Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft
File:                     yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft (raw, json)
Hash identifier:          2zcfZpUqNRnAlCh4PKyCBCtxWlOV51eiC3ELU9nd+7Q=
Subject key identifier:   B0:87:63:A7:EA:9E:AE:44:BB:B1:6D:33:72:5D:74:62:FC:0D:41:90
Authority key identifier: C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A
Certificate issuer:       /CN=c83c4c9d2fce61665165c05a101e815047b64f6a
Certificate serial:       019D3789639F2ADA0C553A3846121BEF00A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft
Manifest number:          0822
Signing time:             Sun 29 Mar 2026 03:00:43 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:43 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:43 +0000
Files and hashes:         1: KO5O23gejTKwTsZBDSCos8cKKa0.roa (hash: 5r7rarpuE2p/gSB/Pi8UtJYwr7G/QPULfTLWSJ5jkjg=)
                          2: yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl (hash: fFyiaQXUQ8DqpscwO6w00ABBXGOTU61DPcHxkzBS1/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:63:9f:2a:da:0c:55:3a:38:46:12:1b:ef:00:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c83c4c9d2fce61665165c05a101e815047b64f6a
        Validity
            Not Before: Mar 29 03:00:43 2026 GMT
            Not After : Mar 30 03:00:43 2026 GMT
        Subject: CN=b08763a7ea9eae44bbb16d33725d7462fc0d4190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c0:01:4d:47:00:b2:6f:5d:ec:63:17:76:5c:
                    74:c8:7e:b6:be:7d:a5:b4:23:fd:52:82:50:db:3a:
                    73:f7:c6:29:7a:5a:92:b7:44:ff:d6:61:9d:b7:4e:
                    c5:9e:8c:83:cf:90:c8:26:86:1d:c4:34:ac:14:6d:
                    3d:3b:ec:00:55:c0:a9:18:0d:30:54:e0:f1:cf:98:
                    6d:67:f9:7d:49:61:32:48:fa:25:42:de:39:f1:a9:
                    70:31:86:df:dc:0e:f5:48:4d:69:e2:61:a7:3e:ed:
                    46:6c:8d:1e:8b:ff:95:30:b3:b6:03:4b:df:82:ce:
                    f1:40:41:57:8a:ef:86:de:14:51:44:e6:43:a4:3d:
                    d2:68:e7:0f:67:9a:b6:a5:fc:01:a4:da:50:a3:18:
                    aa:c2:72:fe:82:3e:f6:0d:2f:10:ef:e8:97:2d:5b:
                    84:03:a6:6d:1a:25:59:73:c4:12:c7:85:e1:4f:57:
                    d6:ee:2d:40:b1:dd:39:87:0e:46:a5:86:bb:9e:61:
                    f6:cc:f2:39:46:1f:3e:7a:9f:8c:aa:1f:8d:46:ac:
                    29:76:fc:34:c4:80:fc:25:f2:ba:f0:49:34:d7:3a:
                    2f:55:e1:71:2e:75:c8:1c:0b:77:bf:0e:eb:15:4f:
                    61:94:82:93:3c:ab:dd:53:f2:5f:06:13:65:22:66:
                    db:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:87:63:A7:EA:9E:AE:44:BB:B1:6D:33:72:5D:74:62:FC:0D:41:90
            X509v3 Authority Key Identifier:
                keyid:C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:a1:af:86:ac:81:15:d4:f2:46:66:85:cb:50:dd:8f:40:bf:
         25:bd:03:c0:53:8e:a4:cb:60:94:58:4d:03:3e:7d:25:f0:36:
         69:de:85:8f:f5:92:2d:3a:9a:eb:62:0c:89:e0:96:a3:27:05:
         ca:de:46:3c:74:09:99:89:f2:bb:7e:c4:74:47:73:d6:b9:ff:
         fa:66:09:4f:c6:09:56:8a:99:8d:bc:85:33:7e:6d:9d:f0:2e:
         41:bd:8e:c5:fe:5e:dd:c1:46:10:8b:c6:ec:82:8f:9a:6c:f3:
         d8:3d:70:d2:0a:e2:29:53:f7:53:ec:a3:67:ed:55:7a:fd:2b:
         21:fe:ba:62:bc:46:6f:b2:83:df:9d:da:5e:d1:cd:92:d5:3d:
         e6:9c:b8:b2:64:77:d4:9d:ac:4e:0b:cd:cf:c4:23:1a:9e:f6:
         0b:64:1a:05:f6:40:00:b4:dc:71:93:f5:e2:0b:6d:80:12:0a:
         8d:78:4e:6d:3e:fb:aa:03:51:f1:8f:ae:b5:fe:1a:29:56:0e:
         ed:0e:6d:b0:b0:aa:23:16:44:5c:5b:c4:0c:e7:f5:b2:77:7d:
         62:20:42:5e:3d:12:06:25:c8:1a:7e:ba:d6:22:75:c8:2b:4a:
         85:f0:9a:df:5b:5c:10:5b:07:81:45:c7:75:cb:a9:7d:89:86:
         12:db:41:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iWOfKtoMVTo4RhIb7wCpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4M2M0YzlkMmZjZTYxNjY1MTY1YzA1YTEwMWU4MTUwNDdi
NjRmNmEwHhcNMjYwMzI5MDMwMDQzWhcNMjYwMzMwMDMwMDQzWjAzMTEwLwYDVQQD
EyhiMDg3NjNhN2VhOWVhZTQ0YmJiMTZkMzM3MjVkNzQ2MmZjMGQ0MTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8ABTUcAsm9d7GMXdlx0yH62vn2l
tCP9UoJQ2zpz98YpelqSt0T/1mGdt07FnoyDz5DIJoYdxDSsFG09O+wAVcCpGA0w
VODxz5htZ/l9SWEySPolQt458alwMYbf3A71SE1p4mGnPu1GbI0ei/+VMLO2A0vf
gs7xQEFXiu+G3hRRROZDpD3SaOcPZ5q2pfwBpNpQoxiqwnL+gj72DS8Q7+iXLVuE
A6ZtGiVZc8QSx4XhT1fW7i1Asd05hw5GpYa7nmH2zPI5Rh8+ep+Mqh+NRqwpdvw0
xID8JfK68Ek01zovVeFxLnXIHAt3vw7rFU9hlIKTPKvdU/JfBhNlImbbDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCHY6fqnq5Eu7FtM3JddGL8DUGQMB8GA1UdIwQY
MBaAFMg8TJ0vzmFmUWXAWhAegVBHtk9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUR4TW5TX09ZV1pSWmNCYUVCNkJVRWUyVDJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NzQ0MDgtNDE2My00ZTdlLWFhYjkt
NDJlZjMzYTI2ZTY2LzEveUR4TW5TX09ZV1pSWmNCYUVCNkJVRWUyVDJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS82NzQ0MDgtNDE2My00ZTdlLWFhYjktNDJlZjMzYTI2ZTY2
LzEveUR4TW5TX09ZV1pSWmNCYUVCNkJVRWUyVDJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6GvhqyB
FdTyRmaFy1Ddj0C/Jb0DwFOOpMtglFhNAz59JfA2ad6Fj/WSLTqa62IMieCWoycF
yt5GPHQJmYnyu37EdEdz1rn/+mYJT8YJVoqZjbyFM35tnfAuQb2Oxf5e3cFGEIvG
7IKPmmzz2D1w0griKVP3U+yjZ+1Vev0rIf66YrxGb7KD353aXtHNktU95py4smR3
1J2sTgvNz8QjGp72C2QaBfZAALTccZP14gttgBIKjXhObT77qgNR8Y+utf4aKVYO
7Q5tsLCqIxZEXFvEDOf1snd9YiBCXj0SBiXIGn661iJ1yCtKhfCa31tcEFsHgUXH
dcupfYmGEttBzw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:08 2026 by rpki-client