Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
File:                     yYuCXzbpzDMDFclA3oAMurzjOXs.mft (raw, json)
Hash identifier:          HxpdzgRE4uq53dw/EbL0xjbMF+93gD5P9pjJrFfWtz8=
Subject key identifier:   A1:E2:DD:D3:20:25:2C:81:F2:29:A3:78:45:3D:B1:35:CA:9C:FD:19
Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Certificate issuer:       /CN=c98b825f36e9cc330315c940de800cbabce3397b
Certificate serial:       019D37F6E8EAC51B2B9CA15A2CD08996A4A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
Manifest number:          14A1
Signing time:             Sun 29 Mar 2026 05:00:21 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:21 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:21 +0000
Files and hashes:         1: BIg9g8urjWzblnNO_lVEgCU_0L4.roa (hash: Zkf0cuxdTPBJNDfyoYR/TqE/qjZVNjVMgcTyzgopEr0=)
                          2: Iphm7z7updBWRc2PNItoZmhVxuU.roa (hash: ld3zzmRGDXodfmUypvYiol82dEtF61c0SzZg6YzCfrA=)
                          3: T0TpEfENHz0bxlptxB0nFINW90A.roa (hash: TVxTNouu1BfDbucKooEPdLrXN8aLRFVGM4/IuDaxZE0=)
                          4: hRup2JJMWBOF-WiIMoiCnCzzApo.roa (hash: /227YrF7k3BWfB+D58mu+onRUSZxRqZuv9vNnJFuS4M=)
                          5: tSkM6kNefyzWcq-Fe_mE4IRCVaE.roa (hash: 2epHrxdOpaEpNiQeQg138M3TB4rHHEC4AOBSXw7Qyrk=)
                          6: yYuCXzbpzDMDFclA3oAMurzjOXs.crl (hash: +D2ngpNsfl22YGguVFRGmhOwKKMdSCHNl7sPS/O1mqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f6:e8:ea:c5:1b:2b:9c:a1:5a:2c:d0:89:96:a4:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b
        Validity
            Not Before: Mar 29 05:00:21 2026 GMT
            Not After : Mar 30 05:00:21 2026 GMT
        Subject: CN=a1e2ddd320252c81f229a378453db135ca9cfd19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b4:76:c8:55:07:6f:87:ef:2c:aa:a5:66:46:
                    30:3e:31:d0:71:61:63:6f:a0:4d:96:d5:27:d6:07:
                    da:55:f3:7f:63:76:57:38:ee:61:5c:83:9c:06:75:
                    e2:46:5b:9c:6a:64:65:62:a8:f8:7e:25:86:30:ed:
                    af:bf:cf:39:34:81:21:17:19:eb:b3:7b:6e:27:ef:
                    e7:2e:e3:bf:0a:dc:5f:a4:80:10:39:7d:6e:1f:70:
                    4b:e5:68:a5:52:d4:9c:0e:a5:dd:05:c9:b1:78:70:
                    76:71:09:0f:77:2c:84:68:01:04:8e:47:20:64:9b:
                    4e:20:82:b8:e7:28:ed:47:50:d9:0b:46:7c:16:0c:
                    a0:38:ca:d2:e8:bf:64:7c:be:66:c3:3a:2e:1c:41:
                    83:47:4e:be:47:62:62:83:66:f7:de:cb:36:b9:6f:
                    a7:f0:f9:b0:46:bf:f3:bc:83:60:07:a2:78:b7:36:
                    00:a8:cb:31:51:26:82:07:b6:c1:33:06:18:d4:a0:
                    96:44:15:92:af:2c:09:29:6d:96:c5:2a:de:38:d2:
                    54:8d:34:b8:76:3f:06:31:43:8f:92:2f:9b:a6:9f:
                    43:91:c2:04:eb:d3:c3:4c:1d:ac:c8:e4:98:dc:46:
                    0a:29:11:15:eb:66:b6:63:a2:38:a1:56:5a:5e:7a:
                    82:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E2:DD:D3:20:25:2C:81:F2:29:A3:78:45:3D:B1:35:CA:9C:FD:19
            X509v3 Authority Key Identifier:
                keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:14:52:a3:4c:51:72:35:58:67:4d:2f:39:6b:c0:c7:68:84:
         00:73:fb:de:87:94:0f:bc:d1:bd:cf:10:c6:33:e0:e4:6e:05:
         e3:43:d5:0a:d7:75:29:88:70:9d:3b:28:b5:95:78:d9:ae:79:
         9a:b4:c9:18:41:9c:ba:27:41:a0:7a:3c:ea:e6:74:80:c8:6d:
         b8:86:4c:dd:db:3a:96:ae:0a:dd:01:05:3d:cf:4e:0f:a4:4a:
         8f:fa:a6:6b:d9:cb:f3:42:aa:24:eb:de:d2:e3:4f:78:c3:d0:
         c2:d1:df:a2:35:b2:e5:a5:a8:ef:9c:61:fc:0c:f2:fe:b8:98:
         51:a9:d6:93:2c:cd:a5:3e:e3:b9:50:ab:a8:e4:fe:05:d2:9b:
         52:ee:9a:c9:90:28:91:6d:42:2a:9d:fe:68:d3:8c:fc:55:c3:
         91:ba:a1:3d:d7:64:14:8e:d7:9d:6b:e2:66:ea:22:d7:30:d8:
         ec:95:db:f9:95:d8:69:ec:4d:94:d1:37:8b:ae:d3:a1:a7:5b:
         dc:40:34:f4:5d:93:56:65:08:bd:7a:f9:4e:d6:81:12:6e:8d:
         77:39:d4:b2:2d:51:99:be:eb:ff:e5:51:33:38:33:e2:c7:81:
         02:6f:5a:8d:b4:80:61:4e:6c:c8:45:de:07:93:52:c5:f2:33:
         4e:14:bb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:24 2026 by rpki-client