Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
File:                     YDJcIdL6_nQzmNweVXRDMoARBGk.mft (raw, json)
Hash identifier:          aVVres1FnbZvyFMX4MSqPbF73cw5cxD4QSVG2gZEAso=
Subject key identifier:   22:DE:17:DC:44:AC:07:22:F0:C6:95:91:B5:1B:4B:DD:18:CE:76:FF
Authority key identifier: 60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
Certificate issuer:       /CN=60325c21d2fafe743398dc1e5574433280110469
Certificate serial:       019D3866905D3CAA3A5B6FF87B402EC3D30D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
Manifest number:          1741
Signing time:             Sun 29 Mar 2026 07:02:18 +0000
Manifest this update:     Sun 29 Mar 2026 07:02:18 +0000
Manifest next update:     Mon 30 Mar 2026 07:02:18 +0000
Files and hashes:         1: YDJcIdL6_nQzmNweVXRDMoARBGk.crl (hash: Kh05997kGCQu6MhWAgPWp6S+nEB5XTomhm08J+wS0rw=)
                          2: ZGMDMaaeutNnkXyJL58734MtHlg.roa (hash: Zs6W0mlBy5j5neBEaMNbSPEex6wUKIOiG0C8/ZE4ktw=)
                          3: b5JaXMr4GIBvT4KCIP7BI-wUSZI.roa (hash: vRg65JmrVs2QhtYFXLwraN6iw4o7UcfzdNjLDeVLhok=)
                          4: jKshf8wnc15011tXTFSj3TTXJFA.roa (hash: K6mzJUE9dYVEi81Gnv2fYao7OX/tyLrwWkjFdI+z8Z0=)
                          5: qPyrPHOcj4AsJ76uDNoQbJBu-3A.roa (hash: icQiWI2POs5a9KmLU/wFkbzLvsrXEhv8Owk5IzrA7+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:90:5d:3c:aa:3a:5b:6f:f8:7b:40:2e:c3:d3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60325c21d2fafe743398dc1e5574433280110469
        Validity
            Not Before: Mar 29 07:02:18 2026 GMT
            Not After : Mar 30 07:02:18 2026 GMT
        Subject: CN=22de17dc44ac0722f0c69591b51b4bdd18ce76ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5e:68:5e:59:a6:d6:58:9d:51:56:1b:75:cd:
                    c3:73:62:8b:a2:e6:6a:d8:ef:6a:50:46:2c:cd:99:
                    a9:d9:90:61:b4:42:a1:81:08:9b:d3:7d:2c:80:38:
                    db:f4:0a:ad:2e:50:b0:c1:07:ad:fe:1b:d0:ff:66:
                    96:1e:f7:2c:1c:35:60:e5:39:0f:05:e2:ae:be:2d:
                    ad:40:e9:2d:a4:5b:bb:28:dc:0d:73:bd:b6:6c:d9:
                    43:a1:41:89:ae:3f:1c:7b:99:c3:47:f6:07:5b:f0:
                    66:3c:99:9c:52:db:fa:cd:4a:27:9f:e0:db:c3:94:
                    f0:90:48:f7:b2:2e:2d:b7:34:07:54:c7:e2:47:61:
                    af:c2:69:14:5a:7b:ba:ac:e5:ec:75:90:fd:c4:21:
                    a3:84:f6:ae:d4:79:80:3a:e4:1c:cb:6b:43:85:d1:
                    de:7b:f1:c9:2b:06:53:28:1f:f2:b4:8e:49:71:64:
                    77:f5:ae:b8:d0:fb:ef:30:90:c4:4c:c4:bc:f4:20:
                    62:62:e9:55:5b:15:4e:34:28:1d:83:2e:b9:df:e4:
                    8e:21:6a:46:4d:14:b6:24:e8:5e:7c:0c:1b:fe:d2:
                    30:01:81:2d:03:39:d2:c7:a2:34:24:19:4f:a8:0d:
                    d4:eb:49:a8:c2:99:2b:1a:45:a7:ee:28:d1:c0:d3:
                    f4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DE:17:DC:44:AC:07:22:F0:C6:95:91:B5:1B:4B:DD:18:CE:76:FF
            X509v3 Authority Key Identifier:
                keyid:60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:fa:1e:42:9a:50:44:92:d8:d4:4e:fc:61:7b:e2:5b:e3:00:
         42:88:ef:fd:c9:a3:9c:bb:5f:c1:c5:65:ce:cc:fe:1e:ee:24:
         df:3a:08:c7:db:e1:0d:74:94:c7:c8:ee:1d:8c:ad:dd:e9:23:
         4d:76:e8:25:51:48:74:e8:fa:de:ba:4b:a4:e1:be:be:0f:33:
         14:2a:29:55:60:18:44:d6:d6:f9:c6:ce:97:31:32:6b:10:7e:
         1d:dd:d5:bb:c7:4f:1c:e3:6f:e3:c1:a0:b2:72:88:e9:f6:8f:
         6c:db:2e:84:28:91:c5:38:91:72:8e:8a:53:3b:6c:74:57:47:
         1f:6f:a9:ed:b4:aa:5d:3c:52:86:d7:a5:7a:6b:be:25:61:ec:
         7d:55:70:92:08:fb:bb:67:ed:90:9b:b0:4b:0d:b0:e4:af:18:
         3f:19:20:de:6b:ac:e6:69:cf:5b:05:8c:3c:97:1e:17:b8:df:
         ec:bc:96:99:95:0f:0a:92:e1:0e:0d:45:bf:ec:b3:93:8f:21:
         24:17:d7:dd:81:60:a7:c7:51:81:c9:19:d2:6a:4e:97:fc:5e:
         fd:b0:fc:34:04:52:79:52:ab:c4:69:32:89:c0:33:10:0c:30:
         8d:1e:e3:e0:e8:9e:15:bc:ba:e4:4f:58:18:c4:fa:f8:10:18:
         d7:ef:26:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:09 2026 by rpki-client