Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
File:                     R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft (raw, json)
Hash identifier:          ygazXEIrrUnavGBdruH75A/0DQlMgvSh3Nu0Kc0Ff7s=
Subject key identifier:   16:43:FB:91:A8:1C:BF:DC:80:C9:E4:AC:9D:6F:17:53:67:F7:B0:CF
Authority key identifier: 47:66:2F:9F:F6:B6:43:C4:67:A2:B4:34:B7:6F:82:5E:BB:66:FE:D4
Certificate issuer:       /CN=47662f9ff6b643c467a2b434b76f825ebb66fed4
Certificate serial:       019D9886D575E297DC0CCE94520263FF5A63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
Manifest number:          0880
Signing time:             Thu 16 Apr 2026 23:01:06 +0000
Manifest this update:     Thu 16 Apr 2026 23:01:06 +0000
Manifest next update:     Fri 17 Apr 2026 23:01:06 +0000
Files and hashes:         1: R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl (hash: rFzgvEvCM0Hd8JIKU11NuSxTezX/AvuHKReZ5Hzt3LU=)
                          2: m31omT_27UL9_8TqT3dZ0O1Xy54.roa (hash: rFLDJzjWnty+Ky2kZezUhQGZshkPkxWj6t4wCRGgxlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:d5:75:e2:97:dc:0c:ce:94:52:02:63:ff:5a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47662f9ff6b643c467a2b434b76f825ebb66fed4
        Validity
            Not Before: Apr 16 23:01:06 2026 GMT
            Not After : Apr 17 23:01:06 2026 GMT
        Subject: CN=1643fb91a81cbfdc80c9e4ac9d6f175367f7b0cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:85:24:eb:ee:4e:77:1f:db:15:45:39:96:3c:
                    0e:1a:dd:96:39:bc:ca:d3:cf:d9:cb:72:ab:f4:e4:
                    68:fe:4c:a9:08:b2:3e:8c:71:18:da:0c:68:a1:8a:
                    8a:65:44:d1:6c:08:0a:86:ba:b9:37:58:e3:31:4f:
                    d6:6d:56:c7:76:ac:26:c5:56:9c:00:a3:4a:13:c3:
                    0f:06:3f:95:ea:59:b9:2b:eb:3f:2b:41:44:df:c6:
                    31:d1:84:c5:29:b8:43:74:37:ef:f8:15:b8:67:e1:
                    bd:40:e5:e1:a8:44:87:3e:1e:de:24:7f:70:9b:86:
                    a0:89:0c:79:5d:32:29:64:1d:13:01:10:15:35:be:
                    b5:c2:45:01:8a:e6:ad:34:3f:89:ab:cb:19:fa:e1:
                    7a:2d:8c:a8:07:7d:33:30:e4:3c:36:eb:3d:fe:8c:
                    7a:63:fc:53:1a:08:97:93:1b:87:46:43:f3:7a:39:
                    1a:c0:a7:90:79:fc:cf:0b:5f:f8:da:56:d6:db:a9:
                    bc:09:2c:0d:9e:c1:1a:be:ed:b4:5a:8c:df:21:6d:
                    07:5e:00:a0:af:d1:11:29:e5:1e:08:40:46:f0:1a:
                    ab:9f:f2:d9:85:e3:61:67:93:da:d5:76:13:2b:65:
                    e8:82:d4:6a:aa:29:b3:78:96:42:42:96:b0:c1:55:
                    18:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:43:FB:91:A8:1C:BF:DC:80:C9:E4:AC:9D:6F:17:53:67:F7:B0:CF
            X509v3 Authority Key Identifier:
                keyid:47:66:2F:9F:F6:B6:43:C4:67:A2:B4:34:B7:6F:82:5E:BB:66:FE:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:37:cf:95:80:68:27:31:3a:0b:7a:2c:1b:d5:2e:64:89:d5:
         8f:06:49:aa:71:eb:e0:34:ff:41:e9:75:f6:5e:9a:29:08:18:
         78:7b:87:91:6e:8f:e1:1a:a4:92:73:d1:72:7f:eb:06:d4:ab:
         d6:81:38:8e:b8:28:01:23:b0:59:71:a7:b9:5f:7c:8a:a6:e4:
         9f:29:5e:bc:4f:08:b8:cb:2e:ad:69:b7:8f:0d:b4:ac:04:f1:
         e2:7c:3f:88:e9:96:a4:77:8d:64:d9:bd:f8:bb:c9:28:0e:0e:
         23:19:77:37:d8:ed:8f:1f:aa:f9:47:3d:53:e4:40:12:ba:3e:
         b5:ed:a8:97:f4:1f:94:28:b6:0b:e0:4a:cb:9b:00:37:b9:5e:
         ec:22:cd:99:56:22:8d:ba:8c:ef:f3:86:2e:36:36:12:ce:bd:
         29:8d:e9:23:38:68:13:28:6c:a4:70:88:8b:6e:49:79:5a:22:
         ab:49:9b:13:fc:8e:f9:e5:24:a4:08:6f:56:5d:4c:35:d7:26:
         2e:eb:42:d2:89:33:da:25:05:0d:bd:68:bc:9c:33:89:ff:e3:
         e7:c1:94:51:c3:9a:b4:57:58:34:5c:bb:a9:3d:bd:8b:bc:33:
         9a:b8:cd:9c:9b:f4:e6:54:ea:b5:5d:e8:da:42:e8:a5:24:20:
         5a:d6:39:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:57:58 2026 by rpki-client