Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
File:                     mYS56xIiNxEcH4yldwfscwcpHug.mft (raw, json)
Hash identifier:          y28IaaCvFvk0puqGdzbpQqm6Blnrm+Hn/je8mQDOcns=
Subject key identifier:   C8:14:C6:A0:C9:0C:BD:B9:FC:5D:E9:09:D4:2D:2C:23:9B:40:93:2E
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Certificate issuer:       /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial:       019CE5C90E0CDFE696970AFC173DD879002D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
Manifest number:          186A
Signing time:             Fri 13 Mar 2026 06:01:24 +0000
Manifest this update:     Fri 13 Mar 2026 06:01:24 +0000
Manifest next update:     Sat 14 Mar 2026 06:01:24 +0000
Files and hashes:         1: 1-M17FsedROaF_Kne-5Hqf60_ZF0.roa (hash: dEdEroRDmqUptgIx5X9EfWXuPhIB2SKqFgAL57TKHAs=)
                          2: WMPpPZf121FGb5nB2wRyHO8v-RI.asa (hash: mKLFbSlwYIzmMfnFA89CJdrlniFC0Y+HVLJcXPAW800=)
                          3: iOPKRCMcUAyvxDbxa94mSh4aVLQ.roa (hash: 853t8WhJ4kw5HbkYp7EUF9CdroSNYLBypKw+/lvJndw=)
                          4: mYS56xIiNxEcH4yldwfscwcpHug.crl (hash: XRuqn7sx4qydDqH739LpcoVAJfMMfc5YBRekPdJezgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 06:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:c9:0e:0c:df:e6:96:97:0a:fc:17:3d:d8:79:00:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
        Validity
            Not Before: Mar 13 06:01:24 2026 GMT
            Not After : Mar 14 06:01:24 2026 GMT
        Subject: CN=c814c6a0c90cbdb9fc5de909d42d2c239b40932e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6d:66:5a:e6:06:27:70:ec:ab:10:3d:f8:9c:
                    0b:46:4a:73:0d:c0:44:89:dd:5a:85:95:28:f6:4b:
                    28:a0:1e:b9:22:b7:77:33:5b:c0:d3:9a:fc:04:0e:
                    a5:00:8d:ed:39:c3:0e:3d:19:83:c6:00:5a:21:85:
                    a4:2a:36:1b:c1:2e:18:92:a5:b5:2c:3b:28:fb:00:
                    a6:83:ee:44:5f:32:f5:6e:39:86:a7:d8:36:2d:94:
                    d2:54:23:55:2d:96:a4:85:3c:86:76:9e:0b:cd:e0:
                    90:2f:4e:79:41:57:2c:62:c9:56:8e:4d:21:5d:a2:
                    a2:f4:b8:32:28:fd:30:04:d5:cc:03:6a:79:36:d5:
                    c3:cd:1e:52:4d:d3:1f:5f:0e:1d:e0:c5:f2:95:13:
                    5c:c8:9f:aa:57:63:7f:6a:13:56:9a:4a:a5:a4:9a:
                    c3:7e:7d:bf:8c:03:31:8c:20:e9:5a:8c:5c:61:4e:
                    1e:c6:1f:2e:82:28:21:06:e5:ed:20:40:a2:89:81:
                    c4:ea:9e:37:23:de:99:ac:2d:e6:95:0e:3f:6f:33:
                    52:f7:1b:e1:03:86:b8:14:27:68:72:49:f0:42:e5:
                    01:07:fb:18:93:4c:12:80:73:4d:51:41:7b:d8:4f:
                    39:bd:63:2b:22:80:39:91:54:20:05:40:02:4e:39:
                    8f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:14:C6:A0:C9:0C:BD:B9:FC:5D:E9:09:D4:2D:2C:23:9B:40:93:2E
            X509v3 Authority Key Identifier:
                keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:72:4a:47:53:07:0a:ac:30:ff:95:44:25:dd:9b:a1:70:e6:
         12:f3:98:81:24:77:01:3d:99:4e:fc:e4:ef:ce:b8:1b:9c:bd:
         3e:bf:15:dd:0e:1c:eb:eb:26:2b:57:5d:61:4b:f7:21:36:0e:
         da:70:ba:a8:1a:a2:35:57:66:17:fd:d8:5a:2c:46:c3:a4:e4:
         e8:02:d4:2a:e1:4c:70:79:a0:6c:40:66:58:9e:8b:60:99:ed:
         06:88:60:51:56:bd:ac:e9:55:3e:64:37:ca:c2:78:df:54:b0:
         aa:6e:2b:3d:06:ea:48:35:03:4b:25:db:99:db:30:e0:2e:ab:
         c9:b8:c6:dd:08:8c:8d:93:f2:39:f0:41:e8:03:29:59:56:61:
         45:93:2f:dc:9b:93:50:b4:d3:e2:a8:ff:f0:38:3b:1c:f6:6f:
         38:01:9c:12:d3:32:f5:17:83:3e:c5:f0:cc:8e:9a:a2:5c:5f:
         ec:42:32:77:f4:d0:25:b4:61:fd:02:5d:cd:69:2c:e9:2d:88:
         7c:4f:ac:c7:c5:8b:d6:0f:8d:95:8d:c3:93:25:c2:ec:d1:24:
         85:10:66:2f:d1:f9:ed:64:e1:a0:3f:06:88:71:f4:4a:d4:e8:
         7c:fe:94:2e:c2:3c:98:7a:1a:d7:3d:56:dd:1f:e0:7b:0a:41:
         36:d0:02:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:01:24 2026 by rpki-client