Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
File:                     MYy__80hEn3jYoaXWY2wwtnhE1E.mft (raw, json)
Hash identifier:          cpmTXrM+r0qdxRNVunWNh7L0KKFzeT2+UJaiy8rTpCA=
Subject key identifier:   DA:92:A1:CD:E9:CB:B1:C6:BF:BD:E7:2E:AE:92:34:45:9F:25:B6:20
Authority key identifier: 31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51
Certificate issuer:       /CN=318cbfffcd21127de3628697598db0c2d9e11351
Certificate serial:       019E2023DC7AA60E28D85D47DB2E73B27684
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
Manifest number:          123A
Signing time:             Wed 13 May 2026 07:01:21 +0000
Manifest this update:     Wed 13 May 2026 07:01:21 +0000
Manifest next update:     Thu 14 May 2026 07:01:21 +0000
Files and hashes:         1: D4so7F4iJQ3ao6dIXFSQYC-XGbE.roa (hash: gqWDVnk0tUa5bFlFT+UYPIPkFsYBe4H7LkGhaI+lIUo=)
                          2: MYy__80hEn3jYoaXWY2wwtnhE1E.crl (hash: +TSZ40lUHsjJqfewOZ3/zjrLT1cdQXMmsAhDiNcIVuQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:dc:7a:a6:0e:28:d8:5d:47:db:2e:73:b2:76:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=318cbfffcd21127de3628697598db0c2d9e11351
        Validity
            Not Before: May 13 07:01:21 2026 GMT
            Not After : May 14 07:01:21 2026 GMT
        Subject: CN=da92a1cde9cbb1c6bfbde72eae9234459f25b620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:1d:0a:1e:c7:07:6b:c6:af:ec:9b:c7:8a:30:
                    36:d5:7e:5a:d4:fe:1d:0a:55:f7:6c:ca:be:6f:c1:
                    11:9e:51:20:55:d3:64:50:91:ca:e5:4c:6e:bb:3e:
                    45:ea:84:d2:7d:74:7f:0a:85:3c:83:e5:42:12:57:
                    f4:11:1a:af:fe:2e:5a:48:92:ea:f0:a9:0c:c8:f2:
                    47:43:8f:61:af:1c:29:fa:39:36:7a:f9:56:6f:ff:
                    2c:12:97:4a:bd:72:a0:27:f2:00:1b:e6:91:39:28:
                    93:09:9c:4a:8b:07:05:a2:71:3f:e7:91:9e:b3:9e:
                    cc:e1:fc:70:a4:63:c1:4e:7e:44:d1:c0:cb:83:14:
                    a7:c2:a1:80:65:eb:5a:d4:f6:87:5b:9d:46:c9:db:
                    58:a2:df:f3:d6:2b:55:9a:e6:bd:88:ff:57:25:08:
                    dc:42:e2:4c:12:cc:57:f3:18:65:b3:f0:0f:ef:2b:
                    11:30:68:d1:76:5a:40:9f:0a:0e:80:c6:9a:98:1a:
                    52:79:56:e0:8f:22:9a:d8:f3:69:93:b5:56:bb:32:
                    01:f5:56:7f:0d:d7:e5:5e:23:0d:8b:8f:38:6e:c6:
                    ea:ad:16:5e:fc:c3:44:1d:02:51:fd:81:f4:d0:08:
                    10:05:78:a0:64:32:f2:1d:cd:e0:8a:39:b4:20:de:
                    50:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:92:A1:CD:E9:CB:B1:C6:BF:BD:E7:2E:AE:92:34:45:9F:25:B6:20
            X509v3 Authority Key Identifier:
                keyid:31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:87:f6:dc:48:1b:a5:ea:f6:76:94:3a:c0:5c:b7:52:7f:c5:
         46:20:f3:31:ce:dc:c3:91:3e:62:24:f9:04:b3:a3:56:18:72:
         12:50:d6:fc:ef:ba:bc:90:0c:86:97:ed:95:d3:39:2d:f4:ed:
         03:e4:dd:cc:b9:49:c5:21:84:1e:d3:61:15:0a:f6:ab:48:36:
         b8:e3:45:fe:90:e3:45:bc:89:cf:67:1b:9f:6c:5c:04:70:50:
         83:64:9a:8b:dc:6a:79:3d:89:3b:27:8f:6e:05:6f:14:58:4a:
         ea:0a:aa:8a:5a:72:18:69:c1:94:d9:b2:df:83:86:40:fb:c4:
         7b:15:cf:dd:7c:d7:04:38:6b:6d:ba:77:60:fe:f5:6a:3f:7d:
         e7:a8:d0:a9:5e:90:75:c4:40:3e:1b:13:c5:36:eb:09:55:2a:
         e2:9b:70:9a:5d:e4:fc:c2:6c:51:60:f9:bd:71:59:a1:14:32:
         64:8f:de:89:9d:a5:6e:c8:8d:79:79:23:db:5d:a5:dd:d7:0d:
         4a:41:ae:50:55:f9:04:78:a6:b4:2d:58:fe:d7:78:3d:c4:ef:
         b6:89:d8:37:fd:6d:aa:b0:fc:e3:92:c3:6c:f6:80:ee:1c:86:
         d8:d6:ee:6a:d0:a0:72:2f:9a:0b:89:f0:58:d4:4f:87:53:ba:
         1b:d4:c1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:07:06 2026 by rpki-client