:
         90:5e:93:99:20:5d:4f:ce:da:a1:32:ef:4d:37:e7:1f:bf:82:
         93:63:d1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:16:11 2026 by rpki-client