Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
File:                     YuJWVsULslT1gHfRuWbkdLFjR68.mft (raw, json)
Hash identifier:          9FmAooBAld9WdEziwa9FyVLi7q1dA0fPP0KZinEvBA4=
Subject key identifier:   68:89:DC:87:66:8C:AC:D1:D4:57:51:B6:46:B2:D7:C2:41:11:C5:AA
Authority key identifier: 62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
Certificate issuer:       /CN=62e25656c50bb254f58077d1b966e474b16347af
Certificate serial:       019CC8D07559D8697DD47F1203C27B424A43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
Manifest number:          1855
Signing time:             Sat 07 Mar 2026 15:00:30 +0000
Manifest this update:     Sat 07 Mar 2026 15:00:30 +0000
Manifest next update:     Sun 08 Mar 2026 15:00:30 +0000
Files and hashes:         1: WDz5bqq9s7Sot6DZTyns7ujP_G0.roa (hash: jp6a/AgGzZ0JdGjudIFSMOs/t8/efE23HGLQbGbVGxE=)
                          2: YuJWVsULslT1gHfRuWbkdLFjR68.crl (hash: /Cqzw+Vd/OdNwueOQJ3b1BpeeiZc/47QVFFknmJitxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 10:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c8:d0:75:59:d8:69:7d:d4:7f:12:03:c2:7b:42:4a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62e25656c50bb254f58077d1b966e474b16347af
        Validity
            Not Before: Mar  7 15:00:30 2026 GMT
            Not After : Mar  8 15:00:30 2026 GMT
        Subject: CN=6889dc87668cacd1d45751b646b2d7c24111c5aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:63:54:2c:bc:9f:13:98:c3:5b:4e:bf:39:0c:
                    96:08:a1:c6:d9:53:f1:fc:5a:da:6b:40:16:3d:53:
                    fe:4a:29:ae:d4:1c:a2:fd:01:86:de:fe:d8:97:cc:
                    20:0b:23:df:d7:1e:99:ee:3b:33:ec:73:46:17:97:
                    5a:cc:4f:1f:ff:ec:ac:ec:d1:93:93:f4:88:49:a7:
                    cc:32:81:e5:4e:b5:28:3e:71:9d:ce:32:9a:a7:9f:
                    34:9e:0a:2b:76:e9:cb:89:12:4c:f3:bf:de:80:87:
                    41:7f:15:67:d5:d0:7e:18:c6:62:00:43:b2:7c:8f:
                    c3:a4:35:55:a4:ad:db:70:d5:91:1f:87:39:fe:72:
                    6f:ab:f9:05:40:54:92:76:01:05:21:20:12:d4:fa:
                    62:b2:7d:35:68:ba:a9:24:0c:51:e0:a7:2d:21:44:
                    13:b1:21:46:d1:3f:a0:87:3b:9e:ad:e2:c6:00:1f:
                    2d:51:14:94:11:71:6d:fd:48:66:be:eb:0e:56:b6:
                    54:4e:e7:a8:14:c4:8b:b3:7f:f5:73:45:6c:0f:49:
                    62:b1:1f:a0:43:c6:88:2a:04:0f:77:f8:d3:bb:23:
                    f8:25:d0:79:bf:24:b9:6a:3e:74:1e:85:fb:6b:76:
                    c2:63:d5:00:29:93:2e:0c:b7:0d:32:ff:82:d7:54:
                    71:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:89:DC:87:66:8C:AC:D1:D4:57:51:B6:46:B2:D7:C2:41:11:C5:AA
            X509v3 Authority Key Identifier:
                keyid:62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:92:09:52:9c:6d:8d:26:6e:d5:ee:d9:c2:26:9c:38:47:fc:
         d2:37:92:a2:39:d7:99:98:f0:f1:4a:e6:9a:57:b0:bc:8b:f7:
         8f:a7:5d:f7:e1:77:c4:1c:41:f0:09:ac:d6:53:52:cc:87:44:
         e4:4c:ab:4b:e1:ca:3a:e7:bf:19:6b:70:65:77:a5:fe:8c:5f:
         78:87:66:85:42:50:36:4e:0c:4c:c8:ba:6b:57:c0:4c:f1:86:
         10:3e:2d:03:f0:b4:e4:2b:69:25:a5:a9:76:cc:f4:75:39:d1:
         44:d6:bd:8a:b7:46:7c:5e:4c:ed:cd:59:b7:1a:a9:c6:36:8a:
         63:94:5a:81:6b:74:6c:67:ee:28:4d:75:73:ee:8e:d9:5f:54:
         d7:3c:7a:4c:45:c1:b2:8e:82:3c:c1:06:a5:bf:af:d2:37:85:
         5b:16:0d:fe:4f:5c:75:73:bf:bd:a8:cd:7d:18:47:f4:da:c7:
         ba:60:b1:cb:b6:c1:9d:25:2e:41:ee:35:b6:09:1c:bd:fb:2a:
         3c:25:c0:f3:aa:e8:e3:2b:40:4f:31:cd:81:62:93:1b:fb:6c:
         70:d8:a9:ee:22:17:a5:39:ca:2b:06:d6:e6:ef:b8:b0:6c:ca:
         70:18:24:8d:60:49:72:1c:67:cf:0d:1e:bc:d6:31:2c:d4:ab:
         6b:cb:79:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:07:31 2026 by rpki-client