Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft
File:                     Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft (raw, json)
Hash identifier:          8R+8C1RvUUoGYvDdC/X8B94kvsd+EdRbxWnBKu1hKgk=
Subject key identifier:   87:EA:10:CB:1C:92:DF:6F:33:93:7E:D5:E8:27:C7:45:8D:D1:A2:91
Authority key identifier: 62:9E:80:E8:8B:B7:66:29:1E:5E:C8:03:38:73:25:11:E4:D4:1E:04
Certificate issuer:       /CN=629e80e88bb766291e5ec80338732511e4d41e04
Certificate serial:       019E20244471CECA0ED2D6F4916F67048D1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft
Manifest number:          0E24
Signing time:             Wed 13 May 2026 07:01:48 +0000
Manifest this update:     Wed 13 May 2026 07:01:48 +0000
Manifest next update:     Thu 14 May 2026 07:01:48 +0000
Files and hashes:         1: Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.crl (hash: yGuZWaazgCI4WGCv6dR0BdW9jg0sUF4+pEim1JVx0hc=)
                          2: dJuawEWS8NqZGJF9uJKMoItyq7U.roa (hash: IYmTE9NklyCZqQOo3sZkgAOEmHqhiMDY4VmI2iuEFr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:24:44:71:ce:ca:0e:d2:d6:f4:91:6f:67:04:8d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=629e80e88bb766291e5ec80338732511e4d41e04
        Validity
            Not Before: May 13 07:01:48 2026 GMT
            Not After : May 14 07:01:48 2026 GMT
        Subject: CN=87ea10cb1c92df6f33937ed5e827c7458dd1a291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:93:fb:ce:5c:b0:ea:27:18:20:48:06:bd:5b:
                    02:35:48:de:03:d6:35:2b:f9:e4:db:30:0d:ab:9b:
                    bb:b6:22:be:56:fd:4a:7c:b6:72:20:1a:6c:e4:b2:
                    34:d7:d4:a7:a9:28:5a:e8:1d:17:2c:56:d8:2f:ab:
                    29:5c:87:df:13:fd:d0:a2:35:9e:95:a8:42:a4:95:
                    73:1e:9b:fc:19:85:37:01:b6:dd:f3:f1:f9:1d:a1:
                    2b:9e:e8:87:ed:a7:2f:d5:52:45:58:44:50:f2:b4:
                    b9:9b:f5:92:df:12:60:3e:8d:d1:a4:ae:8f:4a:4d:
                    5f:9d:1a:9a:a5:9a:54:6b:8c:86:a5:64:11:56:da:
                    42:3f:fa:1d:be:7e:60:1d:61:f6:ef:35:dc:35:53:
                    25:43:8f:5a:39:f5:d6:23:c9:be:17:11:12:64:ba:
                    88:f9:e8:67:1b:78:f8:0d:7c:63:39:59:63:20:06:
                    25:6c:ea:fb:a8:cd:f6:a1:63:49:04:5e:0c:44:6c:
                    2f:b6:bf:d0:0f:b5:10:ec:7e:a0:cf:03:76:38:b6:
                    26:fb:46:bf:2e:2f:8f:15:73:34:81:de:ac:c0:43:
                    6f:d7:45:95:c8:76:be:70:38:a9:87:73:8e:2a:75:
                    99:5b:5e:fc:f3:83:46:e9:dd:c4:19:ba:c9:ac:e4:
                    aa:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EA:10:CB:1C:92:DF:6F:33:93:7E:D5:E8:27:C7:45:8D:D1:A2:91
            X509v3 Authority Key Identifier:
                keyid:62:9E:80:E8:8B:B7:66:29:1E:5E:C8:03:38:73:25:11:E4:D4:1E:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:d0:f7:25:74:69:55:ab:3b:46:fa:94:fc:02:61:e6:8e:1c:
         f7:af:f5:20:d2:1d:f5:e0:17:41:3d:d5:e7:13:4e:6f:cb:84:
         17:86:8f:2b:c9:c3:54:30:78:1f:e1:dd:5e:9d:89:02:0a:bd:
         f1:77:2f:ae:85:2e:73:79:8c:33:f0:f3:ef:2f:fb:90:f9:4e:
         b1:a0:80:da:df:e7:3e:6f:7e:7c:25:db:14:4c:b4:68:40:08:
         f9:0f:67:f7:24:df:a4:e1:e1:12:2f:c2:ea:52:6e:27:b8:76:
         db:c8:3d:18:cb:8a:4f:de:e8:f2:24:28:b6:be:23:db:16:9c:
         bb:ee:11:47:dd:4e:1e:8b:65:1d:73:af:bf:4b:e2:c1:c1:75:
         eb:ea:dc:b2:1d:45:ef:0a:58:c0:80:72:25:ca:34:97:be:5d:
         42:46:5d:9f:44:54:6b:7f:90:17:76:66:44:fb:0a:e3:b5:e6:
         5d:8d:7b:98:ad:5b:74:14:01:21:f5:f5:8a:94:3e:c5:dd:fc:
         af:bb:a1:84:40:59:24:91:10:2b:46:bb:ad:b3:70:a6:01:a6:
         c3:51:13:1a:0d:2a:5c:a1:8d:95:1d:2f:d5:a4:3c:9b:b8:ba:
         17:14:e8:e8:ef:c8:76:1a:9a:b8:49:b3:4e:3c:32:fe:e4:39:
         3d:81:c5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:04:11 2026 by rpki-client