Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
File:                     YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft (raw, json)
Hash identifier:          rawyo1HP73UJIFvvFvBkvXm7/yLDINBV4s90B6mU4S4=
Subject key identifier:   45:22:32:AE:6D:6A:9F:37:DE:DF:8E:D8:B2:FE:52:14:CB:0E:CC:E8
Authority key identifier: 62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50
Certificate issuer:       /CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
Certificate serial:       019E1DFE3BFA046A66E2F9ED477F37BDE4BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
Manifest number:          1904
Signing time:             Tue 12 May 2026 21:01:01 +0000
Manifest this update:     Tue 12 May 2026 21:01:01 +0000
Manifest next update:     Wed 13 May 2026 21:01:01 +0000
Files and hashes:         1: YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl (hash: hq8rIHwMQ21OVyGvfbx/6/b1w1Mc+ZyW/FvncBWXrFY=)
                          2: ex_xJpK_CdSqACSQtdB9gjUSuD4.roa (hash: MIYxDXr1ZqH9Kq+ZDYqcGhxuESuPqOopC1Yf9yS3HhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:3b:fa:04:6a:66:e2:f9:ed:47:7f:37:bd:e4:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
        Validity
            Not Before: May 12 21:01:01 2026 GMT
            Not After : May 13 21:01:01 2026 GMT
        Subject: CN=452232ae6d6a9f37dedf8ed8b2fe5214cb0ecce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c0:cf:10:bd:a0:e3:25:89:4e:14:95:1f:3e:
                    b4:18:cc:eb:a2:48:d1:57:38:94:fd:2e:f0:ac:87:
                    fe:5a:1b:57:26:62:93:b5:5c:c6:58:fb:91:32:2a:
                    05:53:23:68:f1:52:33:89:9b:2b:10:76:a9:8c:30:
                    46:b2:b7:5f:20:1f:4f:da:28:1e:23:21:4a:88:2d:
                    b1:52:e0:19:b0:f0:f2:e2:6a:ac:3b:e9:7e:84:ea:
                    a1:92:f0:3b:24:40:8f:44:cd:41:cb:ab:c1:ff:d5:
                    ad:13:dd:ac:c4:7d:93:d4:df:cf:00:5c:dd:7f:41:
                    4f:3d:9b:4e:52:c4:c7:03:25:3d:f1:a8:6f:ec:f5:
                    04:ca:ac:42:9c:19:d9:05:59:af:2a:f8:18:eb:68:
                    70:69:e0:e3:85:d4:0f:92:eb:93:a2:6c:83:ba:64:
                    66:d9:2e:7d:f3:49:e5:a8:3e:ba:37:2e:a8:1a:d9:
                    72:20:cc:00:ef:38:ab:5c:b6:fc:81:5f:bf:ed:fb:
                    59:5e:72:b8:b4:ff:d7:19:9a:49:73:9a:2d:20:78:
                    0b:e0:cb:10:e0:04:ea:39:a6:b5:a6:b4:be:0f:45:
                    66:8e:ad:fc:b8:08:6e:8d:1c:fc:00:e6:4e:44:50:
                    df:8d:a1:0b:bf:ab:31:e6:99:4d:e5:58:0a:10:79:
                    6b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:22:32:AE:6D:6A:9F:37:DE:DF:8E:D8:B2:FE:52:14:CB:0E:CC:E8
            X509v3 Authority Key Identifier:
                keyid:62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:14:13:c8:0c:14:0d:60:cb:9e:b7:b4:40:e8:81:3e:a5:1d:
         55:60:b7:6d:b2:1b:ef:a0:e5:1b:7d:54:8b:7e:d8:9d:09:9e:
         d0:b3:cb:57:0c:8a:5c:bb:5d:32:fa:43:2d:c7:c5:fb:77:eb:
         ba:38:41:9e:e5:b5:36:94:96:a0:3a:41:67:fa:19:fa:24:81:
         36:53:df:5c:3c:54:e8:e4:39:3e:f0:fc:00:8e:3b:dd:6c:53:
         95:82:ed:3e:d8:18:05:a2:5d:d6:6c:c4:b2:58:5c:e2:c9:df:
         a1:96:5e:a1:f3:ea:e5:34:12:6a:0c:c4:aa:59:94:e6:31:3f:
         ff:a6:f0:e9:11:b7:58:49:73:1a:b7:eb:0a:06:bf:e8:b6:fa:
         78:33:58:63:3b:e0:a6:23:1f:10:16:49:64:07:e7:9a:df:3c:
         d7:3b:26:db:ce:d3:8d:06:2a:56:59:5e:03:9f:4f:0b:36:30:
         8d:4d:81:6e:51:88:df:aa:54:d9:ef:a7:f9:5f:69:0f:69:0d:
         7f:23:97:6c:98:db:29:c2:08:8c:9d:ac:8a:d4:18:7c:03:6b:
         24:50:1c:68:87:0a:98:d8:90:f4:2b:55:ec:c9:dd:bc:9c:01:
         74:7c:07:fe:60:ca:7b:09:3f:0a:9a:e7:b9:c4:1b:be:99:80:
         1e:b7:fa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:08 2026 by rpki-client