Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
File:                     y15v1iT-wGkv5waeN5Ix5STYD7w.mft (raw, json)
Hash identifier:          SwSkxsesYoU0s/4PgIqH11itexS5kjYO2NCAWeO6MnQ=
Subject key identifier:   ED:B8:19:63:4B:73:DE:27:24:76:D2:9D:D7:2A:B8:D8:CF:0F:65:DB
Authority key identifier: CB:5E:6F:D6:24:FE:C0:69:2F:E7:06:9E:37:92:31:E5:24:D8:0F:BC
Certificate issuer:       /CN=cb5e6fd624fec0692fe7069e379231e524d80fbc
Certificate serial:       019D9998EDF80F051CF23C32B8E7674DCCFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
Manifest number:          136C
Signing time:             Fri 17 Apr 2026 04:00:29 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:29 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:29 +0000
Files and hashes:         1: nSDdOSHCspVYpleIhOXCb9rtFXU.roa (hash: DP5yiwIDcmmdgoi5MgA6ERsteJ2t3mRoP7VsaFCdpY0=)
                          2: y15v1iT-wGkv5waeN5Ix5STYD7w.crl (hash: Hy3YNmSabzqt8TkUD70YYwH62metEmYMEfqT9yHb9GM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:98:ed:f8:0f:05:1c:f2:3c:32:b8:e7:67:4d:cc:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb5e6fd624fec0692fe7069e379231e524d80fbc
        Validity
            Not Before: Apr 17 04:00:29 2026 GMT
            Not After : Apr 18 04:00:29 2026 GMT
        Subject: CN=edb819634b73de272476d29dd72ab8d8cf0f65db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3c:68:dd:a5:91:e9:1b:98:1c:34:59:c5:f4:
                    26:fd:b6:3d:50:c1:b4:19:3b:d2:34:a9:a7:4d:6c:
                    67:86:61:d8:85:1d:d3:8e:07:74:2b:e1:50:0f:92:
                    af:73:51:fd:a7:ec:12:e1:51:60:07:67:6d:d0:89:
                    f5:2b:83:fc:18:1d:fa:16:c0:bd:02:00:1c:57:b9:
                    76:41:fe:ef:1b:43:ea:a3:6b:32:27:b7:89:a3:00:
                    59:cd:36:ed:63:21:ea:ff:a3:a4:9b:36:5b:41:94:
                    95:a9:39:fe:1a:a2:8d:47:3d:71:a4:01:a8:96:59:
                    a6:d5:ce:7d:15:dc:0b:a2:79:45:03:53:76:d6:a3:
                    9a:d8:63:e2:c3:40:36:09:18:df:15:c1:89:51:8b:
                    67:ce:f2:d8:0e:8e:36:8c:a0:8e:d2:54:4d:a4:e4:
                    44:01:7a:13:90:bf:30:38:6d:8a:8d:bc:fd:40:d4:
                    8a:81:8b:27:73:79:c2:63:23:fa:7d:c9:48:ea:62:
                    94:3a:84:03:be:91:9b:08:20:64:05:f4:53:81:1b:
                    da:3a:ab:bb:ce:7b:90:87:ed:5f:56:38:08:db:29:
                    6d:0a:93:f7:10:e5:1d:c1:66:c4:84:e1:01:53:0c:
                    c4:07:32:15:05:bd:2e:cf:fa:36:8d:a5:15:fa:44:
                    df:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B8:19:63:4B:73:DE:27:24:76:D2:9D:D7:2A:B8:D8:CF:0F:65:DB
            X509v3 Authority Key Identifier:
                keyid:CB:5E:6F:D6:24:FE:C0:69:2F:E7:06:9E:37:92:31:E5:24:D8:0F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:1a:d0:5b:da:04:51:19:cf:f0:d6:1d:58:37:ed:89:3b:f8:
         29:60:89:2b:9f:a3:a5:e0:30:98:e4:ba:b5:98:27:a7:75:ca:
         17:85:37:02:cb:62:f3:c7:cf:ae:66:53:16:29:a1:e6:dd:fe:
         cc:75:8e:6e:25:98:8d:e0:8d:cd:8f:95:9e:58:27:5b:e6:e0:
         25:97:dc:34:8e:6e:0b:ea:3e:a4:f9:25:55:ca:03:b1:3b:06:
         ff:01:e4:cb:18:3c:52:72:c4:49:d6:96:31:6c:dc:3b:ca:40:
         8a:8d:5f:51:e9:42:d2:06:ff:90:23:3c:57:35:c9:29:1f:ef:
         5a:6e:56:c0:b6:69:b7:44:4c:aa:76:f3:0a:d4:c0:95:c9:e0:
         91:23:32:b9:a1:62:aa:f5:79:8f:2d:5e:2d:9e:58:08:24:11:
         68:db:bb:83:81:1d:ee:e0:b7:1c:4a:69:53:03:71:e2:43:ae:
         c6:43:d3:fc:a5:32:46:b6:fd:6c:74:ba:1c:35:26:86:13:a2:
         e9:7d:35:9f:bc:5a:b4:47:52:aa:6a:8d:91:b4:d7:72:9b:39:
         f8:25:2e:c6:62:ce:49:4c:14:42:34:b8:86:0e:ee:de:94:e2:
         07:aa:c5:a2:eb:95:bd:0a:e3:95:1f:e7:c4:9c:23:00:d6:7f:
         1a:ee:24:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:43 2026 by rpki-client