Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
File:                     y0ANSAMtEp2UvQjtJxepofTPL0s.mft (raw, json)
Hash identifier:          xRcGPj6D58s8FaOdx62Dz3YkKCEDNshbFM0kgaM/cOM=
Subject key identifier:   07:6B:0A:10:32:04:E7:C9:9B:61:3D:04:CA:7F:92:C8:76:A2:A2:8C
Authority key identifier: CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B
Certificate issuer:       /CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b
Certificate serial:       019E1FB608FF5F987F23EC2E22981D669AE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
Manifest number:          0869
Signing time:             Wed 13 May 2026 05:01:23 +0000
Manifest this update:     Wed 13 May 2026 05:01:23 +0000
Manifest next update:     Thu 14 May 2026 05:01:23 +0000
Files and hashes:         1: 1-LKZq6XNPJkWbyIzGez7MxFQ8jE.roa (hash: Y5nTzS0daALZPNuteXZIXM9RcMdrGEprlXo2RcFxCsA=)
                          2: y0ANSAMtEp2UvQjtJxepofTPL0s.crl (hash: v0cA7Tc0N6V3eYHPFRA1hEsVczwD/fJWrHj1n4ZAfRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b6:08:ff:5f:98:7f:23:ec:2e:22:98:1d:66:9a:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b
        Validity
            Not Before: May 13 05:01:23 2026 GMT
            Not After : May 14 05:01:23 2026 GMT
        Subject: CN=076b0a103204e7c99b613d04ca7f92c876a2a28c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9b:6a:b0:c6:57:30:df:be:11:83:36:20:23:
                    25:e1:89:72:b9:6c:5b:67:14:69:da:16:5b:c5:ab:
                    37:9a:94:e6:93:65:f2:79:1a:73:f1:43:21:40:2b:
                    f7:d4:48:74:cf:57:4a:92:5f:46:51:1e:0b:92:8a:
                    bb:9c:69:ad:54:24:e3:2f:ab:f5:8a:0b:e0:3e:ef:
                    fa:2f:c4:33:d2:5f:42:6a:06:e9:2c:46:57:9a:c8:
                    b3:0f:97:ca:7d:00:9e:02:a3:f2:03:9d:05:56:f2:
                    8a:6d:ba:99:3f:1c:76:c4:a0:db:59:e4:b5:a0:fc:
                    5c:cb:6c:c3:e4:1a:fb:2b:0a:39:cc:85:c6:1e:38:
                    ae:e5:2b:99:ea:f2:61:81:4b:41:cf:74:d0:c5:fc:
                    dd:98:27:f9:6c:76:29:42:2c:06:b3:ab:2a:12:d8:
                    52:c4:5d:31:06:49:d7:16:20:96:8e:7e:4e:45:c8:
                    0c:0e:5a:97:00:f2:9e:3b:aa:52:d5:20:e8:1b:f8:
                    5b:74:84:04:5f:f8:12:83:93:91:e3:9a:7b:3b:56:
                    48:c0:a0:bf:08:80:22:4c:c8:8a:57:33:22:61:e1:
                    14:b6:6b:40:13:ed:1a:81:e0:6a:01:70:bf:52:39:
                    d8:0d:08:be:b0:96:c5:b3:ed:dc:d4:4b:37:6a:ca:
                    fe:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6B:0A:10:32:04:E7:C9:9B:61:3D:04:CA:7F:92:C8:76:A2:A2:8C
            X509v3 Authority Key Identifier:
                keyid:CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:1b:35:ab:f9:7c:d2:8d:55:8d:3f:02:df:b7:de:02:73:cd:
         89:11:7f:9d:90:8d:ca:5e:d5:6b:bc:dc:94:a7:0b:96:73:e7:
         60:96:41:9a:3d:dc:b8:7d:0f:c2:1b:6d:8d:29:55:9c:f2:b1:
         47:be:6e:8d:1c:78:61:84:25:25:82:c3:7b:30:52:ca:0d:26:
         97:35:24:95:7c:aa:a5:9e:22:1b:85:1f:70:46:9c:1e:f7:54:
         0c:4c:f5:97:7d:a4:7a:27:b7:1b:e3:ca:94:03:25:af:dc:34:
         2b:c9:16:d2:c5:17:86:2b:ec:5c:a8:36:d2:1c:81:be:77:5c:
         c1:3e:68:55:9f:8e:8d:46:c6:a4:b8:66:25:10:d6:3e:25:b3:
         c7:a7:43:bd:c4:60:43:95:fa:9d:8e:e5:93:25:0b:2b:d5:1a:
         47:14:4c:4e:77:a9:ec:66:32:b5:1f:ee:e7:da:26:43:46:9f:
         41:31:cf:10:d8:99:4c:c5:03:fb:4f:1a:6a:bf:d0:31:c0:1b:
         91:a6:25:b9:dd:e8:9b:22:8e:3c:7a:fd:08:ea:3b:40:21:c5:
         79:8e:77:5a:47:8d:14:e3:d5:b6:c1:33:8b:57:99:55:bf:90:
         9d:68:48:74:26:57:c5:35:2c:18:2b:55:0e:41:2e:2e:75:16:
         5d:d4:e7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:32 2026 by rpki-client