Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
File:                     yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft (raw, json)
Hash identifier:          bqzfM9oVTxRy6j6tK7AQzpVOvk8+kbP5kNJ+d4Ne6BU=
Subject key identifier:   8C:6A:6F:DE:90:85:58:15:62:88:BB:E0:32:A1:64:CB:DB:E0:FD:E1
Authority key identifier: C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
Certificate issuer:       /CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Certificate serial:       019E1FECA312F915411AA7CF83BFE63576B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
Manifest number:          0EC1
Signing time:             Wed 13 May 2026 06:01:02 +0000
Manifest this update:     Wed 13 May 2026 06:01:02 +0000
Manifest next update:     Thu 14 May 2026 06:01:02 +0000
Files and hashes:         1: cN4RDtGLM5l2DvX_T4i1shDStCU.roa (hash: yvuehCFR0SYwl9RZeEUmpN0/FZZPNS0ZYV+AhmYhkto=)
                          2: yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl (hash: mBbg43dAnbItHwxQu5I9RqlY/eqkJpoKgaeNwhrKkQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:a3:12:f9:15:41:1a:a7:cf:83:bf:e6:35:76:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
        Validity
            Not Before: May 13 06:01:02 2026 GMT
            Not After : May 14 06:01:02 2026 GMT
        Subject: CN=8c6a6fde908558156288bbe032a164cbdbe0fde1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7c:91:51:4d:7b:e8:62:3b:b3:68:2b:f0:0a:
                    88:95:5b:50:16:bd:87:41:57:32:3f:b2:08:06:e7:
                    12:19:93:ff:0c:12:45:ae:ae:55:e5:32:15:39:41:
                    a7:db:79:05:8e:98:07:10:31:88:82:04:a0:ae:a1:
                    ac:ee:8c:50:b5:d5:40:99:50:cb:f9:35:5a:eb:12:
                    c8:92:d6:7d:38:28:2f:5f:0d:69:09:6c:f9:12:81:
                    e2:35:03:00:9a:8d:dc:5f:ad:11:00:27:58:1a:35:
                    91:7b:c6:18:d6:0a:49:4a:62:cd:16:0e:d2:2d:10:
                    54:11:7d:72:5d:82:07:2c:6d:09:4a:e7:01:ed:bc:
                    cd:4a:5e:c7:08:e9:90:4c:61:85:99:94:61:4b:6a:
                    95:b2:8b:3e:ca:de:e6:5d:81:d1:4d:1a:6c:55:16:
                    40:a4:73:36:d1:67:80:34:8b:c0:0a:16:59:47:0b:
                    18:19:93:b6:88:8b:87:2f:14:67:90:a4:d2:b3:57:
                    32:4f:ec:38:8c:2d:a0:06:31:5e:5c:df:40:49:12:
                    a5:16:62:28:f0:e3:a9:34:62:ed:d5:39:07:83:f5:
                    32:25:1c:67:60:6f:28:ab:62:e3:cd:66:8c:1b:69:
                    50:df:8e:28:e5:f8:46:3c:af:3e:59:d8:a4:57:2c:
                    08:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6A:6F:DE:90:85:58:15:62:88:BB:E0:32:A1:64:CB:DB:E0:FD:E1
            X509v3 Authority Key Identifier:
                keyid:C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:02:48:a5:c4:2c:77:45:4c:f0:d3:c2:4b:e0:86:58:75:dd:
         46:1d:0c:cc:4a:4f:28:63:8a:ad:0e:3e:8d:c9:73:07:a6:26:
         e4:22:17:8b:37:30:3f:3f:33:31:5f:f4:39:8b:58:50:da:9a:
         2c:f7:27:91:1d:b3:cd:d0:6e:82:7a:b4:26:43:a3:c5:14:4c:
         97:f6:f9:8d:db:04:f7:49:e5:06:94:ac:bd:05:4b:be:bd:10:
         00:bc:1b:11:5d:a2:32:69:9f:4f:43:a4:c0:3d:8b:c6:4e:98:
         bb:a8:0d:fb:fc:69:ec:c1:4e:15:b3:9d:21:4c:73:a8:4d:80:
         80:47:55:fd:97:45:f8:f2:04:da:89:c7:8d:b3:4e:23:95:c5:
         86:d9:64:0e:fd:e5:9f:c5:d5:79:45:8b:f6:d3:cc:d4:dd:30:
         66:17:00:c2:35:43:d1:e9:5d:8e:2c:84:b9:ac:a5:82:e1:9c:
         b1:6c:c7:6f:20:c0:e9:62:b3:35:0f:eb:02:2a:7d:93:6b:d8:
         f6:88:05:4a:0e:13:ab:fa:66:ad:af:10:4b:77:9d:b8:61:73:
         24:e1:52:2c:f6:f8:07:d3:53:e7:4d:97:b4:e6:2f:7d:b5:a9:
         65:bc:17:d1:72:c9:cd:4e:bd:a6:6e:cb:ef:4a:65:a8:3c:de:
         86:9a:cd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:00 2026 by rpki-client