Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.mft
File:                     YOPZchUzu192hceOyY34FPrV1nw.mft (raw, json)
Hash identifier:          AQR88GBsSEfsRIZ+qP9+aqAUKI8geDtnFtDF+I0kofk=
Subject key identifier:   6E:4F:0B:D4:E6:8A:45:CA:9F:3B:8F:5B:3B:2A:72:3E:AC:15:7D:6D
Authority key identifier: 60:E3:D9:72:15:33:BB:5F:76:85:C7:8E:C9:8D:F8:14:FA:D5:D6:7C
Certificate issuer:       /CN=60e3d9721533bb5f7685c78ec98df814fad5d67c
Certificate serial:       019E1ED9E69E49F1E26AC84E35E804595F69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOPZchUzu192hceOyY34FPrV1nw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.mft
Manifest number:          36
Signing time:             Wed 13 May 2026 01:00:57 +0000
Manifest this update:     Wed 13 May 2026 01:00:57 +0000
Manifest next update:     Thu 14 May 2026 01:00:57 +0000
Files and hashes:         1: YOPZchUzu192hceOyY34FPrV1nw.crl (hash: 8+tMjlKRTukFO97r0r50DwASSlsm3JnNHWhn3txpci8=)
                          2: cUpkjaDP4LJticYxAdxvejamI7s.roa (hash: NYs65YNfWkOoclb0FiT35oPaVvQTLiTbCeZBVy6gqu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOPZchUzu192hceOyY34FPrV1nw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:e6:9e:49:f1:e2:6a:c8:4e:35:e8:04:59:5f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60e3d9721533bb5f7685c78ec98df814fad5d67c
        Validity
            Not Before: May 13 01:00:57 2026 GMT
            Not After : May 14 01:00:57 2026 GMT
        Subject: CN=6e4f0bd4e68a45ca9f3b8f5b3b2a723eac157d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:09:b3:8b:c8:08:ed:a2:c4:4e:ee:0f:d7:6d:
                    f4:65:ed:f6:f4:be:4b:22:56:fe:80:f5:e1:91:f1:
                    08:df:8f:4c:e9:81:8a:70:41:f9:80:6c:47:24:45:
                    82:f0:ba:ff:84:5b:28:95:12:ab:61:16:0b:a5:85:
                    89:3b:55:37:db:89:72:3d:07:99:47:5a:d6:53:93:
                    06:f1:aa:46:60:49:bd:53:70:3d:94:92:c3:4d:33:
                    08:2d:78:d1:31:8f:00:5a:32:61:55:f5:47:f1:e2:
                    7a:a7:2c:fb:4d:c2:42:b8:28:2b:2f:94:1f:47:4d:
                    6d:4e:d8:c0:28:27:bb:2e:9a:42:15:63:39:4f:b4:
                    5f:01:b8:dd:18:e1:13:f7:7e:10:26:5b:d0:9e:f4:
                    86:0a:a3:d8:1b:cd:94:b2:92:48:86:0c:03:27:01:
                    91:f2:b7:df:e3:ef:ca:66:f6:e1:70:1c:ae:f7:b6:
                    96:fd:fd:18:23:cf:73:3f:ec:bd:32:f9:ec:59:49:
                    3b:05:0f:b7:4e:37:12:6b:16:7d:3a:2c:af:c4:17:
                    44:f5:1f:71:d1:e1:28:1a:4f:d2:1d:2e:b1:31:b7:
                    bf:82:75:ec:ed:a7:0c:33:28:25:c7:f9:95:db:65:
                    a6:4b:31:72:86:69:30:a8:f7:d9:34:9d:d9:83:9a:
                    5b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4F:0B:D4:E6:8A:45:CA:9F:3B:8F:5B:3B:2A:72:3E:AC:15:7D:6D
            X509v3 Authority Key Identifier:
                keyid:60:E3:D9:72:15:33:BB:5F:76:85:C7:8E:C9:8D:F8:14:FA:D5:D6:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOPZchUzu192hceOyY34FPrV1nw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0dd57c-ae73-4a1f-aa10-185884e0b548/1/YOPZchUzu192hceOyY34FPrV1nw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:db:fe:22:bc:aa:46:e3:d5:c4:93:57:7f:49:f1:aa:d9:fe:
         4a:ac:c2:cd:a5:78:d3:7b:c2:da:c7:ed:9f:e0:6e:6b:68:42:
         8b:96:16:4a:a1:05:a3:e5:62:9d:7e:e3:fc:93:33:33:14:4a:
         95:83:84:fa:86:52:98:24:8a:28:9d:66:cc:03:17:fc:e1:12:
         3c:5b:fc:b9:11:67:b4:52:87:37:ec:9d:38:b4:3f:78:97:cd:
         58:d6:9a:97:53:e5:d7:9d:1c:6e:62:dc:59:4d:de:ca:96:d8:
         ab:fb:0a:52:58:9d:99:a7:b0:9d:60:85:ee:d5:c0:7d:61:ef:
         6a:83:f9:b3:91:eb:97:8e:ed:ae:63:eb:68:b8:d9:70:c8:fc:
         af:6f:9d:7d:6b:37:65:89:a3:9c:40:8b:4b:68:ea:7d:70:df:
         05:94:9f:1b:51:f8:b5:59:4a:e3:de:b8:30:6b:df:b1:99:eb:
         4b:e7:25:d2:0c:23:7f:35:84:63:95:2e:bb:92:c1:48:d4:31:
         83:8a:58:e7:66:6a:8a:9f:c1:fc:0a:ef:e1:1c:76:a2:b4:f1:
         aa:4e:8c:58:fe:d7:ed:b9:d2:70:61:b2:fc:df:7c:c8:84:8f:
         b0:f6:00:99:34:0b:89:98:33:db:4b:71:7b:0b:35:4f:0b:ab:
         2e:e6:ee:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:38:13 2026 by rpki-client