Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
File:                     yzAqJzq07yWo6pGko3ebz30d5Zs.mft (raw, json)
Hash identifier:          VEE8ZDETBHYVnK2nD1p8KW+nVPHq8iaaF9VEZNYzT68=
Subject key identifier:   3D:A6:B7:4C:EE:71:CC:BC:1B:84:1A:9D:06:61:56:DD:4A:80:A4:96
Authority key identifier: CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
Certificate issuer:       /CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Certificate serial:       019E20915A0C360A643D87A6834636FCAAAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
Manifest number:          1096
Signing time:             Wed 13 May 2026 09:00:56 +0000
Manifest this update:     Wed 13 May 2026 09:00:56 +0000
Manifest next update:     Thu 14 May 2026 09:00:56 +0000
Files and hashes:         1: pkANJWQGRxeYUhe9QHaxt_kkCZ0.roa (hash: JQPpr1NgeNVkQnAHd4pZVUEgVBBePxibUcmbvm5s/ds=)
                          2: yzAqJzq07yWo6pGko3ebz30d5Zs.crl (hash: Gz12Ex9+1W35oQykeevE+AYSOnwVj7DHqdtAfVJAZpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:5a:0c:36:0a:64:3d:87:a6:83:46:36:fc:aa:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
        Validity
            Not Before: May 13 09:00:56 2026 GMT
            Not After : May 14 09:00:56 2026 GMT
        Subject: CN=3da6b74cee71ccbc1b841a9d066156dd4a80a496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bc:f9:92:aa:44:c2:c2:84:5b:0c:c3:37:a8:
                    cb:91:b0:7e:10:dc:46:54:45:a6:68:88:10:d6:4b:
                    45:9a:e7:ed:ef:48:43:91:fe:7a:66:89:05:30:9f:
                    4c:d1:12:3c:2f:e6:a4:27:1e:4f:73:30:69:2f:59:
                    26:74:45:af:1f:f9:41:5e:df:84:56:e1:29:d9:5e:
                    c3:c0:09:3e:99:a7:9c:4e:6d:ad:dd:0f:95:d2:88:
                    7f:16:5f:98:d2:a7:c8:cc:74:82:af:5e:48:c9:0e:
                    b9:87:48:02:d2:6a:84:45:3e:70:8f:dd:77:19:eb:
                    88:8a:0a:81:04:a1:ac:db:4f:79:fd:bb:f7:74:e0:
                    3d:2d:0e:fe:d9:8d:fa:3e:ae:be:9b:c6:e4:98:f4:
                    35:12:43:ea:bd:4e:bc:e7:7e:47:73:76:5c:d2:8a:
                    00:59:26:08:02:35:a9:09:38:8b:64:0b:fa:4c:0f:
                    2a:5e:d4:5d:be:bd:10:36:c8:80:2f:29:f5:71:3e:
                    41:74:51:c6:dd:cf:fc:8c:fd:c4:6a:e9:1f:20:99:
                    05:ba:aa:19:8e:17:b2:a7:bb:1b:e8:ba:d4:2a:ea:
                    ab:99:38:81:6e:0c:d3:12:ae:2a:b8:33:65:8d:31:
                    95:32:17:a5:a7:cb:f5:d5:11:72:7f:87:71:43:81:
                    7f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A6:B7:4C:EE:71:CC:BC:1B:84:1A:9D:06:61:56:DD:4A:80:A4:96
            X509v3 Authority Key Identifier:
                keyid:CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:e9:7b:aa:a3:b5:74:4d:d5:b4:14:47:8c:ee:32:a6:90:e7:
         93:8a:55:d1:50:55:35:56:49:e8:4f:3f:11:59:8c:93:40:f5:
         8e:a0:2e:2d:10:d8:b4:3d:9c:eb:d8:5d:74:28:36:65:df:7f:
         ff:a5:fc:03:51:9f:ea:bc:99:24:bf:c6:06:88:44:19:54:d6:
         9c:b1:5b:8c:e7:9f:5d:44:23:ca:d8:b4:1e:c2:5e:72:d1:6e:
         5d:6b:9b:60:24:ef:57:93:af:30:57:f0:de:af:35:03:37:e7:
         6b:81:aa:0a:57:23:7c:d2:8a:34:a3:02:e9:98:03:03:e1:04:
         0b:8f:de:c7:cb:0f:17:44:6f:87:b6:da:b5:18:b3:4d:3d:f3:
         85:12:f4:18:e5:bb:3f:b8:3a:d7:5f:71:88:0d:e0:60:7b:88:
         a6:8c:fd:0a:4e:bc:43:a4:55:34:ec:5b:4b:9c:63:c6:25:6c:
         9f:88:8d:c1:df:60:80:d4:13:51:df:ae:26:b3:5a:f6:d1:8e:
         ed:09:17:93:ad:2c:37:b9:2b:8d:fc:a8:7e:55:12:25:a4:1d:
         e6:f0:94:0a:e4:d9:35:f0:ad:e5:4c:9d:6a:5f:33:ce:b7:24:
         dc:7e:af:d3:69:51:92:da:5c:7f:bb:78:98:4e:0a:be:84:df:
         72:d7:64:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:29 2026 by rpki-client