Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
File:                     M1ylITYiJtA8GCkAPYHUmKqDjzM.mft (raw, json)
Hash identifier:          0sKYxMkhseWK1fa3CfxjlLRuQzyFBNZsmexDAyZNObM=
Subject key identifier:   AC:62:9E:A0:0E:1B:91:AC:01:F0:5A:C8:94:E8:E0:F9:65:40:11:AF
Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
Certificate issuer:       /CN=335ca521362226d03c1829003d81d498aa838f33
Certificate serial:       019CE937B3A09AC8362A5FC85EBF425EE9D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
Manifest number:          11EA
Signing time:             Fri 13 Mar 2026 22:01:07 +0000
Manifest this update:     Fri 13 Mar 2026 22:01:07 +0000
Manifest next update:     Sat 14 Mar 2026 22:01:07 +0000
Files and hashes:         1: 9aA3iLX_dTChIPCO6PgksQti4b4.roa (hash: fqGRMmb2kUR03lGLsFWhMcKnX+bdih5acXmK3pBtYbE=)
                          2: Exg0UvgeAfe-AZQtA_LavkNZKKU.roa (hash: gKA++u4Fw/ljBBOhyevOEbxsqlYiJYqc2cMPG6ua8TU=)
                          3: M1ylITYiJtA8GCkAPYHUmKqDjzM.crl (hash: r3FwUSyfFbQdpnoLQDJaFYhxQPfcq/M0REJ5dYnAkjI=)
                          4: XvuMMh6_b9Q_-y9zoflvfhhJ8cU.roa (hash: arKO35haYoOypMHOByST819307xwbCJtuXRuiew9430=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 18:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e9:37:b3:a0:9a:c8:36:2a:5f:c8:5e:bf:42:5e:e9:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=335ca521362226d03c1829003d81d498aa838f33
        Validity
            Not Before: Mar 13 22:01:07 2026 GMT
            Not After : Mar 14 22:01:07 2026 GMT
        Subject: CN=ac629ea00e1b91ac01f05ac894e8e0f9654011af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:02:0f:d9:f7:b0:d9:5a:dd:2b:7f:ec:ea:6d:
                    0b:f2:67:47:74:af:5d:69:14:7c:e4:5b:9b:d3:ce:
                    13:96:5d:51:b7:0a:a5:ae:29:2b:59:28:48:40:e1:
                    7d:0e:84:97:f5:36:a5:31:f7:87:14:6c:f9:1f:bf:
                    12:50:f6:2c:1c:4c:a8:55:27:a5:c2:f9:cb:e8:f9:
                    92:e1:9b:82:d5:ba:7d:4f:6b:64:94:39:20:81:dc:
                    9b:f7:ce:c1:a7:ed:b6:f3:47:33:31:2a:59:53:35:
                    b6:45:ed:81:0d:0c:ba:b0:a7:2c:13:c1:08:f1:71:
                    7e:63:87:76:0b:59:a2:38:95:a2:08:fe:95:79:9f:
                    e6:9f:0c:31:2c:22:c8:13:4e:78:5f:1a:0c:bd:1f:
                    13:4f:1f:b5:79:97:19:73:82:4f:7a:a6:53:e7:89:
                    05:7e:b0:ee:50:7c:c8:cb:8b:06:a2:19:c1:ed:45:
                    fe:c1:f9:04:36:d2:79:8b:8c:b8:2e:de:0f:90:16:
                    06:30:c6:7a:4a:68:71:b1:8f:bd:1c:35:50:9e:22:
                    5e:9a:44:75:39:3a:19:f5:a9:f1:ef:1c:8e:be:39:
                    da:d2:a1:74:0b:27:11:e9:fc:db:fc:c5:e8:e7:96:
                    e0:c2:21:cd:dc:2c:7f:83:70:8d:56:a9:58:60:3e:
                    1d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:62:9E:A0:0E:1B:91:AC:01:F0:5A:C8:94:E8:E0:F9:65:40:11:AF
            X509v3 Authority Key Identifier:
                keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:92:e9:f2:03:43:52:ee:fb:fe:20:22:36:59:16:99:75:c9:
         70:91:f7:5c:16:de:7b:d6:8f:a3:cb:c9:38:58:8d:ea:12:73:
         e0:be:d4:23:28:80:c3:4b:c5:b5:24:96:dd:21:e7:7b:ae:31:
         cc:ac:04:58:d1:13:75:ce:40:12:85:d4:48:ad:1a:c5:d9:ba:
         0d:40:3e:70:69:67:e0:46:8e:b0:28:f1:ee:da:88:09:f0:d2:
         09:ec:dd:47:69:dc:b6:0b:76:e8:b4:c5:17:c7:eb:6d:d0:83:
         7c:ad:0c:25:85:f1:c9:8d:b9:40:6d:fc:fc:ba:99:e4:8f:a5:
         5e:cd:08:5b:c6:27:d7:3e:1d:f2:ea:ba:f2:be:51:3a:a5:3d:
         af:cb:21:fd:51:79:30:1c:b4:f5:c8:75:0b:23:09:36:2d:04:
         d7:f9:66:f7:8c:29:87:e0:b1:5a:a0:7e:32:be:cb:d5:e1:06:
         19:91:53:15:64:4f:10:7d:d1:b8:99:a2:14:a7:1c:1b:0e:3e:
         2b:e2:5d:f4:b5:09:4b:ab:57:a1:0f:f4:7e:75:67:45:1a:96:
         75:87:69:5c:7b:fd:b4:d5:2c:9a:d8:ef:34:c8:33:ac:86:e1:
         80:5b:61:3c:41:46:cd:97:ea:cf:c9:c2:8f:be:cc:ce:e5:28:
         54:50:c7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 03:26:04 2026 by rpki-client