Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft
File:                     YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft (raw, json)
Hash identifier:          ykdTEUD3oT+vnwhWFS3yI+UqPtJPpC6CVvYOcqu+W1o=
Subject key identifier:   14:A2:82:14:96:8D:57:8E:AF:60:03:22:C0:DA:77:80:2E:74:B3:E6
Authority key identifier: 62:23:F5:64:16:3F:64:EA:F1:E1:AD:A6:D6:68:CA:D5:9D:5A:B0:A3
Certificate issuer:       /CN=6223f564163f64eaf1e1ada6d668cad59d5ab0a3
Certificate serial:       019E20FEFA422D0ABB5FC8345B30517C83E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft
Manifest number:          0183
Signing time:             Wed 13 May 2026 11:00:41 +0000
Manifest this update:     Wed 13 May 2026 11:00:41 +0000
Manifest next update:     Thu 14 May 2026 11:00:41 +0000
Files and hashes:         1: YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl (hash: z/wp2/qMoLqsFOEtyarnwZVC5s3DiNu/0uqsleAHp/s=)
                          2: nURomofbDgSrxYM0O1_tcq9RI08.roa (hash: tbGTgdyklPOm5IjmielhkBjtWa6HmczItFnGfm4z+A8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:fe:fa:42:2d:0a:bb:5f:c8:34:5b:30:51:7c:83:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6223f564163f64eaf1e1ada6d668cad59d5ab0a3
        Validity
            Not Before: May 13 11:00:41 2026 GMT
            Not After : May 14 11:00:41 2026 GMT
        Subject: CN=14a28214968d578eaf600322c0da77802e74b3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:78:88:da:28:2f:dd:05:2d:91:66:94:20:60:
                    1f:dc:13:37:27:6d:d5:7a:0d:ca:48:83:be:36:2a:
                    dd:3f:14:0f:7a:da:d0:e1:e4:bc:45:bb:f1:49:6b:
                    1c:c0:c4:c0:5c:9b:2c:a6:d1:06:46:cb:0e:7b:e7:
                    ee:6c:7c:f3:92:f5:ba:a1:62:89:7a:17:b3:7c:58:
                    ac:ea:39:ed:e1:ff:8a:d1:1b:c5:69:0e:63:09:69:
                    2d:9b:b2:bf:4e:e0:c0:35:cf:0e:8e:73:ac:66:45:
                    0a:95:8c:60:55:d6:bc:ae:e4:6e:3f:6f:be:52:fd:
                    76:99:e2:a7:f8:09:65:47:b4:9f:55:49:23:95:54:
                    08:26:4e:39:fb:c1:a9:75:78:92:41:8e:45:9f:63:
                    96:27:77:10:74:07:c9:78:6d:e2:8b:e7:51:97:ed:
                    ec:a3:f2:db:14:49:a3:b3:f9:f7:50:81:70:95:4b:
                    cc:ff:aa:e5:51:b6:6c:d2:33:2a:c4:4e:66:8d:ac:
                    17:7b:df:ab:90:0d:34:41:85:76:64:96:65:66:ee:
                    05:d9:4d:1b:ee:8d:e4:40:25:50:0d:16:81:31:c1:
                    03:8f:be:c5:2c:2e:25:8d:dc:3a:4b:11:59:1c:b3:
                    de:58:30:4e:b8:cf:2b:4c:71:79:05:c3:19:d2:73:
                    4b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A2:82:14:96:8D:57:8E:AF:60:03:22:C0:DA:77:80:2E:74:B3:E6
            X509v3 Authority Key Identifier:
                keyid:62:23:F5:64:16:3F:64:EA:F1:E1:AD:A6:D6:68:CA:D5:9D:5A:B0:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:38:4d:1e:82:c2:da:cd:2f:27:cb:70:46:7a:7e:be:a7:16:
         b6:74:21:ba:c9:00:d5:5b:45:12:a8:72:c1:dc:a4:76:f6:d8:
         6c:51:03:fc:c6:6c:39:cd:cc:9d:9a:a3:18:87:e1:d2:b9:7f:
         f4:a0:80:b4:15:cb:ea:e0:3f:9f:9b:58:f1:fc:25:bb:a8:34:
         4f:81:57:59:3c:41:14:a1:49:c0:ec:fd:10:82:51:b1:cd:98:
         f5:3a:b6:b6:11:c3:ff:8a:50:9e:62:6b:b6:96:c5:38:ed:e8:
         b3:b3:32:52:4e:90:34:18:98:2b:60:7e:74:6e:b8:77:f8:09:
         f9:94:fc:58:18:c1:f3:95:cf:46:69:a3:7d:71:fd:27:88:e4:
         7f:cb:dc:94:70:94:75:8d:17:49:03:0a:be:f4:b6:c7:95:f5:
         67:89:05:67:03:e3:b5:d5:3c:84:0c:34:8d:94:5d:96:53:0c:
         c7:67:a8:49:69:47:a8:90:b2:a6:82:99:81:8b:be:79:98:d0:
         24:79:6a:d7:17:12:ed:1e:0b:b1:37:99:19:ca:4d:ef:c2:f3:
         b2:3c:e2:ff:a7:ea:8a:2f:7d:c4:a1:3d:db:b9:d2:f7:b2:58:
         1e:85:b6:09:3b:5c:d7:85:d4:ee:cc:66:75:e9:c4:b3:b6:a6:
         72:d5:1e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:58 2026 by rpki-client