Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
File:                     yteUrGAc4lBbZfl1p9UWovAKWzE.mft (raw, json)
Hash identifier:          4tbcLWqU6/p2GH3L+qdmMEXz1t8mNtIR+h5B8w+jzD8=
Subject key identifier:   2E:67:7D:33:AA:BC:4D:CB:4D:95:3F:EA:5B:4B:C9:4F:EF:D5:19:36
Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Certificate issuer:       /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Certificate serial:       019CC606C1E1F44372EEBE1D10E230C96E96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
Manifest number:          185E
Signing time:             Sat 07 Mar 2026 02:00:57 +0000
Manifest this update:     Sat 07 Mar 2026 02:00:57 +0000
Manifest next update:     Sun 08 Mar 2026 02:00:57 +0000
Files and hashes:         1: HqGTGlJNCwD8iNo3O2yITxmeCwc.roa (hash: lYCD20DI0iQge3ODQugwP5cP7vicqwIE+12AsMdZEFg=)
                          2: PZTHXJOe6Rub2_B35Qp_XWm1nCI.roa (hash: ECesKQ6eT4CAViBPjtKG3epmntO2VSEJzUCQqkLEU1U=)
                          3: aFAces1pfL2Gf7A82Ua9HdY5M_8.roa (hash: ihoy12eYWp6w4F3+SZfOyRsI/MGwgD7ZEiY1ooLQCpo=)
                          4: aPG3EYw2VofOCEzLOdUvwSZioag.roa (hash: Wotu54IXEWdJ5q1KogRg82/7w2mseyamEfZGS9yMPLs=)
                          5: sR1oPQtW-Makp0q2GEwGGGWP6-4.roa (hash: 42QylWBVPcRn+sQtIzfk5m8WJP9tWYlxV8MBA5fdb50=)
                          6: uNpGJTkDf9vfyQ-rWsMHOZPhKY4.roa (hash: DmupEvIL4K/NQQ7P0WNq04y0+5V0bCdj/6N1toh/r7g=)
                          7: yoOlkunfyIDQIpu8hSJPuV67N8k.roa (hash: 3vGjw6ITVAmFgqvDm6vNVM3T1UQ++9p2OwqdlJ0wKCw=)
                          8: yteUrGAc4lBbZfl1p9UWovAKWzE.crl (hash: uXgfWaoRcPglP6Cus9Yg/B7DyxNdFVfs42H5YkjSlFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 02:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c6:06:c1:e1:f4:43:72:ee:be:1d:10:e2:30:c9:6e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
        Validity
            Not Before: Mar  7 02:00:57 2026 GMT
            Not After : Mar  8 02:00:57 2026 GMT
        Subject: CN=2e677d33aabc4dcb4d953fea5b4bc94fefd51936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:0f:22:13:cf:54:f3:e6:49:77:df:6a:21:1d:
                    b7:9e:4d:f3:7d:24:a3:5d:06:7f:bd:2d:4b:9f:20:
                    e8:b6:57:85:a5:0f:54:ea:6b:ee:32:35:46:66:31:
                    ed:89:6b:ed:51:fc:10:47:42:99:c5:3e:78:f1:c1:
                    77:d8:61:44:aa:d2:9f:83:73:95:45:da:2f:0a:85:
                    4f:82:7c:0c:76:f8:cb:a0:22:1d:11:16:48:8d:c9:
                    d0:49:46:44:3a:6e:33:e3:f7:8d:fd:98:0b:45:a4:
                    41:b1:8e:0d:3d:3d:47:46:92:7d:65:da:09:c1:54:
                    ad:12:7f:0c:a6:02:f8:8a:4f:46:8a:70:2e:b7:2a:
                    1e:71:3e:ee:48:bf:a9:67:59:4e:95:f2:11:89:4c:
                    34:6f:a0:1c:53:9e:93:ae:5c:fa:9c:d0:fb:a6:97:
                    5f:ab:fc:23:6f:0b:1b:05:71:0e:d9:52:1c:8e:6d:
                    7f:6b:da:25:9c:02:e9:2d:f0:e5:61:b2:4e:5b:83:
                    a9:ff:2b:b6:57:98:9b:d7:c8:d9:d2:d6:7d:8f:d1:
                    5b:aa:3a:df:37:69:47:d5:7b:4e:f5:e0:cb:dd:42:
                    17:30:45:d0:b6:4a:c2:3b:c2:ca:5a:9b:a0:47:3d:
                    a5:ec:07:62:c7:3f:91:9e:e6:84:da:92:44:18:2d:
                    40:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:67:7D:33:AA:BC:4D:CB:4D:95:3F:EA:5B:4B:C9:4F:EF:D5:19:36
            X509v3 Authority Key Identifier:
                keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:86:5b:68:af:41:fb:83:43:90:a2:7f:fa:4a:b3:7a:1b:a5:
         93:a3:30:d0:52:20:b8:65:f3:d0:f3:f5:9e:40:5f:8c:15:82:
         d5:d9:62:28:21:95:e2:44:bf:c3:df:5d:18:a9:83:1e:b8:31:
         69:11:d2:7a:b7:b8:46:41:51:04:47:71:4b:83:7b:c7:99:fa:
         a9:23:15:02:0b:91:e8:83:c0:15:d0:3f:d8:dd:6b:57:ff:c9:
         62:1f:da:f1:0a:d4:a7:de:e6:18:5d:e8:62:35:e9:0a:a4:6a:
         07:77:55:bd:6a:cf:d4:0b:ac:2a:ac:04:04:9e:e7:30:55:58:
         1a:6f:e0:14:f5:d6:83:09:05:9f:fe:ff:2d:43:1f:0c:b1:ca:
         ee:d9:fa:8f:0f:e9:08:5a:cb:1f:a0:32:89:03:65:18:78:5f:
         90:12:5e:ae:01:64:4f:d2:29:b8:0e:fe:22:01:88:db:fb:89:
         de:51:68:2d:98:c0:dd:85:a7:7c:c8:cc:b6:7e:df:60:de:a4:
         97:89:42:93:69:f5:4a:51:f4:1d:09:83:3f:32:97:36:60:4b:
         85:3d:06:5a:97:5a:f4:25:d2:0d:d9:f1:76:cb:c5:69:c9:21:
         f9:0f:7a:bd:07:a3:3f:f4:a8:8c:74:bf:5e:4a:d1:17:43:39:
         94:1c:a2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:44:16 2026 by rpki-client