Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
File:                     rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft (raw, json)
Hash identifier:          6rDFoKjBJ0EdHArecmc/kI4hnjw2iFHznHnHPuYJXuc=
Subject key identifier:   21:7F:76:88:77:6F:90:F3:99:58:20:0B:C0:10:A5:F2:5E:0C:A1:73
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Certificate issuer:       /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial:       019CE5914F17CC60B3EF27964DCCED8CB28B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
Manifest number:          186D
Signing time:             Fri 13 Mar 2026 05:00:31 +0000
Manifest this update:     Fri 13 Mar 2026 05:00:31 +0000
Manifest next update:     Sat 14 Mar 2026 05:00:31 +0000
Files and hashes:         1: 1DSUQ0jxs6dG0EoFqfG91mFQyMw.roa (hash: iINHWWjQ7Nsnh6T5r2HUf93qqcUOuSqMNkps61w8OX0=)
                          2: BdsuDRm80ULk9aLfJ7zh20INiU8.roa (hash: 0BqcT0T81e3M/0LPrL5e9ii3yguHiKnmLWj00gesJkU=)
                          3: KLak6E7XOaljYL7i0cSZlIlCEqg.roa (hash: mJGksFMnjfzfVrg/g8a4mJkgqFzUtmtGPX7OdhiTIDg=)
                          4: VSskXdqgKe7CaDWuoatQnI_9KiE.roa (hash: ZdbXSqyDrBgEKdzaBPZgWnFmAfBPFOOQn34nK2NZEnk=)
                          5: rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl (hash: 3rGTkU1a4a7xu1fyx40rBu5Anj679USgjiYEi8/2oho=)
                          6: vPgoZptW0KavIK_Hg1kzkfOF1WE.roa (hash: j7J2y1HSuKj72l6kVGUrAtD78gxcoUd5XdyBbZEybuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:91:4f:17:cc:60:b3:ef:27:96:4d:cc:ed:8c:b2:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
        Validity
            Not Before: Mar 13 05:00:31 2026 GMT
            Not After : Mar 14 05:00:31 2026 GMT
        Subject: CN=217f7688776f90f39958200bc010a5f25e0ca173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d7:44:d6:81:80:6c:e7:ea:0a:98:8b:39:f2:
                    83:3a:5f:8e:c0:a8:8c:35:34:94:44:e1:75:44:f0:
                    4f:1f:f3:4c:f8:e4:c4:0c:0d:48:51:1a:5c:10:71:
                    a2:f6:bc:18:1d:35:f2:22:c5:09:34:1d:0d:b8:e0:
                    05:4d:f6:38:6b:83:cf:bb:ae:e4:f0:59:83:f7:1c:
                    d1:80:c9:6a:47:40:65:6d:8e:26:41:5d:57:9d:50:
                    9b:4f:26:ae:ca:09:cd:2d:1d:34:c3:88:b0:cf:ed:
                    26:09:76:ad:88:1a:88:82:7f:45:a6:d8:f0:c8:f0:
                    cb:fe:9a:44:34:57:75:93:38:38:53:f7:39:dd:a5:
                    a0:13:cd:82:5b:49:28:36:d1:d6:ac:58:61:6b:d8:
                    bc:bc:54:31:26:6c:69:5b:7e:5a:0c:21:58:10:2b:
                    c1:12:ab:01:2c:58:9a:b6:ba:74:92:96:d3:aa:34:
                    72:6d:7d:e2:9a:e1:f2:e6:93:67:e9:f8:09:31:1c:
                    52:10:24:ec:a2:01:01:df:da:d7:ba:cd:ab:4b:49:
                    92:94:a8:01:13:b2:6c:3f:e7:e9:9a:44:c8:94:d9:
                    85:97:5c:c7:f2:07:c7:ec:ec:64:c8:ce:a5:76:17:
                    86:c3:66:af:76:68:11:ed:b2:18:9f:ff:50:00:29:
                    46:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7F:76:88:77:6F:90:F3:99:58:20:0B:C0:10:A5:F2:5E:0C:A1:73
            X509v3 Authority Key Identifier:
                keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:20:82:94:42:98:a0:d6:bf:b9:15:58:74:0b:07:89:8f:27:
         b6:03:c1:13:27:23:a0:69:bf:3e:2b:a2:8e:23:61:bf:74:51:
         e0:69:aa:6b:fc:85:0f:8e:5c:8b:d9:b6:08:d8:bd:cc:93:35:
         c8:9a:da:c4:96:51:ff:19:8f:44:93:ff:e1:9b:43:30:23:db:
         ea:9a:a4:d4:01:9f:9d:55:77:ed:a5:d6:8d:7d:e2:b4:4d:7e:
         f8:cd:73:94:74:0e:3d:07:ca:a7:16:9c:40:a8:b6:7c:a5:7d:
         70:ce:db:05:f0:99:30:48:2e:ef:b9:49:cf:9b:ee:91:3e:ff:
         93:3b:a7:c4:ef:7c:08:97:dd:43:78:d7:ec:e0:6e:1e:a0:5f:
         7d:29:d6:16:de:a1:c3:2d:ef:39:a8:09:9f:9e:1a:fa:39:9b:
         96:5e:c8:b6:fb:45:f3:e4:48:0f:94:69:35:25:f4:16:29:d1:
         55:9e:89:bc:ef:76:0f:a6:73:83:e7:65:c8:b8:72:0a:ba:e0:
         1b:93:e7:22:2c:a3:a4:58:85:26:db:6f:cc:81:96:3b:2e:21:
         a2:6a:a0:12:1c:3d:9a:5f:d3:3e:9b:81:e0:6e:3f:95:b7:b1:
         ed:8f:99:34:76:7b:fd:4b:a0:3e:0a:d9:bd:85:3f:53:d6:e6:
         3a:87:53:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:45:35 2026 by rpki-client