Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
File:                     YTdPxOqwDUHB7uR_37ABB4x0-oU.mft (raw, json)
Hash identifier:          /m8DVAnCBdV7kGXEbTIMVs9PTpVQUxuBsZtdGvkDbPA=
Subject key identifier:   03:46:5F:00:59:B4:70:C9:50:57:81:7E:AB:C4:B2:D6:0E:51:B0:A5
Authority key identifier: 61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
Certificate issuer:       /CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Certificate serial:       019E205A72A9AD357FF25D16380806EC80C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
Manifest number:          0856
Signing time:             Wed 13 May 2026 08:00:58 +0000
Manifest this update:     Wed 13 May 2026 08:00:58 +0000
Manifest next update:     Thu 14 May 2026 08:00:58 +0000
Files and hashes:         1: 7eP7TwNaRBKXgHVXQPj9yKJaIEQ.roa (hash: ilu1OaDtcIPxYeaNVeuS9YaTFPbuPd9sYiHNRmOaCMs=)
                          2: YTdPxOqwDUHB7uR_37ABB4x0-oU.crl (hash: l53UsQi4N0zqT8QU4ZX1BX8H0OEqhjSFwBZ/sx5eze0=)
                          3: t6QTeO_UUKyvQ6rnuFTVQVtV-d8.roa (hash: lkQHddLK92kTmS7mRA5Mrvzd/PdOAJ8/DAOJGdqwGqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:72:a9:ad:35:7f:f2:5d:16:38:08:06:ec:80:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
        Validity
            Not Before: May 13 08:00:58 2026 GMT
            Not After : May 14 08:00:58 2026 GMT
        Subject: CN=03465f0059b470c95057817eabc4b2d60e51b0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3a:b1:72:67:e9:8b:aa:22:7e:69:c5:1a:fa:
                    36:27:3b:4e:e3:1a:72:13:5a:4c:36:2a:e4:83:05:
                    9e:86:3a:13:eb:4c:a9:45:f5:a2:e0:e4:d7:c4:71:
                    54:db:40:c4:74:f2:69:83:0d:42:be:03:49:9d:3a:
                    e6:8d:e7:ab:c4:c5:67:cf:1c:6f:fb:4a:d3:74:26:
                    1e:f8:18:f1:f9:3c:58:02:04:d4:c0:68:cf:87:a6:
                    a1:22:14:ab:bd:c3:0e:6f:77:2d:58:87:6c:ad:f8:
                    54:d9:73:93:43:cc:d9:d6:c0:ef:5f:60:e7:97:b8:
                    09:e6:ab:47:48:07:14:7a:02:f5:e1:94:97:39:84:
                    41:2a:4f:4a:ef:8c:70:ae:b9:3c:44:7d:66:6d:37:
                    d1:ba:8f:32:87:7c:4c:10:88:db:fc:86:28:c0:69:
                    50:a8:12:af:bd:e4:8b:db:4e:01:4e:ae:c6:f5:dd:
                    0b:e8:b4:7b:cf:a1:c3:81:d3:4b:fe:a8:0a:81:f6:
                    a4:05:9e:18:13:64:48:21:70:55:26:63:95:86:f3:
                    e6:5d:96:bb:e1:fa:1b:54:5d:d0:b9:b0:c8:4a:cc:
                    c5:b3:53:01:27:93:c6:4a:36:f4:b5:78:0b:47:d7:
                    1f:8b:17:26:c9:19:e3:83:59:47:62:d0:09:bb:30:
                    ad:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:46:5F:00:59:B4:70:C9:50:57:81:7E:AB:C4:B2:D6:0E:51:B0:A5
            X509v3 Authority Key Identifier:
                keyid:61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:28:dc:18:d5:3f:fd:04:46:99:35:d1:1c:eb:e9:df:d4:ce:
         7d:c7:6c:3c:b5:bb:2a:18:57:d7:c5:c3:75:e9:04:0c:22:08:
         60:d8:c5:e3:a4:bf:01:fa:a2:e9:87:9f:e7:69:5c:3c:7b:01:
         2f:db:10:82:3a:79:9b:4e:79:5f:fc:4b:45:fe:77:e3:b4:1e:
         b6:6d:1a:bf:b0:3e:34:3b:68:27:4c:ec:32:ea:dd:e1:3f:24:
         49:53:de:9f:ec:13:35:dc:3b:8d:35:73:31:09:77:ae:99:3e:
         74:37:00:b0:5a:1f:68:94:9b:66:3a:9a:d6:5f:80:3b:1b:be:
         2c:e1:aa:e4:53:f9:29:cb:c2:a0:e7:e1:17:b6:80:b2:e2:ec:
         51:8f:7e:e3:cb:24:4a:9d:6f:0f:d3:44:12:f4:9f:4b:eb:7d:
         29:bb:ae:c9:46:89:e9:12:eb:bb:6f:dd:20:bd:3e:92:02:da:
         69:44:e3:88:1d:e3:94:50:3c:75:b3:c5:80:9a:ad:f7:fe:b9:
         0a:f7:00:ad:12:d5:ce:e6:aa:95:10:fe:92:b5:25:f1:d7:04:
         1a:79:7d:a8:8e:25:9a:c0:6e:ad:26:e0:7a:d6:b6:b1:95:98:
         a9:9e:9e:78:53:bf:b6:b0:3f:64:69:13:68:5f:f0:b3:cb:dd:
         07:af:c2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:27 2026 by rpki-client