Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
File:                     RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft (raw, json)
Hash identifier:          /5pMrkp6o2iUHzs90pXBkgHRjGmWOGaUsnJifTTuFpM=
Subject key identifier:   B0:5B:B7:4B:19:78:D8:77:F5:19:92:98:0B:6C:CD:73:3A:74:A9:3D
Authority key identifier: 47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
Certificate issuer:       /CN=472694d8a399a3a66f442ec72295c754acbbad41
Certificate serial:       019E1EA3A6B884397CCA1CA84CDA353A8ED2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
Manifest number:          17DF
Signing time:             Wed 13 May 2026 00:01:41 +0000
Manifest this update:     Wed 13 May 2026 00:01:41 +0000
Manifest next update:     Thu 14 May 2026 00:01:41 +0000
Files and hashes:         1: 9Y9_-ghmVyAuliB_ZM6L4N2aR9Y.roa (hash: AlB+NM2coMQme+Vwjxfjbx7bvSYOwHST/cCoDhabdh8=)
                          2: BGx_SKWg0A0x4u2zJMu40hnQx4Q.roa (hash: 3vgm19azZKbua/L5jF2wErVGYC2PH4djUu3AdY79HJs=)
                          3: RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl (hash: 90AHqTO6hKJpR0whD2+LdaTV4JtsyMVsa59Js5utRGc=)
                          4: gHq4ZQAB43U72DuDXjjiZ0-2-00.roa (hash: UuXFiLQX/A/tFOUVtGrjRAOGOHSsYt/+KkH7+iWkPIk=)
                          5: xiXKqk3tGFwKj2r6-VSmJj7eq_k.roa (hash: 1zP1wd86zOnUvyVaHLe0E+PkkU2X/81i9Nla1ulLn0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:a6:b8:84:39:7c:ca:1c:a8:4c:da:35:3a:8e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472694d8a399a3a66f442ec72295c754acbbad41
        Validity
            Not Before: May 13 00:01:41 2026 GMT
            Not After : May 14 00:01:41 2026 GMT
        Subject: CN=b05bb74b1978d877f51992980b6ccd733a74a93d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:d8:36:35:73:17:57:31:0e:6e:f3:bd:05:
                    9f:b8:e7:8f:66:39:c1:17:1b:23:11:1b:ce:ab:a9:
                    15:56:55:42:0f:e6:2a:9c:3a:2c:fa:54:37:07:63:
                    5d:bf:94:c0:5d:25:10:e9:0d:b5:01:d3:69:31:1f:
                    ac:dc:fc:6a:41:58:66:6f:7c:53:8b:26:45:0e:29:
                    04:8b:46:1a:af:5a:2d:5f:88:27:dc:8e:f7:b6:a5:
                    8b:e9:b2:70:65:e7:a9:8c:76:de:e1:29:5b:c2:c3:
                    82:c7:3d:f8:01:86:9b:cb:dc:38:08:94:b9:a0:17:
                    b7:f0:a2:19:b0:5b:b8:e3:58:ae:b6:f8:80:bc:4b:
                    65:bb:8f:6e:b4:2a:a0:18:cc:83:c5:3f:0d:7f:01:
                    da:c2:24:a2:2a:27:b4:b2:db:50:24:f1:b8:30:38:
                    bb:1a:f1:45:e3:c8:14:cf:65:14:df:79:98:84:5f:
                    01:d6:54:b7:20:03:04:35:8f:a2:76:be:13:e5:08:
                    ff:ae:1e:37:64:21:c8:a5:a8:cc:ee:fb:17:c5:b8:
                    1f:ad:71:46:53:ed:52:03:ac:5a:91:a0:b5:c6:a5:
                    5e:f5:c3:1b:41:0c:e6:ca:f6:e6:93:d5:ac:2c:2c:
                    a5:0f:70:b2:a2:9c:02:3a:2f:4b:74:bf:ca:e3:fe:
                    16:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5B:B7:4B:19:78:D8:77:F5:19:92:98:0B:6C:CD:73:3A:74:A9:3D
            X509v3 Authority Key Identifier:
                keyid:47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:27:66:79:04:1a:32:c6:4f:38:b7:50:d0:0b:fc:bd:52:ec:
         12:22:36:43:a0:10:d2:83:63:08:a4:0c:e4:e1:3e:c5:ea:c4:
         44:bd:7e:c3:31:b7:2b:24:7d:32:80:f4:e5:4c:50:c7:ef:40:
         84:6b:5b:ab:d9:b8:f9:4d:07:5f:d2:f6:58:8e:50:c5:83:c0:
         f6:56:93:4e:8f:cb:7b:f9:67:a5:df:cf:36:75:50:9d:6c:08:
         84:5d:38:80:83:5d:a6:e5:7f:c7:d5:41:69:5f:03:18:d9:d1:
         ec:e9:f5:f9:13:14:b8:c7:0a:03:db:2b:c3:9f:f8:a1:33:16:
         3a:87:0d:0f:fc:28:5a:dd:b7:88:06:71:10:99:94:50:38:d7:
         e6:45:5c:04:8f:a1:a6:8f:84:5e:40:ff:76:b9:97:ee:be:15:
         5f:40:67:d5:f3:c4:fc:36:26:3d:c2:f7:a0:5c:44:0f:69:58:
         0a:63:97:b3:e0:96:42:56:7d:7a:62:0b:1f:ee:16:82:b8:33:
         6c:03:bd:2b:93:fb:ab:cd:ab:85:db:52:cd:53:7c:b6:7a:96:
         bd:b8:88:30:38:b1:d3:84:42:cd:97:94:cd:5f:0a:b7:fb:68:
         21:3b:c4:2f:93:cb:a4:84:b4:ef:5b:76:f6:5f:00:1a:71:28:
         ee:33:04:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:32:19 2026 by rpki-client