Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
File:                     ynSM0AzX_mohdVr2QtiBuN2aOfc.mft (raw, json)
Hash identifier:          8JxKFdpcA5oMoK8U6XMcVf3dESObc8LiQSXMRVtkv/A=
Subject key identifier:   F7:3C:C5:1A:00:83:B5:F7:A8:B5:52:61:71:1B:AB:BF:2F:FF:2D:44
Authority key identifier: CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7
Certificate issuer:       /CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7
Certificate serial:       019D99D00673634FA19D7ED019C9BEE94E51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 05:00:40 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:40 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:40 +0000
Files and hashes:         1: gVEq3NnVdt_2WnJ5HkFKQbFF6gI.roa (hash: PhtT91kBJsBi6v+NJo/OC9S74yakm+F5W9I39PDYLyk=)
                          2: ynSM0AzX_mohdVr2QtiBuN2aOfc.crl (hash: GYNeL9KUKulVsmnYEZVA/LsVMqpkWg4UkyTocfnEhYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:06:73:63:4f:a1:9d:7e:d0:19:c9:be:e9:4e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7
        Validity
            Not Before: Apr 17 05:00:40 2026 GMT
            Not After : Apr 18 05:00:40 2026 GMT
        Subject: CN=f73cc51a0083b5f7a8b55261711babbf2fff2d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:82:fe:76:d2:8c:a1:ae:91:e0:8e:21:af:6b:
                    8d:58:9a:74:2b:0b:2f:5e:62:42:a1:39:e1:2a:77:
                    17:ce:b1:c5:31:94:51:bd:be:da:9c:49:a3:a4:42:
                    dd:04:73:6e:6a:d5:67:52:e6:46:cc:f4:be:04:b1:
                    e1:8c:c0:c8:55:3f:d7:7e:46:b6:c8:b9:77:40:25:
                    38:eb:aa:29:9a:b4:6d:7c:7c:45:b7:bb:12:5d:a5:
                    1b:e5:7c:a3:6f:68:af:27:b8:91:55:f3:4c:62:cd:
                    4e:58:93:17:d7:10:ac:8e:d3:00:46:8e:15:d3:63:
                    97:a4:17:85:f2:6b:64:7c:d5:8f:da:a0:da:b2:a4:
                    99:aa:6c:53:e0:f1:07:69:98:15:df:c9:bb:48:87:
                    a6:c8:50:fd:95:98:96:72:32:6b:9d:50:33:ec:8d:
                    2d:b8:0b:13:dc:02:91:53:4f:56:85:96:32:37:4b:
                    63:64:28:74:4e:5b:d4:87:6d:b7:f8:3a:bc:6d:ff:
                    80:6d:d5:d0:59:6f:a6:da:f8:f1:b0:38:c1:2e:de:
                    3c:bd:69:1a:89:3c:5c:dd:24:39:b0:5f:1a:5a:7a:
                    0b:dc:c9:d7:ce:8a:e0:24:4c:d8:6d:ee:b7:d9:f3:
                    6c:2e:76:0d:fa:f9:af:60:04:57:e8:14:a0:8c:b8:
                    72:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3C:C5:1A:00:83:B5:F7:A8:B5:52:61:71:1B:AB:BF:2F:FF:2D:44
            X509v3 Authority Key Identifier:
                keyid:CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:46:0f:20:4e:0d:6d:e1:55:f8:32:2f:b9:d5:11:7c:e9:22:
         a8:0d:e7:b9:31:a6:0e:b5:80:10:69:c5:c6:1b:f3:c5:e6:f9:
         e1:4d:f7:e7:b6:8d:86:a0:61:13:23:0b:b3:fc:8f:40:52:0f:
         88:05:e6:28:fc:6b:db:be:ee:f2:7e:dc:00:5b:22:18:8e:11:
         d6:1e:cd:ab:6d:3b:5e:ad:f6:2e:27:fe:59:8b:95:20:d2:fb:
         65:41:7d:fb:76:5c:0f:a6:6d:93:ac:ae:8a:ee:c9:3a:bf:5f:
         76:40:71:9f:cd:7a:c2:7a:b7:50:65:14:a3:c1:a2:97:40:47:
         5c:67:ce:ff:8f:f5:69:d7:68:46:31:f0:02:25:45:6f:52:6c:
         b4:8a:f4:7a:6d:e4:0e:86:b7:11:3e:9e:2c:d2:5d:97:e5:f4:
         82:2d:07:66:fe:e2:a9:65:4d:b1:38:21:f8:f6:3e:9b:1a:e1:
         a8:c4:3e:1f:93:f8:b2:3c:66:04:40:b1:be:4f:04:e4:3b:f5:
         d4:2a:13:56:cc:c5:e9:2c:c2:19:ac:21:88:50:b5:02:55:fb:
         6f:be:b6:dd:3e:03:4d:7f:80:dd:6a:c7:53:e2:dd:21:fb:55:
         82:5f:6e:d1:1e:19:c3:c7:cb:73:a7:c9:ee:96:c7:73:1a:9d:
         58:5f:2f:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0AZzY0+hnX7QGcm+6U5RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNzQ4Y2QwMGNkN2ZlNmEyMTc1NWFmNjQyZDg4MWI4ZGQ5
YTM5ZjcwHhcNMjYwNDE3MDUwMDQwWhcNMjYwNDE4MDUwMDQwWjAzMTEwLwYDVQQD
EyhmNzNjYzUxYTAwODNiNWY3YThiNTUyNjE3MTFiYWJiZjJmZmYyZDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYL+dtKMoa6R4I4hr2uNWJp0Kwsv
XmJCoTnhKncXzrHFMZRRvb7anEmjpELdBHNuatVnUuZGzPS+BLHhjMDIVT/Xfka2
yLl3QCU466opmrRtfHxFt7sSXaUb5Xyjb2ivJ7iRVfNMYs1OWJMX1xCsjtMARo4V
02OXpBeF8mtkfNWP2qDasqSZqmxT4PEHaZgV38m7SIemyFD9lZiWcjJrnVAz7I0t
uAsT3AKRU09WhZYyN0tjZCh0TlvUh223+Dq8bf+AbdXQWW+m2vjxsDjBLt48vWka
iTxc3SQ5sF8aWnoL3MnXzorgJEzYbe632fNsLnYN+vmvYARX6BSgjLhy5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPc8xRoAg7X3qLVSYXEbq78v/y1EMB8GA1UdIwQY
MBaAFMp0jNAM1/5qIXVa9kLYgbjdmjn3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW5TTTBBelhfbW9oZFZyMlF0aUJ1TjJhT2ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xNmVlYjItYzgyNy00MmM5LThlNDgt
MmEzZGY5YjMzMzEzLzEveW5TTTBBelhfbW9oZFZyMlF0aUJ1TjJhT2ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8xNmVlYjItYzgyNy00MmM5LThlNDgtMmEzZGY5YjMzMzEz
LzEveW5TTTBBelhfbW9oZFZyMlF0aUJ1TjJhT2ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUYPIE4N
beFV+DIvudURfOkiqA3nuTGmDrWAEGnFxhvzxeb54U3357aNhqBhEyMLs/yPQFIP
iAXmKPxr277u8n7cAFsiGI4R1h7Nq207Xq32Lif+WYuVINL7ZUF9+3ZcD6Ztk6yu
iu7JOr9fdkBxn816wnq3UGUUo8Gil0BHXGfO/4/1addoRjHwAiVFb1JstIr0em3k
Doa3ET6eLNJdl+X0gi0HZv7iqWVNsTgh+PY+mxrhqMQ+H5P4sjxmBECxvk8E5Dv1
1CoTVszF6SzCGawhiFC1AlX7b7623T4DTX+A3WrHU+LdIftVgl9u0R4Zw8fLc6fJ
7pbHcxqdWF8v9w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:54:00 2026 by rpki-client