Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
File:                     y9lC2W7pSnpaZS73rIVdyUAUFd8.mft (raw, json)
Hash identifier:          /HEyz2uaurPVKUPJWD41mGOWeQCWaTTj1POLDpd9/ek=
Subject key identifier:   DD:5A:80:9B:27:81:C4:1A:77:1D:CC:1D:D0:B6:CD:53:93:AD:77:A2
Authority key identifier: CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
Certificate issuer:       /CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Certificate serial:       019E1EDA1936C8422F9ED3B9107405E51E1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
Manifest number:          190A
Signing time:             Wed 13 May 2026 01:01:10 +0000
Manifest this update:     Wed 13 May 2026 01:01:10 +0000
Manifest next update:     Thu 14 May 2026 01:01:10 +0000
Files and hashes:         1: 3O0Jx2Z7uS77XzKQjDLJgefRDU4.roa (hash: mTSPl2/i72Uzjsz/bmIER2rP7ZrpmVRXp35zfMqJjrs=)
                          2: y9lC2W7pSnpaZS73rIVdyUAUFd8.crl (hash: vwI2S+9xUiaxPsAV9UBFKIATdcWwTzISox8mLJWw2HY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 01:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:19:36:c8:42:2f:9e:d3:b9:10:74:05:e5:1e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
        Validity
            Not Before: May 13 01:01:10 2026 GMT
            Not After : May 14 01:01:10 2026 GMT
        Subject: CN=dd5a809b2781c41a771dcc1dd0b6cd5393ad77a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b7:34:f1:39:26:41:1e:3f:df:3f:e7:5f:78:
                    f9:5a:2f:ee:23:80:ea:1f:c7:5f:8d:1e:14:55:90:
                    ab:d5:86:b8:49:26:d1:44:3c:83:ef:e5:41:cb:60:
                    88:64:0f:fd:37:12:14:97:e1:35:ba:94:86:85:d9:
                    b5:29:1d:c0:79:67:d8:b2:4e:40:2d:fd:dc:f2:64:
                    5b:67:64:77:9e:19:24:56:39:b4:e2:c5:26:7a:d9:
                    77:8f:a5:50:b7:05:e0:ee:e5:a8:7e:85:fd:88:14:
                    1f:3b:7d:42:14:6b:10:54:15:05:26:d5:24:19:a8:
                    12:07:09:af:5e:f8:62:a6:f1:63:90:6a:cc:cc:34:
                    ca:b3:1a:f6:78:00:cd:3d:ea:25:fb:0c:3a:a0:18:
                    68:8f:78:a0:13:f6:59:41:6b:ff:b9:0e:47:29:5f:
                    44:b8:ad:47:04:df:cd:31:8d:9e:ef:98:21:90:8c:
                    3e:98:85:32:be:28:74:12:ed:8e:d4:90:4e:26:32:
                    c1:bb:fe:84:14:f2:ba:a5:6e:73:9d:a4:ce:db:47:
                    b5:63:76:39:77:df:f8:45:82:8c:86:6d:26:30:09:
                    e5:cc:7c:1a:d2:ca:17:bc:d2:99:77:96:4b:91:d2:
                    4f:7d:62:c0:5c:bc:08:a6:4b:63:c9:d5:ba:65:23:
                    af:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5A:80:9B:27:81:C4:1A:77:1D:CC:1D:D0:B6:CD:53:93:AD:77:A2
            X509v3 Authority Key Identifier:
                keyid:CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:fe:5d:41:bd:67:49:49:51:58:87:4e:ca:9d:05:f8:42:53:
         55:5e:78:ff:6a:bb:2d:03:69:f4:90:34:e2:61:12:f7:5e:d2:
         8d:82:7b:cc:5e:df:dd:20:cc:f5:5e:b4:fc:54:ad:4b:0b:31:
         29:bf:d5:27:48:73:e3:58:78:11:41:1a:55:15:66:cc:bb:a4:
         a7:52:db:bd:8f:85:59:24:f0:72:b2:23:1e:c5:e6:77:c3:0d:
         3a:51:16:b7:5c:bb:f5:31:d6:96:e2:31:19:50:a3:98:ec:f4:
         51:4d:5c:22:e1:a6:0f:07:7a:aa:9c:4e:81:e7:c8:82:94:2a:
         fd:e9:17:50:76:4b:b7:e5:0d:c4:3a:4c:9c:27:02:8c:91:29:
         4f:d1:56:07:b5:c8:e6:4c:84:96:82:98:98:aa:60:bb:a2:5f:
         cc:8f:a6:39:06:62:dc:b8:61:d2:27:54:4a:e7:07:b3:25:80:
         40:bb:60:9f:ee:57:32:50:9c:77:b3:21:eb:75:d2:82:be:fd:
         84:7d:e1:b2:fe:a7:c1:8f:ad:2d:78:94:63:47:9a:e6:b5:e2:
         04:f2:7c:05:ba:0b:53:ed:1c:bf:73:54:87:c9:ec:6a:af:2e:
         df:49:88:cf:4e:1e:df:2f:74:42:dc:de:e3:ea:ca:bd:94:59:
         2a:42:ea:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:26 2026 by rpki-client