Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File:                     yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier:          FeXwws+1JFCpL6/MAn3IEx1AlxYU0LTptHJKN8LKCto=
Subject key identifier:   41:10:85:90:EF:E6:D4:05:D6:5B:AE:59:E8:57:E3:FC:C7:BA:9E:F6
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer:       /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial:       019D9A751FC8969CD7328CBD9D98DD3CC12F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number:          1170
Signing time:             Fri 17 Apr 2026 08:01:00 +0000
Manifest this update:     Fri 17 Apr 2026 08:01:00 +0000
Manifest next update:     Sat 18 Apr 2026 08:01:00 +0000
Files and hashes:         1: 0Lwj5i1c4Zxo9S7reLT043tZQto.roa (hash: YQ43Pzm8kIwiUn3utvGc8HdrkEgRWVgYKvbGV3IgZ04=)
                          2: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: EMW+MryJ+kksud9kDwkn2GfEgugkYEOaqjMoxt2Yu7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:75:1f:c8:96:9c:d7:32:8c:bd:9d:98:dd:3c:c1:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
        Validity
            Not Before: Apr 17 08:01:00 2026 GMT
            Not After : Apr 18 08:01:00 2026 GMT
        Subject: CN=41108590efe6d405d65bae59e857e3fcc7ba9ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f2:73:5d:03:9c:cf:c0:aa:c3:b1:46:5a:ae:
                    82:33:fb:e9:2a:da:f9:a7:56:cf:c4:98:c2:c8:d2:
                    47:cc:1d:ec:e2:7b:29:a4:5b:5e:90:3a:4d:82:aa:
                    38:42:75:93:80:ef:bb:39:7c:12:5d:0d:78:1e:1c:
                    67:8a:08:1c:e7:82:93:42:d5:ba:bb:45:cd:2b:e5:
                    8a:27:df:91:3e:cc:1f:03:00:65:33:f7:ee:7e:3f:
                    79:da:35:6e:74:cc:59:ae:02:10:32:0d:2e:fb:9d:
                    28:3a:9f:96:d2:73:e9:57:33:65:9a:42:c6:99:c8:
                    e4:27:a5:29:09:d0:8d:9c:b9:e9:d9:05:26:3c:e1:
                    e8:cd:c7:5e:f6:ae:2c:37:aa:f0:60:a2:28:39:cf:
                    1a:18:a3:5a:17:3e:f5:ee:60:7a:4b:8b:8b:db:8f:
                    38:ef:3e:d5:0e:ee:09:8a:96:08:de:5f:b4:7b:8a:
                    d7:b7:04:87:f4:21:05:76:f9:77:14:ca:40:d9:67:
                    3b:10:61:f3:de:f1:7a:41:5a:ae:fc:9f:12:06:95:
                    08:33:fd:8d:63:c9:0b:1f:bb:bb:7c:41:78:28:de:
                    8c:76:43:6c:54:a0:3f:30:4c:51:e0:93:1f:17:9d:
                    7a:65:ce:bc:d8:63:0f:b3:b3:aa:c2:e7:4c:ad:4c:
                    aa:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:10:85:90:EF:E6:D4:05:D6:5B:AE:59:E8:57:E3:FC:C7:BA:9E:F6
            X509v3 Authority Key Identifier:
                keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:99:6a:1e:9c:ca:06:61:ce:cb:e6:35:90:ef:88:ea:5d:21:
         88:3d:4a:21:13:48:f5:9c:f6:bf:e4:21:e8:51:7b:4d:6d:7e:
         36:de:b6:a2:4d:1c:5c:cd:14:17:86:fc:0c:be:cf:31:ad:86:
         f3:79:83:53:41:c7:1d:52:b9:44:dd:59:1b:c7:5c:2c:d8:f8:
         de:3f:2c:34:76:54:77:ab:2a:6e:10:68:fc:b0:e1:c7:3d:a3:
         05:86:01:c9:35:26:95:34:7d:04:0e:6a:76:7b:34:b2:8f:19:
         78:7a:f5:8b:17:fd:eb:02:b2:d9:b1:e7:0a:de:da:95:9f:dc:
         77:66:1d:70:96:a0:58:5f:9e:64:68:b7:5c:01:8c:2c:63:4b:
         d7:5c:c4:7b:f2:ba:e4:cb:88:07:03:78:6b:81:03:41:83:ca:
         dd:97:48:3b:23:d2:30:85:a6:9c:a4:6d:35:ee:a0:e8:3d:16:
         91:8f:d0:db:2f:73:a8:fc:3f:80:02:79:f1:68:3c:aa:40:b4:
         26:ae:cb:ff:6b:d4:87:62:66:5c:4e:e1:42:5f:7a:2c:79:f6:
         31:a9:10:cd:8d:33:22:86:79:e7:85:d3:68:be:22:23:0a:76:
         31:93:75:72:b8:f1:95:dc:00:8d:bd:fb:22:4c:9e:c7:2f:4c:
         37:43:b3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:04 2026 by rpki-client