Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
File:                     A_P-YHUIK-jliDKbQ9dhv257AdA.mft (raw, json)
Hash identifier:          lr6j2bih3HUXS0k1lAzw43lry42OupoKJ/lp7jXs9A8=
Subject key identifier:   74:4E:BD:45:82:E2:61:EA:B2:3F:47:76:80:AD:DD:AF:1A:7F:6F:62
Authority key identifier: 03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
Certificate issuer:       /CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Certificate serial:       019E1CEB9E0126351B291E008D9416638F6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
Manifest number:          0B39
Signing time:             Tue 12 May 2026 16:01:03 +0000
Manifest this update:     Tue 12 May 2026 16:01:03 +0000
Manifest next update:     Wed 13 May 2026 16:01:03 +0000
Files and hashes:         1: A_P-YHUIK-jliDKbQ9dhv257AdA.crl (hash: 5JwWPCEBv8HWE0jqOsVA2N6Bhkso14kKBny0Kvwe9ew=)
                          2: y8-TomRf2SfXgjAfIqDbASYx4Kw.roa (hash: uG779XP+SowZScRgyybF2Yr7PqJO6NR4pXnq6h4jggk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 16:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:9e:01:26:35:1b:29:1e:00:8d:94:16:63:8f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
        Validity
            Not Before: May 12 16:01:03 2026 GMT
            Not After : May 13 16:01:03 2026 GMT
        Subject: CN=744ebd4582e261eab23f477680adddaf1a7f6f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:56:53:e1:18:7f:8c:db:74:e7:a5:0b:6d:cd:
                    d5:8f:35:ab:7a:35:16:d4:9b:7d:e5:0b:eb:aa:c9:
                    39:12:97:05:1c:a5:f4:ac:39:33:79:10:75:0a:f7:
                    7c:4e:ee:20:9a:82:b6:c1:6b:67:67:42:7a:6f:4d:
                    6b:37:24:a2:78:b8:f5:01:10:9a:df:6d:7a:9a:88:
                    e1:2c:da:43:f2:76:18:ca:1a:c0:c7:be:d7:b7:6e:
                    8d:c0:66:98:26:59:47:66:4a:3c:bb:f8:44:71:fe:
                    fe:5d:ff:c3:f7:4b:00:2d:2e:37:e0:b2:00:a8:bf:
                    c4:07:e2:14:ba:79:d1:fa:14:e0:cc:6b:7b:6f:78:
                    50:12:98:5e:55:b1:e6:e7:45:e8:0a:ec:94:99:ae:
                    68:17:f5:ac:a2:73:18:37:3f:cf:b6:9d:d6:9a:b8:
                    6a:3c:a0:14:c3:8f:4f:d8:32:6a:c2:5c:7d:51:96:
                    06:16:ac:e8:17:70:5f:1b:81:ef:66:3d:47:1b:25:
                    62:3a:b7:ef:c7:4b:d5:49:ce:dd:bc:d7:80:49:ca:
                    43:e1:9a:5a:ac:33:f5:bf:9f:e7:af:e2:c0:7f:1f:
                    ad:b0:46:64:63:96:04:b3:0e:a6:90:c2:43:3a:9c:
                    07:0f:b2:b8:62:87:2c:c5:c3:5b:07:b8:f2:2b:61:
                    43:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4E:BD:45:82:E2:61:EA:B2:3F:47:76:80:AD:DD:AF:1A:7F:6F:62
            X509v3 Authority Key Identifier:
                keyid:03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:4f:ca:f2:32:e4:73:99:6a:12:c2:c7:b1:33:6f:9b:be:e1:
         7c:74:4d:9e:4f:c6:67:fa:aa:9d:a3:e2:e6:29:00:36:cc:93:
         96:e8:9b:15:93:90:6c:c9:ec:ba:05:74:44:72:15:05:ef:59:
         31:cd:57:83:53:cf:04:49:a4:22:d6:1b:f3:c6:e0:bb:dd:e1:
         66:20:11:8b:91:df:b2:c7:cb:91:0d:16:24:e7:6f:7b:6f:50:
         cd:2f:4c:8e:3e:4f:88:a8:85:7b:53:91:da:93:55:6b:52:5e:
         fd:71:e1:d7:6f:cd:9a:75:93:77:90:57:1c:4b:65:80:8e:07:
         9e:b9:88:65:4e:5e:ab:7f:91:a3:12:67:75:26:7c:7f:a9:d1:
         89:e4:64:a0:d6:a8:28:a3:0f:fa:3d:5c:c6:b3:a9:71:78:fb:
         53:e6:7f:69:a5:18:98:16:ef:71:b0:25:46:35:f0:b4:be:30:
         e0:95:05:f7:ba:6c:7f:4d:9d:5e:f3:e5:50:f0:87:5c:b3:a7:
         c9:7c:66:f4:0b:a5:44:df:70:1b:73:74:fe:54:61:93:ff:18:
         9e:f1:54:35:7c:6e:9a:73:43:e5:e1:65:69:8c:72:38:5d:3e:
         f5:f6:74:54:a2:04:b3:32:7e:51:44:20:ff:ec:2a:fa:18:80:
         34:6c:39:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:13:21 2026 by rpki-client