Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
File:                     yMLHMUWTBCz3QhD38DvnEGwiT4k.mft (raw, json)
Hash identifier:          57wX96JwYstazMq+Ev8xFo+HnzxTxjha1jd4OR+3UW4=
Subject key identifier:   0C:31:BC:30:95:8A:2F:13:49:71:75:77:4E:92:7F:82:59:5B:81:54
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Certificate issuer:       /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial:       019E1EA360426D3B8BB260D8DC8CB8AED77D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
Manifest number:          1711
Signing time:             Wed 13 May 2026 00:01:23 +0000
Manifest this update:     Wed 13 May 2026 00:01:23 +0000
Manifest next update:     Thu 14 May 2026 00:01:23 +0000
Files and hashes:         1: 23wcH8L7dVH0Qu_LmR1lf4KTI60.roa (hash: ZASstFoClWzggMDa2W+x7rdpIoMG853uqXTJ54y76xQ=)
                          2: AXFjpDXCpejxYVRyegcQY_lgsRM.roa (hash: Sa96eMd8qKDmCn/rVwKHcrgoDa7IBUJYs80RqrdQZIQ=)
                          3: Izyp9PlbDb7SEOFmf79W4IySogU.roa (hash: Gvc/OfVfbB6iQcaQfhbaTBFzazD+ndUcgMplwft/fIU=)
                          4: hxGvu-IScN-_hKbmojPRTU_qNno.roa (hash: ahzGwiWSxhQfKuYeEu+Wyoh/XK6bY7UKu+vDiNdhn8A=)
                          5: xpX8qu7gtSlTMLKM8RNsSENreoM.roa (hash: 6bwqH3IsERgfQGTI2ktBpw6N1RbIGeWD0+vqqsDzaLM=)
                          6: yMLHMUWTBCz3QhD38DvnEGwiT4k.crl (hash: ND89yabNk4VexNzb9t8jhD7NUxaHlMNxuRtpiOQ3UMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:60:42:6d:3b:8b:b2:60:d8:dc:8c:b8:ae:d7:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
        Validity
            Not Before: May 13 00:01:23 2026 GMT
            Not After : May 14 00:01:23 2026 GMT
        Subject: CN=0c31bc30958a2f13497175774e927f82595b8154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9e:b0:3f:87:59:72:cd:46:89:d3:c2:e3:de:
                    90:0c:37:2e:e4:4b:b3:6e:e3:e8:de:ef:f4:5c:14:
                    37:b1:f5:88:6f:45:29:a3:d1:8a:2e:e9:0a:0c:2c:
                    c8:56:48:3d:56:9f:d1:c1:54:93:96:7e:eb:1f:e3:
                    0a:d6:c1:5c:5b:2c:38:7d:8f:8c:b2:25:67:84:22:
                    ff:a2:7f:9e:7b:99:ed:58:68:54:8e:b7:92:ac:08:
                    24:c9:eb:2f:33:f3:9e:54:8c:d6:ae:f2:f8:e3:c7:
                    e2:0b:0b:3b:0a:a9:5f:c8:38:6e:a6:59:bd:6d:2c:
                    06:f1:dc:94:15:1a:48:21:37:f2:45:6b:08:d1:f6:
                    f1:d0:f8:73:2e:d6:b9:87:8b:b0:1b:3b:2f:46:26:
                    f3:53:24:8e:b5:88:f1:4f:15:77:9e:2c:cc:9e:6d:
                    63:52:11:ff:0a:a3:62:ac:f8:da:22:68:b2:b4:2e:
                    37:d5:6f:09:c1:f4:f7:00:7d:bf:e8:34:94:98:71:
                    f9:b7:08:43:db:db:1a:87:ed:e5:dc:08:20:23:3c:
                    db:6f:13:dd:b0:14:a0:a2:ec:20:2a:ca:f6:40:31:
                    48:cc:33:91:7f:95:23:1b:6b:19:c1:7b:94:a9:21:
                    e1:41:01:74:2d:a1:7a:71:4c:03:59:a4:f2:99:a0:
                    cd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:31:BC:30:95:8A:2F:13:49:71:75:77:4E:92:7F:82:59:5B:81:54
            X509v3 Authority Key Identifier:
                keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:17:d0:c4:e2:2d:74:cb:1d:67:15:97:7e:03:f6:1b:58:c4:
         54:23:7c:45:ff:9f:e4:cc:d2:7d:a0:b7:93:09:aa:08:7d:84:
         b1:40:1e:d2:96:00:db:e2:a4:d9:d0:6c:2c:ec:22:7f:2a:b5:
         01:24:b9:3f:8f:f2:e7:d5:7f:18:29:03:8e:2d:fa:79:a0:bd:
         23:d8:ff:cd:2b:79:08:ef:c4:b5:25:ea:9a:52:1a:8d:f7:79:
         ea:b3:90:62:0e:a1:48:46:eb:8e:6f:fe:de:7f:fb:b5:46:1f:
         69:76:53:b2:fd:25:ad:b0:e1:55:53:96:56:f8:de:c5:3d:2d:
         d0:aa:3d:b5:c0:43:21:82:7b:86:56:c1:10:21:ef:b6:3b:79:
         44:c3:4d:86:23:f2:57:96:1a:53:bf:16:0b:f0:fc:c2:14:87:
         08:f3:0b:e2:58:b9:24:7f:25:34:ad:81:2b:72:ff:b4:2e:b2:
         f0:e3:bf:1d:db:79:c0:16:b7:be:89:41:03:c4:6c:b6:09:aa:
         48:07:a0:71:2f:ab:38:47:09:ba:08:f7:c6:68:75:ca:96:40:
         8e:f8:08:bf:c9:b2:01:d9:11:55:19:39:9c:cb:f2:da:eb:d5:
         01:c8:1b:8a:b0:ab:5f:cb:85:60:b3:01:87:cd:ca:d7:df:ac:
         a9:7b:2a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:03:32 2026 by rpki-client