Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
File:                     YPWqx2_mvykTNdGaZY5kiRBbhp8.mft (raw, json)
Hash identifier:          gX+I/wac5c2iJGjgMPS/BOz4EK+mn1y3KU6sVw3D1Vk=
Subject key identifier:   7E:05:8C:AA:02:03:DC:75:A5:AB:2E:C9:70:FA:1F:E4:07:EE:22:B1
Authority key identifier: 60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
Certificate issuer:       /CN=60f5aac76fe6bf291335d19a658e6489105b869f
Certificate serial:       019E1F47C248008E5713241DFE6AC44B93FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
Manifest number:          04D9
Signing time:             Wed 13 May 2026 03:00:56 +0000
Manifest this update:     Wed 13 May 2026 03:00:56 +0000
Manifest next update:     Thu 14 May 2026 03:00:56 +0000
Files and hashes:         1: YPWqx2_mvykTNdGaZY5kiRBbhp8.crl (hash: Eq1rJwCniiwB1+lelt+MubA60VYbA6CU4sv6YXJwYiw=)
                          2: nsMVjB3dBsEs4QDP-UqrSgiiMZk.roa (hash: 4KH9ak7vbK8YvGmfh6MjtuXURmPLUowjhWOo+NHtQgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:c2:48:00:8e:57:13:24:1d:fe:6a:c4:4b:93:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f5aac76fe6bf291335d19a658e6489105b869f
        Validity
            Not Before: May 13 03:00:56 2026 GMT
            Not After : May 14 03:00:56 2026 GMT
        Subject: CN=7e058caa0203dc75a5ab2ec970fa1fe407ee22b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:45:16:c1:80:c9:db:fa:d7:44:d9:3e:e3:3a:
                    bd:ff:f0:00:45:8b:fb:68:86:c6:46:48:48:15:27:
                    38:e4:3d:96:05:08:40:0d:31:a1:86:c4:67:75:2a:
                    7e:f8:7a:58:b9:77:93:01:91:fe:16:65:26:54:cf:
                    0a:a9:bb:c6:92:10:8a:83:f0:ce:11:1d:54:77:ba:
                    26:e9:a3:5b:b2:93:aa:16:e4:fd:b1:76:cc:37:ea:
                    39:45:23:88:98:ab:d1:41:f0:d6:70:bf:b9:53:fd:
                    1b:e9:7b:21:82:32:cb:b6:0c:21:3c:29:43:e1:14:
                    f3:84:19:01:b2:b6:5f:39:a9:ca:ad:5b:dc:c9:61:
                    e5:4b:7d:dd:ad:b1:f3:42:f1:26:51:64:51:36:c4:
                    02:fc:b1:1b:e1:38:ad:1a:20:c5:aa:e3:16:c6:06:
                    06:36:81:af:22:b8:ad:ef:2e:e7:c2:8e:ae:74:e9:
                    b2:da:94:58:98:ec:3e:be:bb:15:f0:93:a4:93:c7:
                    d6:02:6d:92:bf:90:38:46:f1:43:96:53:24:c1:16:
                    5a:ed:b3:39:fa:2e:d1:cd:05:36:b4:29:5c:d4:73:
                    04:3a:79:62:44:91:b9:17:72:42:77:a8:be:73:49:
                    63:f1:33:2c:88:74:b6:7d:1d:c7:52:43:cc:b9:30:
                    42:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:05:8C:AA:02:03:DC:75:A5:AB:2E:C9:70:FA:1F:E4:07:EE:22:B1
            X509v3 Authority Key Identifier:
                keyid:60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:53:b8:32:36:cd:41:68:d1:e1:f9:1f:58:cd:e0:d3:d9:19:
         f5:61:07:16:84:62:23:ef:5b:ef:97:12:84:a4:37:11:33:88:
         5e:09:b6:a1:a9:93:a8:a3:7a:71:af:08:78:6c:c8:f5:a2:50:
         5e:29:0c:26:89:a3:01:a8:da:d6:21:a3:44:e9:25:8e:39:36:
         c4:01:7a:6e:c3:e4:3c:f2:50:b0:77:88:42:c8:8d:7e:e3:5a:
         be:1d:ec:b7:eb:69:ff:c2:9f:da:56:7c:3c:43:10:42:9c:0f:
         99:2d:36:29:19:d0:9f:3a:1f:cf:e3:f9:9f:65:42:ff:d0:99:
         5d:54:b0:33:67:ce:38:dc:e1:ab:ee:76:48:18:68:d4:b9:54:
         a1:5d:af:f2:53:d7:b7:a3:d9:4c:d6:3b:fa:33:8f:b7:dd:1e:
         5f:bb:72:3a:da:ba:d6:e3:d5:9c:36:bb:3f:b8:8a:63:cb:28:
         c6:7b:95:ad:d7:2e:ab:f3:47:0b:68:a2:46:3d:f7:1a:25:37:
         a3:f1:0e:d9:4e:05:54:09:b9:ff:3f:2b:ae:5f:f2:da:5a:0c:
         6e:d3:4b:a8:65:78:5a:a6:d2:81:b7:ce:f7:70:3a:30:f8:e3:
         94:4b:cf:70:69:ab:6b:f9:0c:ea:78:10:d4:3e:25:fd:c2:92:
         23:a8:1e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:44:22 2026 by rpki-client