Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
File:                     YaXSF3WehhaW_HftmqY7lO2zvn0.mft (raw, json)
Hash identifier:          Bf80/o617GnhRLA94bsXQzior3WEKLOd5piYjD9nkek=
Subject key identifier:   C1:C3:F2:3A:3B:9C:79:6F:1B:80:0A:5C:00:56:05:73:46:50:70:1C
Authority key identifier: 61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
Certificate issuer:       /CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Certificate serial:       019E1D9056D3A7E1D34E90A837D150BFE734
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
Manifest number:          1896
Signing time:             Tue 12 May 2026 19:00:58 +0000
Manifest this update:     Tue 12 May 2026 19:00:58 +0000
Manifest next update:     Wed 13 May 2026 19:00:58 +0000
Files and hashes:         1: 7nMDcW2MBzGpfpdKdPDTB0QB3hU.roa (hash: en70sYlojLOJhZvnO4mg1gQMw5JWdqgwDgeNhf3auMU=)
                          2: En1jde_TIQ7LiMKAfWOjQ8-vueQ.roa (hash: B07iauNs3fJKlZyy9+dMg1gGMxORKFzCKI2QAYo7MVI=)
                          3: QaLldwyWCNmsJuYxanxijJENiro.roa (hash: zZJuFSJ24SLOyuCH72+V4rIHBfJPcOF4kPyYmAT7g5s=)
                          4: YaXSF3WehhaW_HftmqY7lO2zvn0.crl (hash: 7nPCIB9za4dSSKn2biTDACj3dWAQXzxK6/aivLBPD3s=)
                          5: jdSwXFGYkX-QEBXIuasgwFC2D7c.roa (hash: 8ECDcLMvUhxjcLk2BpSduz0pbSgekU1Tj/Vgy8O0Vqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:56:d3:a7:e1:d3:4e:90:a8:37:d1:50:bf:e7:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
        Validity
            Not Before: May 12 19:00:58 2026 GMT
            Not After : May 13 19:00:58 2026 GMT
        Subject: CN=c1c3f23a3b9c796f1b800a5c005605734650701c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:09:c1:13:f7:b0:92:18:a9:0f:f4:63:8a:54:
                    65:86:3a:1d:b5:d1:1f:55:20:ef:f4:14:59:3b:80:
                    61:67:2b:a1:9d:1a:07:b5:f2:9e:11:75:40:4a:ef:
                    f4:b8:c6:5c:30:f6:11:31:20:1b:bc:a4:be:f1:56:
                    55:3a:4f:d7:b8:d2:45:b0:bb:14:ca:81:5e:0e:bd:
                    9b:d7:68:b4:71:4f:9c:31:48:a0:3f:4c:df:a4:6e:
                    3c:ad:0d:9c:32:b1:97:38:52:7a:0d:d6:2f:93:33:
                    5f:c9:8c:23:ba:26:e6:81:1a:6f:13:ee:87:52:33:
                    64:98:9d:4b:6b:d1:8e:10:1e:67:b4:f4:dc:8c:b3:
                    16:40:1f:5b:9a:aa:27:37:b5:bc:c9:e2:0e:f0:ff:
                    81:f7:37:ca:ce:7f:09:34:fd:5b:0f:62:6f:9f:a6:
                    1e:4f:8f:35:3d:c1:88:38:c6:ef:3d:45:13:c4:54:
                    32:5a:fa:6b:a2:2a:62:08:c7:70:40:54:82:ba:ca:
                    1d:60:c9:13:72:8d:22:f4:9f:42:85:8a:f5:e1:4b:
                    5d:59:e5:fc:18:d5:c4:6d:4b:00:42:30:15:4e:d3:
                    87:5d:af:fa:33:76:2d:27:aa:37:19:f8:74:a3:2e:
                    f6:bc:62:33:4f:00:ca:18:aa:13:8a:c5:a4:92:d1:
                    73:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C3:F2:3A:3B:9C:79:6F:1B:80:0A:5C:00:56:05:73:46:50:70:1C
            X509v3 Authority Key Identifier:
                keyid:61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:25:51:54:8d:59:10:b0:a7:75:76:13:be:bb:6f:3e:c2:e0:
         c7:53:21:8f:7e:d0:b7:19:bd:f7:d8:56:6c:1a:97:66:82:ec:
         a3:4f:09:ef:d9:28:d0:02:cf:3f:fa:85:c6:f6:c9:85:42:1a:
         b0:0a:35:ae:7a:1c:0c:92:c7:86:b5:2c:bb:84:5e:1c:4a:3c:
         c3:e2:02:fa:2d:4f:e7:db:75:a9:33:19:b3:93:92:48:fb:6c:
         14:d5:eb:e0:5b:b9:67:d0:03:42:7b:7a:61:b2:b8:41:a5:39:
         d7:a0:2b:34:28:70:e5:0d:ab:fc:1a:d0:11:7f:8c:86:93:61:
         97:ee:38:31:02:f7:d9:9b:5a:31:81:2b:72:bb:fd:ac:5c:59:
         c9:cf:f5:29:37:72:ad:ed:5c:a0:e4:27:3b:7f:f6:b2:65:3c:
         25:fb:2d:45:42:a5:a6:2d:61:b0:5c:74:00:2d:f1:f9:a8:8a:
         fd:3b:2e:f8:6c:00:83:ce:69:f9:ab:85:7c:26:b1:12:77:d6:
         dc:38:b0:65:05:9e:02:9b:0a:41:82:63:48:dc:00:5e:28:32:
         0d:4f:58:78:c1:05:81:fb:6d:95:e5:34:07:fb:b9:eb:5d:07:
         48:04:aa:59:e1:fc:ed:89:18:12:83:45:5c:da:93:57:f1:a1:
         d3:e2:56:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:25:51 2026 by rpki-client