Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
File:                     YboL58zjgOa7dOPF_OoIHpeZrlQ.mft (raw, json)
Hash identifier:          +EfiAv4V1ZQF0jMRF8PQrx+lD9D8FBAvYP8IGew4oYU=
Subject key identifier:   B1:95:AE:F6:12:C8:A3:71:10:85:04:E7:D5:A8:FD:60:FE:4C:A0:EA
Authority key identifier: 61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
Certificate issuer:       /CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Certificate serial:       019D0E57882CBAC708FD483E345C2C959215
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
Manifest number:          15C2
Signing time:             Sat 21 Mar 2026 03:01:50 +0000
Manifest this update:     Sat 21 Mar 2026 03:01:50 +0000
Manifest next update:     Sun 22 Mar 2026 03:01:50 +0000
Files and hashes:         1: 63PrN8mXH55oBJX7rIWVabUHvQ8.roa (hash: pZ+Bby5HjRIxKd0d8Pj3TvHaCe/jpasI4E0danVgwOc=)
                          2: VFxdBR1dDp8JOaA1PwgX0ZNJHzY.roa (hash: 6wRzyykqCCxdI4kZ8Ht7eIQbCtfAS/CYcPHcXOqhj1U=)
                          3: YboL58zjgOa7dOPF_OoIHpeZrlQ.crl (hash: 7Lfudit2dwgdg1JMriEa3dZZVvlLJbDbrKvVPEnDqzo=)
                          4: wMe5BRxHj63l88AX7uqgxLFEk3g.roa (hash: FNreVADMygUCDT7FyB7Y998XcQmAqj39+EJa5oP6CCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Mar 2026 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:0e:57:88:2c:ba:c7:08:fd:48:3e:34:5c:2c:95:92:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
        Validity
            Not Before: Mar 21 03:01:50 2026 GMT
            Not After : Mar 22 03:01:50 2026 GMT
        Subject: CN=b195aef612c8a371108504e7d5a8fd60fe4ca0ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e6:d2:23:c2:c0:6b:02:1c:48:b6:81:df:b8:
                    cb:96:ea:e3:b5:2a:e3:22:a5:ce:18:6c:30:a6:2c:
                    c5:10:de:40:66:97:15:dd:8f:32:84:f3:ff:43:8d:
                    15:d3:78:1e:40:75:3b:0c:07:94:6f:80:09:d0:c0:
                    c1:67:c5:7a:1a:9b:eb:1d:cf:17:cf:49:96:6e:cd:
                    3b:21:da:73:ef:87:46:88:6f:73:4e:53:0f:2c:f0:
                    46:c8:48:f1:4e:df:6f:3f:93:0b:7a:bf:ce:e0:7b:
                    30:55:09:c6:09:b2:9e:ef:fb:eb:a5:52:2b:a5:b6:
                    ca:3e:53:a3:2f:95:3b:f4:d8:86:7e:d7:ec:b9:1e:
                    0e:b7:b5:45:50:eb:30:ee:73:78:32:5b:cd:db:48:
                    0a:5c:5c:4a:d5:94:30:37:c3:2b:3e:06:0e:54:1c:
                    35:6d:09:ad:5e:08:46:96:9e:e8:42:e3:ff:e5:42:
                    d0:c0:d2:93:99:42:2c:42:a4:dd:cf:bd:f5:85:d1:
                    9d:40:f8:03:ff:45:97:22:13:0f:91:e9:06:5d:b6:
                    b7:91:2a:f6:5f:79:a3:8d:13:54:10:1a:68:a3:34:
                    8d:51:68:33:0b:0e:d1:b1:b6:37:ad:9e:78:de:0a:
                    1d:98:6c:8f:a3:dc:1a:cf:e4:38:a7:28:02:1b:ae:
                    c4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:95:AE:F6:12:C8:A3:71:10:85:04:E7:D5:A8:FD:60:FE:4C:A0:EA
            X509v3 Authority Key Identifier:
                keyid:61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:de:79:2c:6c:b7:c9:fe:ea:4c:25:7d:ae:b1:1c:25:34:1f:
         bc:c0:02:b0:03:e1:ad:82:4c:fc:93:fa:fc:2c:1b:95:33:ba:
         6d:a0:a1:6b:2e:55:8b:9c:84:85:86:80:85:60:6d:62:2d:7d:
         2d:99:ef:9b:9b:27:44:50:5d:59:42:82:d7:d8:63:71:c5:84:
         c3:b7:cc:30:15:fd:43:95:0f:88:bd:ea:44:6c:76:2f:a7:93:
         9d:55:ac:d4:23:1b:a7:0a:91:fb:a7:2b:68:7d:9d:78:b1:00:
         67:eb:9e:df:bf:99:5c:8a:e4:db:b2:1a:a6:5d:1c:e1:12:b1:
         7b:10:c5:b5:98:3d:c1:79:94:15:ec:b6:b5:b8:55:99:d3:2f:
         a5:e3:98:8b:09:33:2e:a7:f2:3c:e0:a3:92:52:8b:c5:08:aa:
         79:ef:c4:e3:2d:4a:e6:e7:de:e8:3c:2d:d5:a0:48:a5:9a:3b:
         6d:ac:f1:e4:c8:48:59:36:f9:f9:11:3e:4e:cd:a0:0c:6d:1c:
         d1:16:38:1e:38:71:b3:e5:b6:31:d4:9d:5a:51:77:a0:d5:95:
         59:41:b3:73:38:fd:11:56:79:19:56:01:55:5a:35:ab:49:02:
         59:31:90:fd:ee:e4:77:01:e0:a0:c2:57:d8:4c:7e:c8:70:84:
         16:1f:c4:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0OV4gsuscI/Ug+NFwslZIVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYmEwYmU3Y2NlMzgwZTZiYjc0ZTNjNWZjZWEwODFlOTc5
OWFlNTQwHhcNMjYwMzIxMDMwMTUwWhcNMjYwMzIyMDMwMTUwWjAzMTEwLwYDVQQD
EyhiMTk1YWVmNjEyYzhhMzcxMTA4NTA0ZTdkNWE4ZmQ2MGZlNGNhMGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtubSI8LAawIcSLaB37jLlurjtSrj
IqXOGGwwpizFEN5AZpcV3Y8yhPP/Q40V03geQHU7DAeUb4AJ0MDBZ8V6GpvrHc8X
z0mWbs07Idpz74dGiG9zTlMPLPBGyEjxTt9vP5MLer/O4HswVQnGCbKe7/vrpVIr
pbbKPlOjL5U79NiGftfsuR4Ot7VFUOsw7nN4MlvN20gKXFxK1ZQwN8MrPgYOVBw1
bQmtXghGlp7oQuP/5ULQwNKTmUIsQqTdz731hdGdQPgD/0WXIhMPkekGXba3kSr2
X3mjjRNUEBpoozSNUWgzCw7RsbY3rZ543godmGyPo9waz+Q4pygCG67ENQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGVrvYSyKNxEIUE59Wo/WD+TKDqMB8GA1UdIwQY
MBaAFGG6C+fM44Dmu3TjxfzqCB6Xma5UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWJvTDU4empnT2E3ZE9QRl9Pb0lIcGVacmxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hMmUzN2QtNGJhNS00MTY1LTlmZDIt
MjEwZDQ4MmE0YjkzLzEvWWJvTDU4empnT2E3ZE9QRl9Pb0lIcGVacmxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9hMmUzN2QtNGJhNS00MTY1LTlmZDItMjEwZDQ4MmE0Yjkz
LzEvWWJvTDU4empnT2E3ZE9QRl9Pb0lIcGVacmxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJt55LGy3
yf7qTCV9rrEcJTQfvMACsAPhrYJM/JP6/CwblTO6baChay5Vi5yEhYaAhWBtYi19
LZnvm5snRFBdWUKC19hjccWEw7fMMBX9Q5UPiL3qRGx2L6eTnVWs1CMbpwqR+6cr
aH2deLEAZ+ue37+ZXIrk27Iapl0c4RKxexDFtZg9wXmUFey2tbhVmdMvpeOYiwkz
LqfyPOCjklKLxQiqee/E4y1K5ufe6Dwt1aBIpZo7bazx5MhIWTb5+RE+Ts2gDG0c
0RY4Hjhxs+W2MdSdWlF3oNWVWUGzczj9EVZ5GVYBVVo1q0kCWTGQ/e7kdwHgoMJX
2Ex+yHCEFh/Eow==
-----END CERTIFICATE-----
Generated at Sat Mar 21 04:56:01 2026 by rpki-client