Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
File:                     YjUmrZ--xXT6TsPZuttUM_2qyns.mft (raw, json)
Hash identifier:          v71/o2ZZRFWJOv9xUOnAn53eMGnBnn3o/g5xK+Rci/A=
Subject key identifier:   99:12:37:5B:4A:C8:03:FC:D5:4C:FF:A6:80:06:04:7F:E6:C7:BD:B7
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Certificate issuer:       /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial:       019D39AEFC1388930CFB8598BB3D6DA5BC16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
Manifest number:          0EA6
Signing time:             Sun 29 Mar 2026 13:01:02 +0000
Manifest this update:     Sun 29 Mar 2026 13:01:02 +0000
Manifest next update:     Mon 30 Mar 2026 13:01:02 +0000
Files and hashes:         1: 4Mc33bIPqXNt0WBKTY6IWbhZhyI.roa (hash: 0CyjN4fDt2gePEzz6GNI+6v2hHdu94zd3doXA9mCmrY=)
                          2: P5w8UdbfAfDa1DxOi4VrhWTzLpM.roa (hash: +0DQfwomOYLD75ppkH2FpMEhDzxTGpHuszvhO6Ri7kw=)
                          3: YjUmrZ--xXT6TsPZuttUM_2qyns.crl (hash: 94KgnyCdPIQMmrdaC1cV84bF7NbgZrRRZnF7ry8QSVc=)
                          4: i2ZN82VS7VSqjYAHCBTpFBgLiEo.roa (hash: gw1xxGQ0BqeQr6XFI4+gKsjUN/m1I0WJsAj9BQrH0uA=)
                          5: v5XfI_EgEYDKfXz7O68-YeUVqdQ.roa (hash: kvZ5cVMi6mO1HeA+gU60JgsRwkpMJcWiJ8FVL2dSw7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:ae:fc:13:88:93:0c:fb:85:98:bb:3d:6d:a5:bc:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
        Validity
            Not Before: Mar 29 13:01:02 2026 GMT
            Not After : Mar 30 13:01:02 2026 GMT
        Subject: CN=9912375b4ac803fcd54cffa68006047fe6c7bdb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:15:be:5e:46:c6:ad:18:e0:df:80:05:af:94:
                    9c:12:81:6b:f1:72:fb:44:c9:78:c6:82:b6:b5:96:
                    15:3d:ec:07:b0:98:e2:90:01:4a:73:4f:95:46:5b:
                    06:27:15:2f:0b:30:8e:3f:fd:71:33:41:20:65:5b:
                    f7:b3:26:da:cd:66:f8:3c:a2:8b:47:e7:57:b6:95:
                    90:6a:6b:31:e1:cf:e9:5e:eb:33:81:02:37:6e:4d:
                    37:a4:c5:71:8f:d3:e5:71:c9:e8:e2:c9:0e:bc:15:
                    00:67:fd:d5:8c:41:50:a5:fc:39:de:c5:3a:2a:6b:
                    62:6c:85:4f:6a:44:0a:ca:60:c0:0e:0b:8b:e2:31:
                    31:47:fd:66:7d:35:7c:ec:2d:5c:61:4c:b5:c5:37:
                    f7:3c:1c:3c:ee:f7:9e:82:26:c0:95:b8:09:a7:b3:
                    60:d9:50:c0:ff:0c:c2:8b:34:72:5a:f6:63:9b:0c:
                    0b:00:11:dc:71:59:b6:60:66:b8:a2:c4:d0:26:f8:
                    58:e3:d7:24:ff:99:f2:90:1e:d2:bb:ea:10:f5:f6:
                    51:93:7b:64:2a:5a:06:4c:48:77:a7:92:da:76:53:
                    88:1e:45:75:0e:f7:74:88:40:23:2d:8d:44:2d:53:
                    55:a8:5a:5c:5c:7d:b4:fa:da:10:52:95:4a:13:5f:
                    83:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:12:37:5B:4A:C8:03:FC:D5:4C:FF:A6:80:06:04:7F:E6:C7:BD:B7
            X509v3 Authority Key Identifier:
                keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:9a:f9:b8:5a:9a:4a:8a:4f:63:51:28:b7:d7:c2:d1:96:ce:
         1b:3f:b6:38:a1:33:0b:d4:ae:49:92:c3:ab:78:78:34:2d:2d:
         5c:f6:35:bc:e3:93:f4:db:51:b5:46:dc:11:99:33:d5:cd:4e:
         28:2a:64:9f:01:8c:8d:e9:04:b9:07:75:3d:02:65:aa:65:cd:
         b5:15:4a:81:b5:33:f5:d1:98:0d:c7:09:bf:90:da:13:22:e2:
         4b:8f:17:52:b0:bc:52:40:5c:62:8a:6d:c8:b4:74:55:cc:6b:
         5f:46:23:28:61:7d:2d:bb:86:05:37:f7:9a:f3:da:97:06:25:
         a4:e1:6c:1f:3a:0d:80:95:f2:0e:83:5f:85:69:b1:ab:34:89:
         8a:d1:56:c4:e3:11:5c:dc:e4:9e:b7:39:ac:43:7c:57:fe:13:
         72:76:d5:89:0c:ea:5c:ea:21:7e:98:03:2a:c5:83:69:db:82:
         a7:73:62:28:3f:4f:2f:80:54:69:cb:40:8d:6d:47:37:4c:14:
         cd:03:59:45:51:2d:7e:37:8a:0d:bf:9f:fe:31:bf:9d:0f:61:
         86:a5:0e:bb:52:58:01:f4:7f:a0:be:c3:c0:5c:6c:d5:2f:f3:
         4b:d6:05:c1:a6:11:cc:ee:63:a5:5f:f0:9b:bb:df:bf:55:ff:
         2e:2c:ea:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:51 2026 by rpki-client