Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
File:                     bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft (raw, json)
Hash identifier:          qBWio2Z+Oh3WLOxfg+iLwW7yZlvUAiiVOCF6+UEJfpA=
Subject key identifier:   1D:60:6D:61:5D:D5:4E:73:5A:7E:DF:6F:24:E8:95:3B:FE:85:E7:CF
Authority key identifier: 6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
Certificate issuer:       /CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Certificate serial:       019D3A5371D6C6B24CC67D3C24B351A82B90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
Manifest number:          15AB
Signing time:             Sun 29 Mar 2026 16:00:40 +0000
Manifest this update:     Sun 29 Mar 2026 16:00:40 +0000
Manifest next update:     Mon 30 Mar 2026 16:00:40 +0000
Files and hashes:         1: bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl (hash: gGjx4d/RlWEtd+g/Qud9sNTjO2Gze3YZmrO/Y7vvyss=)
                          2: kWBcLWbBpgxkDI6iP43AMVT02QQ.roa (hash: DhH8TmZUljkPYNL8msm1EY1T9GfinFMyYlzEgVbaeXM=)
                          3: n1DMRdKzm8oeQmtnP_k6lYoYRn4.roa (hash: CzHWxSnIwKSP4ZEcY55YGCHA51157aAGFagW8+Jl+6s=)
                          4: yNfD365-tXOpusJAZY2aazsc3UA.roa (hash: OKJa0B2w6ILG8VVTp6yanFtDn08u3rnQfhZF1PqwyYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:53:71:d6:c6:b2:4c:c6:7d:3c:24:b3:51:a8:2b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
        Validity
            Not Before: Mar 29 16:00:40 2026 GMT
            Not After : Mar 30 16:00:40 2026 GMT
        Subject: CN=1d606d615dd54e735a7edf6f24e8953bfe85e7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:27:b8:2d:e7:58:c3:2d:e8:8e:73:b7:c5:0b:
                    3a:9c:51:73:cf:78:f8:33:ce:f7:6b:95:bf:50:61:
                    24:93:43:6d:c9:40:98:f9:5b:ad:6d:f8:83:29:04:
                    26:c7:36:82:6b:49:38:2c:d5:8c:91:2a:08:7e:e8:
                    89:30:ed:16:fb:e0:b4:88:ed:9a:89:52:38:2b:65:
                    94:a1:16:08:df:c7:ea:2c:e6:2e:11:94:b3:fd:62:
                    a2:64:c3:bc:56:b8:78:8f:d1:39:c6:cb:12:36:f2:
                    fc:f8:3a:0c:17:19:66:b1:3a:e8:8d:38:2b:d6:18:
                    cb:cf:38:22:ea:ee:bf:68:da:78:2e:d4:a8:83:91:
                    93:e6:19:7a:2c:99:4f:7d:06:a9:b4:71:43:c9:74:
                    7f:fc:e7:16:bc:64:70:f6:b6:70:f5:77:11:bc:c9:
                    49:28:73:34:16:6a:06:db:91:c3:07:dd:ca:04:dd:
                    23:e9:b7:68:c0:65:46:de:22:6e:62:46:7e:6a:fd:
                    b9:c7:a3:6e:4f:f6:94:62:33:ad:2f:58:90:be:28:
                    fd:4d:b3:6c:e7:a1:6c:4a:d4:2d:89:dc:1a:3a:23:
                    43:44:f1:88:fd:eb:ec:9b:40:41:c8:e3:47:3c:ba:
                    ea:50:f6:c7:b8:69:a4:09:02:1f:0f:73:cf:6f:99:
                    f2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:60:6D:61:5D:D5:4E:73:5A:7E:DF:6F:24:E8:95:3B:FE:85:E7:CF
            X509v3 Authority Key Identifier:
                keyid:6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:8a:9b:36:74:af:ad:c3:2c:a4:fd:17:19:1d:22:ad:6f:d3:
         48:bb:4c:59:cd:c4:c7:06:74:f7:57:55:08:30:9e:d0:18:0c:
         8a:24:2e:26:d8:65:eb:a0:dc:03:5c:b2:fa:dc:bf:59:8b:cc:
         9b:3c:7b:4f:3b:78:f1:eb:e0:39:15:44:3a:09:b4:1c:fa:95:
         da:9e:6e:45:3b:66:33:35:f6:5b:27:b5:fa:84:77:82:a4:f1:
         6b:7f:b3:38:ec:8b:97:6a:d2:25:3f:45:38:df:75:97:ad:a6:
         68:eb:6f:8e:8f:56:37:d9:0d:39:c8:08:12:09:33:43:47:aa:
         73:ae:26:5d:3e:4e:8c:ed:6f:1b:ca:b6:e7:8b:c8:5b:44:3a:
         13:43:a7:95:02:0f:b8:8f:cd:19:71:e6:b8:f8:29:bb:3b:9f:
         b2:4a:d9:f7:f0:3a:db:31:fe:eb:95:a9:c7:03:c7:6c:40:a4:
         56:77:19:fd:ba:fa:65:05:64:e5:be:e1:3b:02:47:4b:50:8c:
         34:ed:b3:69:6d:fd:75:32:a5:34:e1:8d:16:e6:f3:c8:ed:34:
         db:28:a5:71:be:73:05:ae:0a:77:c4:c8:bb:e2:8f:1b:67:51:
         97:1e:24:cb:2f:a3:72:e4:42:f9:30:6e:ee:d3:61:43:e8:57:
         c7:51:5f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:12 2026 by rpki-client