Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
File:                     ygBGolNBzREDtgzOC5nqN1S6XEE.mft (raw, json)
Hash identifier:          5Ynd1vpyX6W/uQQKbbJ09Ba0Jm0i1Ham9oMdplBEwnc=
Subject key identifier:   E5:46:D0:AD:60:7A:B8:B7:44:A5:D3:78:44:28:60:F6:E5:54:37:93
Authority key identifier: CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41
Certificate issuer:       /CN=ca0046a25341cd1103b60cce0b99ea3754ba5c41
Certificate serial:       019CE44873EE6A1A2F684CEB18F153B93E06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
Manifest number:          055D
Signing time:             Thu 12 Mar 2026 23:01:19 +0000
Manifest this update:     Thu 12 Mar 2026 23:01:19 +0000
Manifest next update:     Fri 13 Mar 2026 23:01:19 +0000
Files and hashes:         1: stNqzIw6qQRyW22hrj_jya1vgPM.roa (hash: R7iZW3oZGdaZLmvsasGhYvRkXeTvpYwH54Of8otwpTw=)
                          2: ygBGolNBzREDtgzOC5nqN1S6XEE.crl (hash: Huc5OsG3F597TGkTtR2lzlVeR3+hwvdCfJy/4ZSfGfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:48:73:ee:6a:1a:2f:68:4c:eb:18:f1:53:b9:3e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca0046a25341cd1103b60cce0b99ea3754ba5c41
        Validity
            Not Before: Mar 12 23:01:19 2026 GMT
            Not After : Mar 13 23:01:19 2026 GMT
        Subject: CN=e546d0ad607ab8b744a5d378442860f6e5543793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:13:cf:c2:bd:01:f8:1f:ae:63:06:2c:68:d7:
                    d6:2e:46:8b:05:d5:34:64:74:31:f2:60:68:a7:d3:
                    d7:1b:76:23:65:65:5a:5b:c5:60:2a:60:fd:b3:66:
                    9a:a7:1f:fb:c9:7a:b0:af:97:23:1c:33:d6:ac:7d:
                    fc:79:89:36:a5:43:15:00:27:6a:1c:07:38:ca:48:
                    32:a0:46:55:1b:c3:82:e1:e3:19:c1:c5:c3:ef:cf:
                    4a:b5:2a:3a:4e:1e:6e:50:24:24:a4:eb:9e:6d:39:
                    b6:15:f9:ec:56:0e:6c:87:70:f7:ab:99:5f:ff:3c:
                    76:86:36:1c:56:a1:c3:d6:6d:73:04:5f:8f:5f:be:
                    1b:5c:50:b4:49:c3:6d:8e:6b:2c:83:4b:11:41:d6:
                    dd:9f:bd:35:23:05:8c:27:bf:64:16:cb:52:ed:c3:
                    c7:4e:ea:86:ec:f7:e7:de:5e:f8:2b:c2:35:5a:d8:
                    f8:bf:65:90:61:49:48:e1:9e:71:32:d5:67:31:be:
                    2d:2f:1f:9b:59:b0:7d:e2:40:85:ca:c4:b4:07:4a:
                    98:9b:05:f7:f5:ed:af:9e:00:65:54:06:64:55:62:
                    51:a6:f5:ab:d7:29:90:9e:53:65:1d:ec:01:03:2e:
                    f4:d2:eb:ff:da:65:c4:1e:48:c6:4d:b1:e8:d1:58:
                    95:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:46:D0:AD:60:7A:B8:B7:44:A5:D3:78:44:28:60:F6:E5:54:37:93
            X509v3 Authority Key Identifier:
                keyid:CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:a6:dd:73:ae:7b:cf:4d:3f:e4:84:18:22:e0:66:a1:3f:bc:
         5a:72:23:5c:39:1c:0b:df:47:49:e2:a7:b2:3d:b3:a7:47:4f:
         68:36:b7:e7:74:01:29:c1:c4:fd:30:89:34:73:16:eb:77:be:
         d5:0f:42:c8:0c:85:cc:1e:28:4a:cd:aa:40:70:0b:dc:3b:35:
         9d:30:e6:99:99:e8:67:b4:43:10:15:ce:15:f3:b4:b5:5c:58:
         b2:de:6b:2b:78:e3:44:f6:ba:46:4d:99:ae:ba:f8:59:00:ec:
         8a:e9:a8:4d:68:df:e9:1b:3b:d5:2f:79:0f:04:aa:79:b6:83:
         18:c0:dc:43:31:ed:b8:a2:f3:2d:07:4f:6f:fc:63:35:4e:c6:
         46:61:76:5e:7d:89:3a:ea:7e:ad:38:39:39:0c:c5:2a:0f:f9:
         5c:bd:29:ac:b4:59:0a:0e:12:37:4d:c8:a8:28:ac:93:37:f3:
         81:7f:95:17:20:c6:10:30:42:58:fc:d2:be:a6:65:3b:4d:20:
         79:53:a0:19:39:d0:55:2f:f9:d5:99:ce:16:cd:fa:37:5b:0c:
         f3:33:3f:b9:be:77:ed:5b:12:ca:26:a7:7f:64:f4:a1:24:8f:
         14:50:4c:4b:58:ab:55:bb:fe:2e:1a:c1:0f:01:af:c7:c2:27:
         be:af:00:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:48:41 2026 by rpki-client