Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
File:                     YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft (raw, json)
Hash identifier:          bOkXvRwYw4GsaNeR/60pSnlwi88ZJ4U1Con3aqQZJLI=
Subject key identifier:   DA:DB:BB:DF:51:FD:1F:B6:F3:EA:64:51:53:B0:71:31:E6:42:C7:93
Authority key identifier: 62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77
Certificate issuer:       /CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
Certificate serial:       019E1DFEBD531B449677B877325E85EB260C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
Manifest number:          0331
Signing time:             Tue 12 May 2026 21:01:34 +0000
Manifest this update:     Tue 12 May 2026 21:01:34 +0000
Manifest next update:     Wed 13 May 2026 21:01:34 +0000
Files and hashes:         1: YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl (hash: DZFuusNtuy3hLMhwjmSI+51p0Kwgz3T12fVEE8n1Fko=)
                          2: otGdouxrN50G3K6_VfBD4sUjZsk.roa (hash: KaxlTsTV8jPWF44UBDhZygEc33e9Bf3O7Tb4YHBXJsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:bd:53:1b:44:96:77:b8:77:32:5e:85:eb:26:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
        Validity
            Not Before: May 12 21:01:34 2026 GMT
            Not After : May 13 21:01:34 2026 GMT
        Subject: CN=dadbbbdf51fd1fb6f3ea645153b07131e642c793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b5:e3:72:fd:38:b5:04:84:5d:53:80:a8:73:
                    dd:69:71:33:3d:e2:57:c2:4f:cb:f7:aa:8e:0f:30:
                    1e:f3:3a:ce:c7:60:51:32:35:07:9d:e7:42:80:44:
                    72:2a:cf:4e:69:49:b7:29:47:3d:84:43:94:dc:2f:
                    c1:b7:ac:c4:d5:00:af:89:3b:15:50:68:99:39:e9:
                    af:68:fe:5d:e1:77:99:6f:99:a6:68:7e:fd:00:5a:
                    aa:e6:14:15:9c:ad:40:09:d0:23:8f:5f:f6:6c:66:
                    63:2f:7a:e4:1e:44:38:ba:8a:e8:58:50:14:4a:60:
                    9e:29:87:ba:25:a6:39:18:e4:a3:49:91:61:1d:da:
                    e8:ac:e7:90:9b:11:61:d4:d0:51:60:b9:46:fa:3a:
                    cb:e9:54:d0:61:d4:b5:57:45:04:c7:30:00:e1:bd:
                    be:42:41:55:76:3f:aa:d1:2f:1e:0a:72:1e:23:4d:
                    bf:8b:d8:52:14:fb:87:41:d9:c8:e5:ca:76:c2:bf:
                    30:06:d8:f9:4a:46:96:69:7f:4a:24:80:db:89:5c:
                    cf:e8:45:0d:07:66:3b:a8:2a:2b:7d:72:ba:93:35:
                    77:84:44:46:31:a3:94:26:f8:a2:e7:5d:3f:1f:d3:
                    62:68:0a:d2:2e:c8:46:8c:ec:59:74:ca:0d:2a:4e:
                    ca:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DB:BB:DF:51:FD:1F:B6:F3:EA:64:51:53:B0:71:31:E6:42:C7:93
            X509v3 Authority Key Identifier:
                keyid:62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:11:a3:9c:f4:f2:54:bf:0c:6f:6e:e7:42:d1:f9:3b:bb:0c:
         dd:87:71:bf:a4:7a:64:f2:5e:1a:0e:d6:ad:ac:fd:e3:70:79:
         b2:81:7a:58:e0:98:31:7e:54:78:e1:54:e2:50:8b:e0:5e:db:
         ce:75:08:c4:99:d6:d6:b2:2f:18:18:3f:53:2e:74:c2:31:be:
         22:5c:31:c5:4f:69:f3:d1:86:97:5f:02:ed:ca:fa:45:f3:29:
         8c:86:af:ae:b8:0b:31:ae:a3:d7:b4:c2:53:5a:f8:7e:8a:0c:
         a0:d8:81:ce:94:d5:37:3e:94:4c:06:c7:9e:11:eb:4f:5a:19:
         4a:6d:f9:13:af:5a:25:31:6d:01:91:32:f2:26:4b:5e:e8:37:
         23:eb:5a:46:93:a5:45:97:81:6f:b7:bc:49:d7:11:a4:1b:c1:
         1f:50:d6:ec:11:1a:2e:44:72:1a:38:4f:e9:5b:38:7b:64:bb:
         52:77:15:ba:90:ac:1d:d5:e8:33:18:dc:25:f2:07:0d:ff:0b:
         1c:46:28:19:ef:e3:6e:94:f2:a5:6f:b7:f9:64:22:a6:f9:a7:
         09:db:d3:72:4a:bf:68:16:b9:0d:9a:2a:d4:af:58:09:0f:09:
         7a:00:61:15:d9:5a:2d:3f:e9:11:ee:9e:91:d4:f3:69:6b:3b:
         3d:3d:db:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:32:43 2026 by rpki-client