Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
File:                     yKS714rzY_pb7uYy6L3Ei2KXNDw.mft (raw, json)
Hash identifier:          muGRjwsQla7c6AcZEcYxwoPxp9sW63O+HtV+Vl9BtV4=
Subject key identifier:   1A:E9:1B:C4:4E:13:BC:34:C5:24:78:20:97:5B:13:93:3A:A4:F6:9F
Authority key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
Certificate issuer:       /CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Certificate serial:       019E1ED9E595129FF8174BC207A94A8F3592
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
Manifest number:          095D
Signing time:             Wed 13 May 2026 01:00:57 +0000
Manifest this update:     Wed 13 May 2026 01:00:57 +0000
Manifest next update:     Thu 14 May 2026 01:00:57 +0000
Files and hashes:         1: yKS714rzY_pb7uYy6L3Ei2KXNDw.crl (hash: x2K8IwNFRGYtZ8gyHTzKER7AwB58mMk/vrw4BIZAC+E=)
                          2: ykn6ra4wP0urmcyUyxV1FWZ2Kp0.roa (hash: IJ1D7ZuY9/uNKyGnyBgDEp0dSpIFh5mPiRSScoZkO+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:e5:95:12:9f:f8:17:4b:c2:07:a9:4a:8f:35:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
        Validity
            Not Before: May 13 01:00:57 2026 GMT
            Not After : May 14 01:00:57 2026 GMT
        Subject: CN=1ae91bc44e13bc34c5247820975b13933aa4f69f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:51:3b:83:fe:71:f2:f3:6e:e5:c7:5b:31:ea:
                    71:c8:b8:7e:c1:9e:b7:97:df:67:20:ee:64:ae:49:
                    dd:57:9f:54:c2:11:b0:b9:bf:32:82:6d:84:52:50:
                    67:35:e0:6c:a6:fb:9b:96:8a:da:ca:44:14:55:d3:
                    d2:01:2f:49:db:04:6c:ce:2c:93:db:5d:d1:9f:42:
                    6b:08:32:63:88:df:a1:2a:fe:62:79:b6:52:ce:69:
                    58:98:46:fc:ed:4c:9d:61:32:5f:5e:8a:bd:04:d1:
                    b6:93:fd:51:15:0a:c4:88:2b:d8:d2:10:8a:a7:eb:
                    fd:c6:93:a7:72:c0:2e:c7:e2:8d:10:25:da:e1:2d:
                    31:fa:21:99:37:fa:e6:2f:b8:ce:c1:fa:93:ed:8a:
                    25:eb:5c:81:8a:99:47:54:62:30:e5:26:17:5d:04:
                    fb:f0:54:54:62:ff:8a:8c:87:a2:43:6b:58:9d:d2:
                    fa:ab:60:b5:58:b2:fc:05:e2:c1:2c:95:e5:b0:96:
                    ac:7f:00:c9:27:bf:2c:a1:17:5a:71:37:dc:93:35:
                    a6:28:c0:2b:68:50:a8:74:d0:1b:ad:2c:96:34:26:
                    d3:5c:31:28:a0:84:a1:04:18:84:7c:a3:33:ca:b1:
                    d3:1e:07:2d:77:ff:88:15:1c:c7:d2:7b:08:c7:74:
                    b3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E9:1B:C4:4E:13:BC:34:C5:24:78:20:97:5B:13:93:3A:A4:F6:9F
            X509v3 Authority Key Identifier:
                keyid:C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:b5:8a:7a:e7:5e:e6:2e:f7:f4:a3:ed:de:c3:de:98:ca:d8:
         f6:0b:78:0b:7b:ce:df:4a:07:d9:3d:ed:e9:ff:02:90:29:73:
         bb:c0:c3:31:63:a7:5c:d4:15:1f:45:58:89:f7:b9:3d:68:de:
         ad:ef:47:9a:ce:74:c1:7e:72:fa:de:bb:09:6e:f6:3d:73:a1:
         29:f3:2d:65:06:83:13:4e:b0:23:7e:87:ab:bf:9c:07:1b:c3:
         b2:df:d2:f3:94:f5:21:41:61:50:81:a0:b8:12:0b:7b:be:b2:
         28:d5:6d:9f:57:38:d8:be:82:c5:a3:e4:48:da:cc:30:89:87:
         6b:a1:f4:9b:2c:38:c6:5f:30:2e:f2:fd:b0:ab:3b:29:ea:5f:
         57:1a:14:9b:b0:11:ae:dd:6f:18:fe:1f:cf:9c:22:9c:12:67:
         84:38:20:72:86:32:b1:c3:d5:d8:6f:fa:5a:14:d1:a9:8a:af:
         d4:f0:8b:3a:3f:7b:35:5f:85:65:49:e4:f6:7b:5a:42:0a:62:
         66:1d:ec:7d:d9:56:81:8b:bd:5c:3a:c4:a1:e8:0c:b2:68:eb:
         b7:69:4f:1e:ed:04:3f:27:11:66:a0:c0:fb:19:f6:ab:64:ca:
         4a:0b:e1:b2:7a:da:62:85:09:21:07:1d:6c:50:9e:2f:4c:72:
         04:47:a5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:33:01 2026 by rpki-client