Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
File:                     zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json)
Hash identifier:          rv1lBm66V6ptbsR60R3zRp+Q9ZVs+UERXYc3E6lPAw8=
Subject key identifier:   56:AF:44:57:B3:CA:E3:CC:33:0F:E4:29:7C:85:DA:BE:A0:F4:CA:26
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Certificate issuer:       /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial:       019E209177D3860BC37562127BC233DA9CF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
Manifest number:          190C
Signing time:             Wed 13 May 2026 09:01:04 +0000
Manifest this update:     Wed 13 May 2026 09:01:04 +0000
Manifest next update:     Thu 14 May 2026 09:01:04 +0000
Files and hashes:         1: Cl9Lz5nBz_xnxuUQUJGuBR8zW9A.roa (hash: q7wtyFFM/GxuRNYmPTO3dTsPt0PKaH+4FtRYA+CX4Dg=)
                          2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: 29hTQ6kAP9A3U8jq6Zz/Mp2BRm85jOfM0ObtTQadTaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:77:d3:86:0b:c3:75:62:12:7b:c2:33:da:9c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
        Validity
            Not Before: May 13 09:01:04 2026 GMT
            Not After : May 14 09:01:04 2026 GMT
        Subject: CN=56af4457b3cae3cc330fe4297c85dabea0f4ca26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:63:98:9b:78:cd:4b:77:3b:4f:fc:77:49:7d:
                    01:fb:e7:1d:df:f6:09:56:6a:90:25:cc:71:5f:ac:
                    94:b0:da:b4:ff:59:fd:56:bc:5e:8f:03:30:2f:70:
                    66:ab:1c:c9:51:77:46:b7:69:85:7a:4f:c8:a3:ae:
                    7a:24:a5:f2:36:80:1b:f9:5a:d4:38:66:d8:89:07:
                    46:37:a8:3e:59:b1:0d:5d:1f:5d:79:16:83:a0:7a:
                    07:90:ef:df:cb:58:6e:e0:63:08:3a:9f:5f:39:a9:
                    ed:67:7a:19:54:dd:4e:7d:f4:09:69:90:12:3c:41:
                    7d:df:ed:42:73:6a:aa:ef:c4:be:ea:de:67:89:8b:
                    a4:ac:31:fd:ee:69:8e:87:a4:fe:bc:c8:6f:d6:61:
                    48:ec:f4:58:2a:5d:a1:d2:fb:b3:46:83:e2:c2:66:
                    b3:8e:ef:ee:91:0c:d8:9b:6e:14:30:11:15:0f:c4:
                    6d:b8:5e:56:fa:69:5c:73:09:f9:ce:ce:6f:5c:b3:
                    29:8f:8c:df:6a:d1:58:41:e4:ec:a7:9b:f0:c9:3f:
                    c5:57:d7:db:0a:3a:ba:37:70:47:a4:1b:30:fe:fb:
                    29:01:d1:02:50:c7:63:5d:6c:ed:63:29:51:7c:bf:
                    d0:b6:98:e0:4e:3d:a2:b8:65:8d:ac:92:58:97:bf:
                    db:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AF:44:57:B3:CA:E3:CC:33:0F:E4:29:7C:85:DA:BE:A0:F4:CA:26
            X509v3 Authority Key Identifier:
                keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f3:e5:04:58:53:d5:2e:74:c8:a1:6e:b4:63:35:43:dc:74:
         10:da:4b:32:f9:51:4e:72:51:b5:35:c6:0a:20:28:5f:5e:ea:
         e6:37:72:0e:69:ff:59:1e:bc:44:2a:5f:19:8a:17:11:e0:2d:
         3a:59:43:d8:96:3c:81:64:5c:87:24:fb:d4:4d:fa:c6:e8:d3:
         97:86:dc:cc:ed:73:4f:27:da:88:81:f4:2f:47:95:03:b8:ff:
         de:37:7a:fd:09:73:6f:d9:39:8d:03:05:eb:99:26:37:29:12:
         89:6e:42:67:d2:e2:b6:7b:be:5b:df:83:75:a8:37:d0:dd:21:
         b1:95:73:2a:0c:40:19:f2:92:d3:02:7f:85:2e:c6:3d:71:26:
         e3:28:ec:77:cb:79:63:cd:ec:2f:6a:0d:89:32:7f:49:cf:bb:
         ab:4b:90:4e:88:3d:78:3b:d7:8e:34:9c:33:12:9c:5a:cc:64:
         f1:0b:55:2b:c0:95:39:81:d4:47:a1:a4:cc:90:69:78:17:18:
         27:5f:62:87:e8:37:5a:59:20:83:42:37:1c:1e:23:ba:f1:2a:
         c6:83:9a:e6:cc:5c:c7:33:b5:73:c9:37:10:dd:c5:b2:94:bd:
         94:57:78:85:5c:54:23:fa:47:db:9f:60:5f:03:62:06:ab:77:
         82:5d:68:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:06 2026 by rpki-client