Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
File:                     YtGLMS41Pnj6juX4DTb3Qc3N46o.mft (raw, json)
Hash identifier:          CyTPWJnXJxl/8IWwX2XsXM+ka//rmm/XNBbfvkw1K14=
Subject key identifier:   E3:BF:3C:35:E9:8A:55:8E:FF:92:B6:D9:97:AA:10:83:4A:9A:4C:A6
Authority key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
Certificate issuer:       /CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Certificate serial:       019E1FB55D00A3EBF77F1F58C8E0412B2E33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
Manifest number:          13AC
Signing time:             Wed 13 May 2026 05:00:39 +0000
Manifest this update:     Wed 13 May 2026 05:00:39 +0000
Manifest next update:     Thu 14 May 2026 05:00:39 +0000
Files and hashes:         1: YtGLMS41Pnj6juX4DTb3Qc3N46o.crl (hash: M4Dh8maPkpUcDbp3z49eLZmhgoaj1xbc3kMYLTaYvP4=)
                          2: sRtXhXnTV3BV5O7Uk5pPU6e6DHY.roa (hash: kK2zj8c+pEZD+bWtboW9Noev8kavvORxA7HxKk4tpBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:5d:00:a3:eb:f7:7f:1f:58:c8:e0:41:2b:2e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
        Validity
            Not Before: May 13 05:00:39 2026 GMT
            Not After : May 14 05:00:39 2026 GMT
        Subject: CN=e3bf3c35e98a558eff92b6d997aa10834a9a4ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8b:20:47:8b:0c:5a:82:65:15:1b:2e:90:6f:
                    31:7d:13:b8:0a:6c:26:1e:32:a1:b5:51:90:ca:ab:
                    b3:ee:0c:86:6c:a0:bd:02:d4:13:b1:4c:7a:cd:c8:
                    84:19:b5:51:83:3e:bf:a7:30:c0:d7:89:59:b6:d2:
                    57:79:6f:47:a4:32:4c:c5:ae:a5:68:17:4a:64:67:
                    b8:83:8f:c9:89:9d:a8:89:c2:56:a6:93:05:ea:ea:
                    26:70:e9:49:9c:1b:ba:50:88:64:0c:68:41:ce:8b:
                    bc:25:2f:fc:7a:4d:06:4d:50:8e:77:fa:f6:6b:96:
                    55:9f:1c:3e:fc:0f:79:fd:cb:87:e3:73:94:9c:5e:
                    18:7e:b2:8e:98:6a:2d:a8:0c:60:fb:ff:17:00:8a:
                    aa:63:42:11:4c:07:b9:82:1a:00:77:6b:97:38:3a:
                    32:b4:7a:df:b0:b6:4e:68:c0:52:83:f8:a9:38:00:
                    fa:72:5a:85:6b:4a:d5:b1:ca:27:d3:2b:b4:7d:7e:
                    8b:ad:f3:f3:c1:71:62:be:66:71:a6:c5:d4:da:72:
                    18:ed:0f:a9:57:31:a0:ee:28:64:5f:3a:21:75:3b:
                    68:38:1d:1f:4b:a0:6e:d4:a6:bf:4d:29:33:50:fe:
                    4e:1b:a7:c1:dd:7e:44:aa:03:27:f9:87:19:e4:8c:
                    3b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BF:3C:35:E9:8A:55:8E:FF:92:B6:D9:97:AA:10:83:4A:9A:4C:A6
            X509v3 Authority Key Identifier:
                keyid:62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:78:2d:88:e4:7b:5f:6c:b1:53:6f:90:35:1a:47:32:84:8f:
         83:86:40:f9:45:30:db:84:15:a8:a5:c5:23:8b:80:c9:f4:e1:
         70:f2:c3:ce:7b:45:1f:9c:64:9f:ff:27:cc:45:e4:cd:b0:e2:
         d2:ce:78:53:e3:fe:b8:a9:0b:6a:0c:3c:d4:b3:8f:e2:d7:55:
         51:8e:a8:91:f5:2d:54:ad:3a:23:2a:31:28:1d:73:62:6d:52:
         e0:dd:33:30:1b:5e:5d:e9:39:3d:6d:96:44:f6:00:9e:78:81:
         53:0c:ec:a6:e8:03:d6:52:54:0b:bb:dc:58:e4:40:93:24:c1:
         02:8f:21:d9:82:94:e9:4f:8d:60:b4:ca:ed:cc:c5:48:bc:56:
         ae:f3:f1:1b:6b:0d:46:5b:9e:f5:51:11:f9:68:5f:dd:2f:25:
         c6:95:29:1c:54:b3:88:4d:39:f3:7b:cc:e4:ed:c2:3e:52:27:
         0f:af:5d:0c:b9:3b:af:04:6f:e1:ca:a4:91:6d:65:ec:14:cb:
         6c:27:41:ca:ce:4a:26:9c:69:98:b2:2b:4e:24:73:09:26:7c:
         50:df:25:b8:b9:d7:d7:dc:55:05:95:ac:82:7e:2b:f4:88:6b:
         58:9f:1f:0c:48:f2:f2:0e:cd:bb:a9:c9:6c:54:7f:e3:1e:59:
         b2:34:ed:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:59:00 2026 by rpki-client