Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
File:                     1-YoC0gxrfeNXEl84sXNcobkfh7M.mft (raw, json)
Hash identifier:          SOtGNGLBEtWTlNIitXgwNaUE8X1/9nl/0QunNnsGmNA=
Subject key identifier:   BE:31:93:6C:31:F5:EE:3A:26:55:D7:32:57:5D:FE:25:DA:6B:E9:3D
Authority key identifier: F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
Certificate issuer:       /CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Certificate serial:       019CF50495DF0E290568F4BD0DB875FF30E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
Manifest number:          164B
Signing time:             Mon 16 Mar 2026 05:00:44 +0000
Manifest this update:     Mon 16 Mar 2026 05:00:44 +0000
Manifest next update:     Tue 17 Mar 2026 05:00:44 +0000
Files and hashes:         1: 1-YoC0gxrfeNXEl84sXNcobkfh7M.crl (hash: 6QB6yqS7VSZO+zR/FIhKYMNxoOM0xPoiHM0t2VSgB5o=)
                          2: 1lUz7Shr8fMa_pb6NtzznyZ41To.roa (hash: C1rnmJ3xKxL7Gseh79+XfFJXuiu5gmvcrxIosMgQNT4=)
                          3: 49ww4rPn3g7MqsmGfDqf0YpDy8s.roa (hash: fAAcaoMC+CvPBu2Hms/Nf/sHfWr9TponmPW+VL5Kk7Q=)
                          4: HkXjWGsEB_nzvxNHP8dGv7MAq7Q.roa (hash: 1xbJ8+wmJvUYu+3DXk9VVxz7EgtP35YeVUeb75i94aM=)
                          5: o8qBYm0XB-DKW0l9z4LxLJjVMt8.roa (hash: 6+/jpm9f+1fc/q145oBtk8Pmiq4grW2fLOR+zKT6VOc=)
                          6: vwVgz0AlWqP316EcZY-4ylK0yIA.roa (hash: FuDRoo1XnKDsM6Yjjqt7YCB9VBp4VwF44kzWhYXP7o4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f5:04:95:df:0e:29:05:68:f4:bd:0d:b8:75:ff:30:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
        Validity
            Not Before: Mar 16 05:00:44 2026 GMT
            Not After : Mar 17 05:00:44 2026 GMT
        Subject: CN=be31936c31f5ee3a2655d732575dfe25da6be93d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:e5:c1:de:85:17:80:c4:10:13:14:39:f1:
                    0e:38:0d:fd:ff:18:94:05:b2:1e:98:0e:5c:b5:12:
                    60:89:41:ed:48:ad:fc:bc:46:83:16:cc:c8:17:b3:
                    c3:a7:b9:7b:bd:05:cc:b7:25:82:1a:10:64:44:78:
                    7f:b9:92:bc:1f:24:cd:6e:2b:09:dd:ea:cf:c5:38:
                    c5:f7:aa:28:0a:4c:8d:f7:6a:e0:52:21:43:b9:f5:
                    bc:9e:0a:64:3f:a9:73:ed:ab:57:04:08:01:5d:de:
                    59:4c:a1:6a:26:89:2f:25:20:8c:b4:5a:96:9d:00:
                    47:dd:5f:bd:3e:f8:78:40:3f:5d:60:e7:e1:8d:80:
                    1b:fd:0e:0f:11:11:39:33:f4:07:a1:eb:db:f5:6c:
                    21:bd:87:b5:09:86:48:b4:69:b5:5d:7e:c5:73:c9:
                    53:1b:7c:a4:c0:33:9a:ce:6e:c9:2a:d5:e0:7b:cf:
                    5f:2e:f0:17:e1:00:df:a0:40:17:fc:0d:66:00:e2:
                    2b:9d:2a:85:1e:fc:c2:86:49:69:84:c0:6f:1e:f1:
                    af:59:56:35:20:7d:b3:81:1c:c8:82:a8:f9:da:0f:
                    8d:06:db:a5:71:b1:a0:31:da:0a:cb:5c:4a:b6:1c:
                    05:c5:84:37:4e:6b:a0:a0:1e:8d:d8:82:ae:ae:74:
                    f7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:31:93:6C:31:F5:EE:3A:26:55:D7:32:57:5D:FE:25:DA:6B:E9:3D
            X509v3 Authority Key Identifier:
                keyid:F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:f6:8d:82:1c:6c:1e:04:65:ef:ba:0b:a5:a2:b8:b4:64:d9:
         ed:9d:29:97:51:fd:2b:7d:36:03:e3:30:4f:01:fb:19:6e:7c:
         15:2d:92:22:ce:73:3e:de:52:5a:0f:10:06:1d:ce:c7:c4:95:
         16:d1:85:27:65:b7:56:47:ac:d7:b3:0b:42:1e:80:e3:5e:49:
         a5:64:35:f6:c8:f5:a1:cc:ee:78:4d:39:3d:a2:b7:5a:14:b3:
         77:be:3e:30:f0:4c:21:88:2f:da:1f:59:7d:6c:33:99:96:f9:
         f5:28:d0:65:74:02:fd:5f:53:9b:01:98:a5:3e:0f:7e:57:56:
         7b:bc:dc:a3:b4:b5:f6:39:36:6c:8d:3a:37:e8:42:25:91:90:
         40:e6:32:c6:cf:30:06:0f:08:99:41:f5:c1:24:13:5c:3a:bd:
         52:f1:4e:c5:1f:d5:87:37:e8:31:5b:6f:b5:89:af:78:5a:94:
         23:c1:43:f0:c7:fc:db:4f:7b:9c:92:c9:83:a5:72:ec:04:eb:
         e7:09:5d:ac:45:53:8f:aa:ad:87:48:27:b7:7d:ba:3a:22:9e:
         ed:f8:d9:62:51:a7:7f:8c:77:a5:7d:6b:8c:b8:24:b5:2d:2e:
         6b:2f:70:e7:8b:33:ff:4d:e9:7b:60:37:3b:0d:28:f3:14:d9:
         3a:11:ee:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 09:34:17 2026 by rpki-client