Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
File:                     YRu24x7uO3Kt57GlkOLmKq9cPrA.mft (raw, json)
Hash identifier:          jPlYWUhfFOgLIEb+i46rU/Jx5n7BaaE5QQfpUkI2UVA=
Subject key identifier:   BD:2B:55:79:D7:19:90:EF:7E:76:B0:E3:EE:C2:01:23:67:32:EB:B0
Authority key identifier: 61:1B:B6:E3:1E:EE:3B:72:AD:E7:B1:A5:90:E2:E6:2A:AF:5C:3E:B0
Certificate issuer:       /CN=611bb6e31eee3b72ade7b1a590e2e62aaf5c3eb0
Certificate serial:       019E1E6C9DA3EC6F932B07F3AE98D0316F4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
Manifest number:          0187
Signing time:             Tue 12 May 2026 23:01:34 +0000
Manifest this update:     Tue 12 May 2026 23:01:34 +0000
Manifest next update:     Wed 13 May 2026 23:01:34 +0000
Files and hashes:         1: R8jSHJ0RvQZas12_o_Ps91TArZ8.roa (hash: 0fh/B8TN9sEd5MXdklpnp2ieFTklN6jeNTgs0tjEkic=)
                          2: TzNDKIgnXyebc98shaF_lgOCi6s.roa (hash: xrJNMYFkTQ1dfaAgHt3UvZimA9Jq6mAdGz+xSeudcNA=)
                          3: YRu24x7uO3Kt57GlkOLmKq9cPrA.crl (hash: yBRZyJjBGXDQtsNIMWXAaYFJakf/1JteC66SVcxbnlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:9d:a3:ec:6f:93:2b:07:f3:ae:98:d0:31:6f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=611bb6e31eee3b72ade7b1a590e2e62aaf5c3eb0
        Validity
            Not Before: May 12 23:01:34 2026 GMT
            Not After : May 13 23:01:34 2026 GMT
        Subject: CN=bd2b5579d71990ef7e76b0e3eec201236732ebb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:56:44:ce:e7:ad:39:1f:f0:47:81:72:5a:b7:
                    cb:c2:69:50:a0:a7:19:45:62:5c:f2:c1:b3:62:12:
                    31:24:7e:fb:72:76:42:60:8b:a9:ac:1f:0c:d2:f9:
                    65:d5:d1:88:30:4c:05:b0:2d:00:11:b1:11:1a:30:
                    15:ea:40:ac:17:3e:ff:4b:89:14:a1:40:c4:1e:c0:
                    20:db:ac:ad:bf:c5:b7:64:ce:cb:1d:10:5a:0b:c5:
                    c1:cf:38:92:2c:7f:97:33:9d:8a:6a:50:60:59:f5:
                    22:bd:60:55:c3:af:ce:14:14:53:c0:14:3b:44:5c:
                    c3:98:ce:c4:9b:65:2e:8c:39:9d:e3:83:cf:93:30:
                    fc:42:d3:a1:0f:50:60:f9:3d:16:03:1b:87:a2:55:
                    30:f7:e9:f8:25:bc:0d:9e:e4:71:84:eb:dc:72:33:
                    2f:87:46:ac:4f:c9:db:4f:78:5b:a0:18:2a:92:c0:
                    c0:c5:32:b0:28:18:0d:51:ad:70:64:e7:14:ba:36:
                    73:f2:9e:df:59:78:44:4b:68:e8:92:ae:b9:83:06:
                    fb:3d:7f:70:88:dc:b7:43:4b:3d:2d:b5:80:51:8a:
                    ee:48:7f:3d:e3:16:2c:58:1a:f4:6a:c6:88:95:b7:
                    a5:b2:18:0a:ee:86:dc:98:0a:d2:3e:fb:6b:f4:1d:
                    35:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2B:55:79:D7:19:90:EF:7E:76:B0:E3:EE:C2:01:23:67:32:EB:B0
            X509v3 Authority Key Identifier:
                keyid:61:1B:B6:E3:1E:EE:3B:72:AD:E7:B1:A5:90:E2:E6:2A:AF:5C:3E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:fe:48:e2:7c:f7:7a:4d:de:c4:a1:9d:de:09:36:6a:bd:e9:
         02:3a:d1:f7:52:c7:0f:b3:cd:4f:9a:5e:25:39:c2:eb:21:32:
         fa:6e:c0:87:75:da:80:64:28:f7:61:b8:8b:84:a5:52:96:e7:
         ff:92:d8:27:f6:22:72:6c:2e:bb:10:2a:a2:c2:f5:9a:08:1b:
         e8:2f:ae:42:50:5a:71:b5:b1:51:e5:b7:47:71:ea:19:f1:e3:
         d4:8d:9b:c6:ac:58:ff:b6:92:cf:42:f5:2f:88:01:84:fa:fb:
         2f:9d:71:02:bf:8b:d7:28:98:48:dc:cd:ed:2f:8b:52:aa:21:
         6b:14:08:8c:14:6c:34:c4:01:f0:7e:4c:a6:12:a0:8e:3b:51:
         70:2d:ed:a3:16:81:71:ff:3d:2e:5c:18:e2:f8:1b:1a:4b:e0:
         60:cc:de:6c:2a:a5:43:dd:26:1b:ef:0f:97:8f:ba:66:04:4a:
         79:bf:01:c0:26:1d:5f:f8:c5:6d:7e:2f:34:ac:bd:1b:33:a2:
         b2:54:d7:fe:8a:95:87:89:c1:17:b4:2b:d3:87:b0:22:4d:68:
         86:7e:7b:27:a0:6c:6f:b0:54:3c:6d:9c:5b:c0:e2:bc:d0:20:
         c3:c9:9f:bd:3e:dd:6f:cf:92:1d:6e:c4:3f:e7:8e:3c:14:e0:
         2d:8c:c3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:51:24 2026 by rpki-client