Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
File:                     maykAWr4XVlpVITNYTzxiW39WaE.mft (raw, json)
Hash identifier:          KvGxLhu6EPCTrTs7QE/9ILW0/K2SAlyk1bJkpHM3XNo=
Subject key identifier:   51:7C:B8:6C:5C:E6:20:B8:9B:89:13:71:E8:B7:D8:79:23:D7:0D:ED
Authority key identifier: 99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
Certificate issuer:       /CN=99aca4016af85d59695484cd613cf1896dfd59a1
Certificate serial:       019D22F003241244762F25B044339BC4EAB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
Manifest number:          0699
Signing time:             Wed 25 Mar 2026 03:00:47 +0000
Manifest this update:     Wed 25 Mar 2026 03:00:47 +0000
Manifest next update:     Thu 26 Mar 2026 03:00:47 +0000
Files and hashes:         1: WXXJ5075ZAff04RmS5smR110RVw.roa (hash: uErB5MACpy/J873DH0P3yHm3DQt+fz1WVOuw3Q44104=)
                          2: maykAWr4XVlpVITNYTzxiW39WaE.crl (hash: x2B5hHICcMg9aurqFp0vYpRLmvwflnjc/M31NSd3qU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:22:f0:03:24:12:44:76:2f:25:b0:44:33:9b:c4:ea:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99aca4016af85d59695484cd613cf1896dfd59a1
        Validity
            Not Before: Mar 25 03:00:47 2026 GMT
            Not After : Mar 26 03:00:47 2026 GMT
        Subject: CN=517cb86c5ce620b89b891371e8b7d87923d70ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:79:80:04:51:b3:a3:d1:aa:47:29:5d:c3:96:
                    01:3a:7e:7d:4f:9e:fd:58:48:3e:c1:64:ee:e2:65:
                    5f:3c:45:cb:f8:4f:56:7d:10:ef:ed:e6:a8:24:16:
                    4d:93:37:5b:81:b0:64:b7:88:40:b2:2b:9d:68:c7:
                    30:dd:10:a4:92:24:5c:a7:f1:ab:79:db:a2:b6:b5:
                    3a:3a:f0:e2:6b:bf:6a:35:9a:d6:56:f0:dc:70:5d:
                    b4:9d:32:60:df:58:93:6a:8f:e7:08:cd:3c:61:cc:
                    4b:69:9e:1b:de:ac:67:28:3e:9a:75:cc:24:a7:a1:
                    df:32:af:42:13:32:2c:05:00:1a:42:60:78:b2:e6:
                    23:8a:dd:91:9b:71:84:0a:87:48:d0:f1:1f:ed:c3:
                    ab:57:65:51:e0:dc:e8:4f:c6:91:bb:5d:97:5c:e9:
                    89:31:44:3e:0c:24:c1:9d:7a:d0:4d:6b:ac:06:74:
                    48:e8:60:75:4d:a7:f9:cd:72:6e:6e:e4:cf:00:1c:
                    6c:a4:fc:f8:db:31:67:89:8e:10:fe:91:bf:a6:b6:
                    0e:88:47:53:ac:71:85:a8:ed:24:45:d5:d7:cc:80:
                    ba:a2:ee:95:b9:89:23:e0:ba:f4:d9:41:32:7e:cb:
                    18:b0:b6:5a:c0:99:6b:bc:42:94:86:47:1b:98:f6:
                    cc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7C:B8:6C:5C:E6:20:B8:9B:89:13:71:E8:B7:D8:79:23:D7:0D:ED
            X509v3 Authority Key Identifier:
                keyid:99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:44:0b:e9:b9:b0:94:8f:56:c1:75:d7:38:a8:6e:14:23:da:
         d4:f6:6d:76:af:53:e6:fe:72:2c:04:ae:99:6e:07:90:41:6d:
         6d:f1:20:5c:d7:25:99:8e:fa:22:7f:9b:6a:3a:03:36:1b:d5:
         7f:27:aa:f3:c8:f3:4f:99:4c:56:a1:33:75:88:48:de:96:eb:
         79:7a:08:15:fc:fe:63:63:a8:40:6d:12:fc:a0:b9:92:93:10:
         54:6c:9a:a2:56:34:f3:d1:aa:2c:47:36:62:72:50:af:94:a6:
         8d:b6:f3:c9:ea:fa:3a:ab:47:40:d6:2c:f6:68:d9:8d:c0:2d:
         b7:fa:e5:06:ed:92:aa:84:5c:a4:a1:02:f5:e9:9c:1a:2a:71:
         e2:17:f4:7d:1a:9a:82:da:fd:b7:4c:78:37:4c:8b:8e:6a:30:
         b4:79:51:6d:89:f7:66:36:ac:4d:b0:33:4c:d7:01:8e:fa:70:
         14:0f:9f:6d:7e:44:09:3c:e7:b8:f6:79:77:8e:49:92:cc:8d:
         06:73:d0:c5:c3:a5:30:c9:e7:91:79:91:80:90:41:b6:83:94:
         7b:cb:c3:f1:1e:23:9a:36:1b:6d:a2:08:e4:f5:0a:49:01:6f:
         c8:d9:f6:e8:a3:dc:46:ac:b0:fe:e9:05:be:3c:58:75:a1:60:
         18:7e:66:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 09:48:35 2026 by rpki-client