Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
File:                     rUyDCxEmFIOmK2aWpMNyDorYig0.mft (raw, json)
Hash identifier:          0upS4Yt81FtfwuHT/xkeKBFBmxwfpqy73fiC6+ZmMzM=
Subject key identifier:   92:56:5E:BD:65:FA:07:E5:67:24:BE:1E:C2:81:ED:EC:A2:56:6E:1A
Authority key identifier: AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
Certificate issuer:       /CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Certificate serial:       019CC975AB4D4DF675DB2A793A416C2AD0C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
Manifest number:          1720
Signing time:             Sat 07 Mar 2026 18:00:57 +0000
Manifest this update:     Sat 07 Mar 2026 18:00:57 +0000
Manifest next update:     Sun 08 Mar 2026 18:00:57 +0000
Files and hashes:         1: 5A_9S0_k2z9CIFI_8Yk78IZDaEI.roa (hash: nmz/iYmV6mKVOLZrYAox5VaizjrAFHQfQwQAyHHQgTM=)
                          2: Axc_E2xRyuIueu7MxwSrAbNKRdM.roa (hash: BDjOOm0VSjHKXhROcrzw3kdn2+1ifBZy1hpq2pHuv2A=)
                          3: PaurkzffyErdpNi4ejYNr7FnWdc.roa (hash: jPNQ7UykvWYwuvPZ1rpjnsZHusFbctpC3HqhplZrHe4=)
                          4: Uryh4fThyDLMPt3qMbkDETFPkjs.roa (hash: /xcRZ3cub7ymv3GtgsooN/HcmqZzVT8RJVzKbGyx/dQ=)
                          5: rUyDCxEmFIOmK2aWpMNyDorYig0.crl (hash: InYi8QK7hf4AR+n1jWIjpFLnj9JUVxfWVhhF+MeWZWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 18:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c9:75:ab:4d:4d:f6:75:db:2a:79:3a:41:6c:2a:d0:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
        Validity
            Not Before: Mar  7 18:00:57 2026 GMT
            Not After : Mar  8 18:00:57 2026 GMT
        Subject: CN=92565ebd65fa07e56724be1ec281edeca2566e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b6:7c:eb:9f:18:fa:70:12:22:fa:f3:9e:b6:
                    4d:68:da:f6:33:37:07:dd:1e:76:7e:82:c7:53:0a:
                    46:35:87:cb:4f:a5:4b:00:94:ab:89:dd:91:b7:3a:
                    22:2b:a3:05:e4:26:14:9a:5a:2b:30:aa:c5:10:94:
                    44:59:4c:01:a1:38:1f:bb:19:8c:a1:50:c8:6f:5a:
                    79:32:8f:ee:c2:87:18:a4:90:9e:ca:6f:af:cc:3c:
                    30:0b:5f:fa:67:47:6c:64:55:d2:77:76:9f:a7:3c:
                    0e:c4:4a:25:5e:71:e4:3b:55:e2:4f:74:e1:ad:2b:
                    b4:e1:78:b3:50:e4:e4:d5:25:59:d7:9f:b6:37:8c:
                    28:9f:e6:41:8d:a0:da:14:6b:ab:64:5d:e1:90:64:
                    fe:36:64:63:6c:13:df:c5:27:7f:f5:7d:cb:ca:a4:
                    ac:c0:ba:06:b4:57:e6:69:16:5f:5d:3c:af:ec:c4:
                    56:4f:41:6f:a7:0f:05:30:b8:d0:41:e8:d5:74:b0:
                    82:3e:76:ff:e1:43:96:61:0b:13:9e:50:bb:58:4b:
                    c5:47:b4:8e:0e:c6:49:e6:db:4d:aa:54:66:89:b8:
                    37:72:b9:50:0d:53:a8:37:8d:ec:39:9c:53:6f:b7:
                    9a:16:4a:7d:dc:46:4b:03:8b:f0:39:ef:30:d4:8f:
                    1f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:56:5E:BD:65:FA:07:E5:67:24:BE:1E:C2:81:ED:EC:A2:56:6E:1A
            X509v3 Authority Key Identifier:
                keyid:AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:52:36:c6:83:8c:a5:01:ec:11:2a:e1:c7:e4:44:b8:37:28:
         f2:45:59:57:85:97:97:5c:bb:5d:ed:a8:02:60:49:16:d7:11:
         3a:c8:3f:7f:69:a3:99:ce:cd:86:a9:18:6e:04:9c:e3:de:e8:
         7c:8e:d9:b5:47:96:3b:17:1b:4f:ae:de:30:4a:f9:f5:65:46:
         d1:df:2e:69:f3:98:3f:a0:39:af:e1:18:02:d6:b5:37:a6:a3:
         a3:67:46:7b:00:e2:a8:5a:4a:5c:a1:ca:33:b0:d1:b7:87:a0:
         ca:e8:dc:a1:3c:aa:5c:95:b0:d0:46:a2:a4:c1:32:65:d7:19:
         75:ac:0f:ee:cb:50:b7:65:8f:a7:e8:78:4c:42:05:cd:09:2f:
         3e:31:31:7d:ee:d8:14:4e:e1:dd:83:d9:02:77:22:50:1d:3c:
         6b:76:8e:cf:d6:ee:20:2d:14:e9:89:03:91:41:89:f5:c4:af:
         c8:cb:5d:e8:cb:3c:67:fc:63:f5:c1:23:3f:aa:6b:6d:93:7b:
         ca:c5:5b:91:34:56:26:71:90:03:70:e8:86:b1:6a:aa:67:62:
         16:d0:1c:cc:18:03:21:c1:4e:8e:57:be:44:37:ae:d1:55:f1:
         84:be:a0:4e:1d:d7:0a:19:53:b6:85:96:a8:61:fd:16:e5:6f:
         c3:f8:9d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 01:35:33 2026 by rpki-client