Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
File:                     y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft (raw, json)
Hash identifier:          fwDUiG+03owxvpY3Piko2OMo+eyDZfug+jz/eWdU3hs=
Subject key identifier:   79:6D:88:7E:5F:72:FE:5D:33:83:EC:E2:F6:87:5C:82:A3:BC:5B:15
Authority key identifier: CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
Certificate issuer:       /CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Certificate serial:       019E1F7F42EDC3F90D39A5FD256EAA2705CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
Manifest number:          159C
Signing time:             Wed 13 May 2026 04:01:34 +0000
Manifest this update:     Wed 13 May 2026 04:01:34 +0000
Manifest next update:     Thu 14 May 2026 04:01:34 +0000
Files and hashes:         1: u2N7udWHL38xXKaM9zlWB4W-ME4.roa (hash: SRPpRQyERN5FsdBAYlcVxUC95a7rxraNn372ElkInaA=)
                          2: y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl (hash: 9s7AcyKTkknEHriQMib2pEih68o632X/HVsUahWQz7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:42:ed:c3:f9:0d:39:a5:fd:25:6e:aa:27:05:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb425fde747aa7fea8e7b335b46c88d238850abe
        Validity
            Not Before: May 13 04:01:34 2026 GMT
            Not After : May 14 04:01:34 2026 GMT
        Subject: CN=796d887e5f72fe5d3383ece2f6875c82a3bc5b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f3:95:24:42:cb:d3:9f:79:d6:2b:a0:8c:67:
                    f0:dc:32:ee:3c:46:5c:03:28:1f:77:42:3e:cf:f3:
                    35:67:e9:55:34:e5:85:0f:e3:92:72:86:74:9f:38:
                    49:5b:8f:8e:fa:58:c8:69:e2:26:fa:81:9d:2d:5f:
                    23:cb:b4:71:44:80:ad:67:a6:fc:89:57:75:7b:7b:
                    c3:c0:4c:8c:ed:9e:41:b5:d2:47:02:5f:29:b7:27:
                    02:89:7b:74:55:42:13:44:8a:2c:42:3b:6d:6f:9e:
                    59:8c:d4:24:5a:a1:06:a2:06:42:07:21:40:d3:c0:
                    f8:35:a0:2d:a3:06:e0:50:bc:db:92:8d:13:b0:3d:
                    f1:20:f0:eb:be:42:fe:cd:20:69:ad:18:37:df:06:
                    b8:02:52:78:20:16:49:84:5f:56:46:ba:07:da:bc:
                    1b:3a:c7:4f:ab:41:19:a1:b2:2e:c2:fe:0e:44:c6:
                    21:dd:69:aa:47:8d:69:eb:dd:a9:c7:56:6d:e5:0f:
                    d2:84:1e:b6:f7:b7:0f:aa:8a:e9:64:6c:b2:ea:38:
                    4e:fb:b8:ec:00:3f:4d:a9:e9:12:0a:19:98:42:5d:
                    b3:d5:9f:ec:11:d8:04:37:b0:36:93:80:c1:fc:6d:
                    60:88:07:e0:53:cf:03:ce:d1:14:67:d5:f3:e5:27:
                    fd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6D:88:7E:5F:72:FE:5D:33:83:EC:E2:F6:87:5C:82:A3:BC:5B:15
            X509v3 Authority Key Identifier:
                keyid:CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:10:6d:a1:d3:1d:07:17:41:53:66:4a:a7:79:d0:07:60:cd:
         e9:33:60:66:5d:64:e8:60:f9:c0:06:f2:30:5e:11:7e:f8:7f:
         96:00:f6:47:65:d0:0b:6f:0d:e6:c3:e5:05:df:92:8e:ab:46:
         ac:40:22:e7:8e:4d:4b:14:fd:c2:14:7a:8e:ed:33:ee:7d:3f:
         9d:18:ce:80:c4:24:fa:4a:1b:a6:2e:18:5f:3b:5e:cc:37:c8:
         84:26:92:c3:eb:b3:88:a6:6a:6c:59:6d:60:83:af:2c:46:89:
         b2:61:4f:bc:c3:53:3d:de:ef:0e:c1:3f:09:01:6b:29:29:88:
         76:8d:b6:30:0c:1e:b5:14:d3:91:f0:d4:a3:15:15:df:56:40:
         cd:fd:29:07:02:00:d9:6a:e7:4a:fc:e0:e4:bc:47:63:2d:ab:
         25:b1:02:b4:73:c6:4b:a5:d5:e4:91:18:50:e7:75:c7:04:f4:
         c7:33:95:4d:c4:28:ad:ea:26:a8:c6:78:98:61:56:9e:a5:33:
         ea:d4:40:a6:8a:81:1b:23:0d:2d:70:35:3f:db:51:7a:24:20:
         2a:60:dd:37:2a:fa:ec:c4:c8:09:db:10:ce:c4:f3:7c:61:f4:
         45:85:ae:d1:de:40:93:00:da:10:62:81:b4:f8:5d:d9:48:2a:
         96:90:a0:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ff0Ltw/kNOaX9JW6qJwXKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNDI1ZmRlNzQ3YWE3ZmVhOGU3YjMzNWI0NmM4OGQyMzg4
NTBhYmUwHhcNMjYwNTEzMDQwMTM0WhcNMjYwNTE0MDQwMTM0WjAzMTEwLwYDVQQD
Eyg3OTZkODg3ZTVmNzJmZTVkMzM4M2VjZTJmNjg3NWM4MmEzYmM1YjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvOVJELL05951iugjGfw3DLuPEZc
Aygfd0I+z/M1Z+lVNOWFD+OScoZ0nzhJW4+O+ljIaeIm+oGdLV8jy7RxRICtZ6b8
iVd1e3vDwEyM7Z5BtdJHAl8ptycCiXt0VUITRIosQjttb55ZjNQkWqEGogZCByFA
08D4NaAtowbgULzbko0TsD3xIPDrvkL+zSBprRg33wa4AlJ4IBZJhF9WRroH2rwb
OsdPq0EZobIuwv4ORMYh3WmqR41p692px1Zt5Q/ShB6297cPqorpZGyy6jhO+7js
AD9NqekSChmYQl2z1Z/sEdgEN7A2k4DB/G1giAfgU88DztEUZ9Xz5Sf9XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHltiH5fcv5dM4Ps4vaHXIKjvFsVMB8GA1UdIwQY
MBaAFMtCX950eqf+qOezNbRsiNI4hQq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYt
YmJmNzE5YzNjYTc0LzEveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYtYmJmNzE5YzNjYTc0
LzEveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhBtodMd
BxdBU2ZKp3nQB2DN6TNgZl1k6GD5wAbyMF4Rfvh/lgD2R2XQC28N5sPlBd+SjqtG
rEAi545NSxT9whR6ju0z7n0/nRjOgMQk+kobpi4YXztezDfIhCaSw+uziKZqbFlt
YIOvLEaJsmFPvMNTPd7vDsE/CQFrKSmIdo22MAwetRTTkfDUoxUV31ZAzf0pBwIA
2WrnSvzg5LxHYy2rJbECtHPGS6XV5JEYUOd1xwT0xzOVTcQoreomqMZ4mGFWnqUz
6tRApoqBGyMNLXA1P9tReiQgKmDdNyr67MTICdsQzsTzfGH0RYWu0d5AkwDaEGKB
tPhd2UgqlpCg7g==
-----END CERTIFICATE-----
Generated at Wed May 13 10:10:51 2026 by rpki-client