Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
File:                     YlDmLARIEp9jWJGKccM0TiWoLZs.mft (raw, json)
Hash identifier:          26uJa5AqcSN8r4QxbESnHalTHIBxMapQRankZne2zuk=
Subject key identifier:   A3:D1:C7:F2:67:9C:FA:AD:6C:B0:A0:56:5A:29:7F:48:C6:3B:A7:20
Authority key identifier: 62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B
Certificate issuer:       /CN=6250e62c0448129f6358918a71c3344e25a82d9b
Certificate serial:       019CE6A46C57C955B271E50B3282E6521F07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
Manifest number:          0212
Signing time:             Fri 13 Mar 2026 10:01:01 +0000
Manifest this update:     Fri 13 Mar 2026 10:01:01 +0000
Manifest next update:     Sat 14 Mar 2026 10:01:01 +0000
Files and hashes:         1: DRO3tCTePWIvKHPgw6pmaXwU0JU.roa (hash: nsXU89cmKGMuchI2BpERlyONOF3QYxV+4FYWi2CIuFY=)
                          2: YlDmLARIEp9jWJGKccM0TiWoLZs.crl (hash: mGBXOx6T5vlCU1EOJTWtn5FJuNDsqfUIAj3D7AGfub0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e6:a4:6c:57:c9:55:b2:71:e5:0b:32:82:e6:52:1f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6250e62c0448129f6358918a71c3344e25a82d9b
        Validity
            Not Before: Mar 13 10:01:01 2026 GMT
            Not After : Mar 14 10:01:01 2026 GMT
        Subject: CN=a3d1c7f2679cfaad6cb0a0565a297f48c63ba720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:28:5e:0d:cb:ab:54:88:d7:11:35:3f:a6:9a:
                    1e:8d:df:9f:c1:92:94:25:fc:cb:05:f7:c5:d6:38:
                    bc:30:a9:9f:0f:c0:0c:e1:6c:e0:9c:d4:b5:40:a0:
                    e3:99:41:2a:03:d4:22:e5:17:d6:64:33:ec:ae:b5:
                    89:f3:98:d4:2e:59:4d:47:a3:46:9e:b6:d9:fd:d8:
                    a4:56:b5:20:73:b1:af:e1:f1:5f:30:6a:af:a1:79:
                    c0:90:88:34:b1:46:15:51:5b:e0:9e:dc:1f:6e:e7:
                    a4:77:53:a0:29:9f:ac:82:aa:45:3c:bf:08:c2:65:
                    47:1c:e8:f6:e0:d0:f6:ab:1f:f2:63:e2:a6:a3:d5:
                    9c:4a:5f:2d:b7:00:20:f0:da:18:6e:8e:a1:53:b4:
                    76:1d:76:8a:f3:84:f3:b7:f4:50:34:df:0c:01:ac:
                    dd:9a:d9:d7:32:e9:5d:b0:97:4b:13:b1:e7:48:ae:
                    98:d6:36:f1:5a:40:e7:65:33:82:ed:eb:ae:c4:46:
                    cc:33:06:d7:42:57:ac:67:4a:be:5d:57:ad:a2:c7:
                    96:51:58:98:d3:b5:a5:88:d2:09:17:e7:bb:1e:80:
                    50:1a:c9:e4:82:31:06:7c:ea:43:3c:6e:38:a3:96:
                    13:90:7d:ea:60:71:91:b1:21:86:6f:30:15:b5:63:
                    31:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D1:C7:F2:67:9C:FA:AD:6C:B0:A0:56:5A:29:7F:48:C6:3B:A7:20
            X509v3 Authority Key Identifier:
                keyid:62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:d1:8f:48:fe:c7:c6:77:d3:a1:1b:ff:50:e5:0d:87:eb:40:
         6e:b4:90:9b:bd:76:cc:19:1e:ab:07:1f:1f:e5:aa:f0:09:d5:
         83:84:da:2e:a0:d5:82:d6:b2:2f:3e:4e:64:e2:66:1d:73:e2:
         16:eb:3c:a4:f8:9d:87:15:34:99:9f:dd:e4:bb:0c:73:2c:8a:
         7f:b4:3a:19:49:20:75:26:c3:a7:b1:da:81:17:e8:68:01:e7:
         3b:08:93:99:81:d2:66:c4:80:44:3e:c2:cb:8a:0d:1e:f2:3e:
         09:48:41:a0:dc:04:e1:30:6f:8b:8f:16:6e:eb:c4:5a:0e:05:
         e7:95:45:ca:5c:fa:b1:09:4f:0f:4e:83:26:ad:b8:07:38:40:
         e8:3b:fb:d6:e2:ba:cd:2e:49:84:48:18:e7:53:91:eb:fc:5a:
         b5:4d:68:81:ee:db:a7:72:d4:09:16:dd:0f:ba:76:3e:e9:90:
         d9:db:ac:77:aa:0b:74:db:48:1c:56:3c:82:ff:0a:db:91:60:
         a2:9c:a3:e2:77:a0:34:04:da:34:dc:92:e7:3c:58:0d:82:84:
         e1:25:a4:a4:05:49:8a:a4:5a:26:d0:f9:c0:7b:b3:bb:29:74:
         4c:5a:67:52:a8:53:e8:11:81:56:d2:7e:a9:be:43:f3:40:8f:
         11:92:24:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:53:42 2026 by rpki-client