Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
File:                     sYfM7EmqX2aqAmSNkbSi7o_3veY.mft (raw, json)
Hash identifier:          +szldJy8ULG72iPAFHrR1G1LJQx4wQMvyitR+Xj1478=
Subject key identifier:   FC:63:A4:74:14:35:0C:B1:13:79:50:A0:20:DA:5E:B4:CC:68:EB:0B
Authority key identifier: B1:87:CC:EC:49:AA:5F:66:AA:02:64:8D:91:B4:A2:EE:8F:F7:BD:E6
Certificate issuer:       /CN=b187ccec49aa5f66aa02648d91b4a2ee8ff7bde6
Certificate serial:       019E1CEBAC56632102B547522A7EFC76AA47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
Manifest number:          0634
Signing time:             Tue 12 May 2026 16:01:07 +0000
Manifest this update:     Tue 12 May 2026 16:01:07 +0000
Manifest next update:     Wed 13 May 2026 16:01:07 +0000
Files and hashes:         1: sYfM7EmqX2aqAmSNkbSi7o_3veY.crl (hash: 1V6j3f7jhemGORIxIz3tQWqYWQAbU6UY/lW9WTLfnT0=)
                          2: vtk0NYL8kgLZ9pXjVTmANhtyXlc.roa (hash: ASiU/VZxh3GZFZYmlNltFl5dj/W+E1FulQvZXR6ONjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:ac:56:63:21:02:b5:47:52:2a:7e:fc:76:aa:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b187ccec49aa5f66aa02648d91b4a2ee8ff7bde6
        Validity
            Not Before: May 12 16:01:07 2026 GMT
            Not After : May 13 16:01:07 2026 GMT
        Subject: CN=fc63a47414350cb1137950a020da5eb4cc68eb0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:49:f0:9d:54:ed:70:37:46:84:c3:4c:a9:1b:
                    52:88:83:15:ee:7c:23:3e:f5:6a:77:9e:8e:64:29:
                    12:97:62:e8:d2:7c:5e:eb:a6:fa:cd:bd:8a:06:a0:
                    42:c7:14:66:d6:09:bf:8d:a0:5c:4d:a6:50:ed:a0:
                    d5:e0:1d:8d:d5:75:68:32:21:c8:5a:e3:a0:8d:c0:
                    b8:61:49:0a:73:57:0c:eb:cb:00:a4:4c:18:e7:3f:
                    5a:90:a2:19:6e:e3:28:fe:51:b0:4f:51:e1:38:8b:
                    4e:2d:43:24:b0:d5:71:92:0d:1e:7d:78:ca:f9:9f:
                    40:e9:6d:57:62:8c:cf:95:45:2c:6c:70:f0:44:a6:
                    16:dd:3b:0b:3f:05:0a:dd:59:a3:c3:9a:c6:77:81:
                    7b:c6:61:96:7b:1f:99:98:c3:1b:ba:61:64:b0:9f:
                    0e:ea:4f:e0:d4:fa:33:a4:55:2b:cd:db:fa:0a:60:
                    54:10:f7:9e:b9:8a:9a:aa:e6:48:b6:c9:d7:35:48:
                    cc:38:af:c9:b7:97:e0:a6:56:3e:4d:1c:15:eb:7e:
                    de:bd:04:56:62:0e:81:d6:e7:eb:1f:0e:f0:a8:de:
                    a8:a5:96:b8:50:3d:cd:25:39:be:ea:42:59:71:35:
                    14:f5:fd:26:7a:e3:32:5b:5a:bd:0d:8a:47:71:75:
                    c0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:63:A4:74:14:35:0C:B1:13:79:50:A0:20:DA:5E:B4:CC:68:EB:0B
            X509v3 Authority Key Identifier:
                keyid:B1:87:CC:EC:49:AA:5F:66:AA:02:64:8D:91:B4:A2:EE:8F:F7:BD:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:29:91:27:1b:7e:ed:41:b9:18:84:80:5c:aa:65:dd:fc:dc:
         75:af:24:0b:aa:60:c7:e9:9e:84:5d:b2:ad:5d:2e:92:43:04:
         0c:13:60:82:95:d2:8c:68:0b:95:53:7d:47:12:9a:ff:d5:e7:
         c3:72:81:df:91:91:61:14:61:de:fc:99:1e:14:9d:63:b2:ab:
         95:d0:8f:8f:7e:6c:0d:0f:95:1e:ee:2c:88:ae:d9:8a:9c:e1:
         55:a0:0e:c5:6d:3e:60:f3:7b:e3:59:18:03:aa:c9:22:6a:57:
         2f:a7:19:32:08:ec:a2:d7:d1:f2:25:85:fa:e5:d7:53:7f:66:
         a9:54:5c:60:fd:c9:32:3f:01:a7:bd:88:f0:fe:08:d2:c1:0f:
         ba:34:fb:50:9d:eb:63:ea:2d:e6:97:a8:ba:8d:de:96:77:19:
         33:a4:8d:03:18:51:bc:33:af:8f:df:54:29:6f:d5:6b:4f:4b:
         d6:23:6d:d6:55:a0:ce:fe:0e:0e:d9:8b:85:f9:c0:cc:2a:be:
         74:52:e1:25:16:54:69:e6:c2:c8:2d:68:bd:99:cb:e5:2f:89:
         cd:3b:51:36:7d:ff:61:25:91:6c:e0:c8:82:fd:21:da:7f:c6:
         b7:bd:cb:d6:f8:c1:46:33:e7:d5:1e:1d:2e:0c:e5:a2:d1:2c:
         e4:cd:65:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:03:02 2026 by rpki-client